Re: [PHP-DEV] Re: Crypt salts not random.. (fwd) From: Zeev Suraski (zeev <email protected>)
Date: 04/29/01

How did you arrive to the conclusion that the current crypt() salts are not
random?

At 11:27 29/4/2001, Jani Taskinen wrote:

>Well, what's the deal with this? Sascha?
>
>--Jani
>
>
>---------- Forwarded message ----------
>Date: Sat, 28 Apr 2001 15:05:08 +0200
>From: Andi Gutmans <andi <email protected>>
>To: Jani Taskinen <sniper <email protected>>
>Subject: Re: Crypt salts not random..
>
>At 06:17 AM 4/28/2001 +0200, Jani Taskinen wrote:
>
> >One thing I had in my mind about these random numbers..
> >Why don't we use the seedMT() and randomMT() funcs everywhere
> >instead of the system provided ones? If I have understood
> >correctly these would give more random numbers and are even
> >faster than any of the system provided ones? Or have I missed
> >some important thing here? :)
>
>I really don't know this random stuff too well. It looks to me as if we
>could use the MT stuff but I'm not sure what the considerations are.
>
>Probably Sascha Schumann has a better idea. I also suggest php-dev :)
>Andi
>
>
>--
>PHP Development Mailing List <http://www.php.net/>
>To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
>For additional commands, e-mail: php-dev-help <email protected>
>To contact the list administrators, e-mail: php-list-admin <email protected>

--
Zeev Suraski <zeev <email protected>>
CTO &  co-founder, Zend Technologies Ltd. http://www.zend.com/

-- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: php-dev-unsubscribe <email protected> For additional commands, e-mail: php-dev-help <email protected> To contact the list administrators, e-mail: php-list-admin <email protected>