Timeline for Am I using crypt and mcrypt well in this simple encryption class?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 23, 2017 at 12:41 | history | edited | CommunityBot |
replaced http://stackoverflow.com/ with https://stackoverflow.com/
|
|
| Sep 18, 2014 at 15:24 | vote | accept | lorenzo-s | ||
| Mar 30, 2014 at 15:54 | comment | added | luiscubal |
@lorenzo-s Please consider using SSL random pseudo bytes, if available, or reading from /dev/urandom. Rely on the other options (mt_rand and microtime) only if really necessary. Better safe than sorry.
|
|
| Sep 26, 2012 at 22:30 | comment | added | lorenzo-s |
Thank you @luiscubal for your remarks. It's all little changes I can do without class skeleton modifications and, most important, without break compatibility for already-used cases (that means, ok, salts and IVs will be better than previous from now, but old stuff will continue to work with updated class too). I will try to use mt_rand() with no args (that means, 0 to 2^31 on 32 bits systems) instead of rand(0, 1023) and microtime() instead of time. I think that will be sufficient.
|
|
| Sep 26, 2012 at 21:33 | history | answered | luiscubal | CC BY-SA 3.0 |