Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #15060 Ban usage of non crypto secure/user-space RNG
    Actions
    Infos
    #15060
    Thomas Gerbet (tgerbet)
    2020-07-03 10:30
    2020-07-02 18:27
    16329
    Details
    Ban usage of non crypto secure/user-space RNG
    PHP comes with two proper functions for this usage: random_int() and random_bytes().

    Other functions like rand() are a footgun and should be avoided.

    The only situation where you could have a valid usage of them is when you need a seeded RNG but even in this situation using something in the spirit of https://github.com/paragonie/seedspring would be a better call.
    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-07-03
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #14817 Tuleap Releases 11.17 Delivered 2020-07-23 10:57 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #15060

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/16/19416/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 91e00fa8eb
    User avatar Marie Ange Garnier (marieange) , 2020-07-03 10:29
    request #15060: Ban usage of non crypto secure/user-space RNG 298081e924
    User avatar Thomas Gerbet (tgerbet) , 2020-07-02 19:29
    Referenced by request #15060

    Artifact Tracker v5

    rel #14817 11.17

    Other

    gerrit #19416
    Display settings

    Follow-ups