PHP Weak Random Number Seed Vulnerability

Wednesday, May 7th, 2008

Since version 4.2.0 PHP automatically seeds the random number generators on the first usage of rand() and mt_rand(). This is done with the help of the GENERATE_SEED() macro. Unfortunately it was discovered that the GENERATE_SEED() macro contains several problems that can lead to a weaker seed than expected. In the worst ...

Posted in Coding, PHP, Security | No Comments