Securing PHP Apps by Ben Edmunds

Author:Ben Edmunds
Language: eng
Format: epub
Publisher: Apress, Berkeley, CA

The pseudorandom number generator /dev/urandom isn’t considered true random, but it is cryptographically secure. This means that it might not be a truly random number, but it is regarded as secure enough for use in salts. It will return a very good pseudorandom number immediately with no blocking; and it uses the existing entropy pool to generate a pseudorandom number that is secure enough for the majority of authentication systems. If you’re writing the login page for nuclear launch codes, it might be best to make the user wait on /dev/random, but for that social picture sharing site, /dev/urandom is good enough.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.