Let's Get Random: Under the Hood of PHP 7's CSPRNG

Sammy Kaye Powers

Thursday 31 May 2018 from 15:45 to 16:45

Talk in English - US at php[tek] 2018
View Slides: https://speakerdeck.com/sammyk/lets-get-random-under-the-hood-of-php-7-s-csprng-php-tek-2018
Short URL: https://joind.in/talk/d4f3a (QR-Code (opens in new window))

Avg. Rating

What is random? If you think about it, describing randomness is quite difficult; and so is generating random numbers for computers. If you get it wrong, you can open your app to serious security exploits.

Unfortunately true randomness is a non-trivial achievement for computers. In fact, using weak sources of randomness can leave your application open to myriad vulnerabilities. Enter: a good cryptographically secure pseudorandom number generator (CSPRNG).

We'll discuss the importance of using good sources of randomness, the CSPRNG options we had in PHP 5.x, and how the new [CSPRNG functions in PHP 7](http://php.net/csprng) work under the hood. Learn how to get it right in this talk about PHP's cryptographically secure RNG.

Comments

Comments are closed.

Justin at 11:44 on 1 Jun 2018

Sammy is always a good speaker. Animations are top notch. It’s never a bad idea to check out his talks.

Andy Snell at 11:36 on 3 Jun 2018

Nobody does slides like Sammy. A good balance between the technical and the "keep me interested after lunch".