From 84e2fe49f2c264d753bb208f0bf9786107de4fca Mon Sep 17 00:00:00 2001 From: Roland Gruber Date: Fri, 18 Nov 2005 10:41:08 +0000 Subject: [PATCH] use MCRYPT_DEV_URANDOM to generate key+iv --- lam/templates/login.php | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/lam/templates/login.php b/lam/templates/login.php index 2cde878d..c628a07b 100644 --- a/lam/templates/login.php +++ b/lam/templates/login.php @@ -88,14 +88,12 @@ function display_LoginPage($config_object) { // generate 256 bit key and initialization vector for user/passwd-encryption // check if we can use /dev/random otherwise use /dev/urandom or rand() if(function_exists('mcrypt_create_iv')) { - $key = @mcrypt_create_iv(32, MCRYPT_DEV_RANDOM); - if (! $key) $key = @mcrypt_create_iv(32, MCRYPT_DEV_URANDOM); + $key = @mcrypt_create_iv(32, MCRYPT_DEV_URANDOM); if (! $key) { srand((double)microtime()*1234567); $key = mcrypt_create_iv(32, MCRYPT_RAND); } - $iv = @mcrypt_create_iv(32, MCRYPT_DEV_RANDOM); - if (! $iv) $iv = @mcrypt_create_iv(32, MCRYPT_DEV_URANDOM); + $iv = @mcrypt_create_iv(32, MCRYPT_DEV_URANDOM); if (! $iv) { srand((double)microtime()*1234567); $iv = mcrypt_create_iv(32, MCRYPT_RAND);