| Subject: | hard to use for password salts |
Trying to use the module for password salting in web application.
We cannot use default rand(), since
===
use Data::Entropy qw(entropy_source);
rand();
fork();
$i = entropy_source->get_int(12345);
print $$, "\t", $i, "\n";
===
prints same random numbers for different processes, and that's exactly how our application works: it has fork, and hash our $var = shuffle(1,2...) in one of modules, so rand() is called before fork (shuffle uses rand).
And, we cannot use entropy source, which uses /dev/random since it's exteremely slow (and important: we'll need to migrate existing passwords for all users to new scheme, once they login).
So, would be great to have something like /dev/urandom + crypt counter, or sth..