Use /dev/urandom for random data.

cakephp · Jul 30, 2013 · e07938e · e07938e
1 parent d323ea3
commit e07938e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Cake/Utility/Security.php b/lib/Cake/Utility/Security.php
@@ -232,7 +232,7 @@ public static function rijndael($text, $key, $operation) {
 		$cryptKey = substr($key, 0, 32);
 
 		if ($operation === 'encrypt') {
-			$iv = mcrypt_create_iv($ivSize, MCRYPT_RAND);
+			$iv = mcrypt_create_iv($ivSize, MCRYPT_DEV_URANDOM);
 			return $iv . '$$' . mcrypt_encrypt($algorithm, $cryptKey, $text, $mode, $iv);
 		}
 		$iv = substr($text, 0, $ivSize);