Download the PHP package duzun/p2peg without Composer
On this page you can find all versions of the php package duzun/p2peg. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Package p2peg
Short Description Peer to Peer Entropy Generator (or Random numbers generator with p2p seeding)
License MIT
Homepage https://github.com/duzun/P2PEG
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package p2peg
Peer to Peer Entropy Generator
or Random numbers generator with p2p seeding
@version 0.6.6 
About
Node: There is a JavaScript version of this library under development p2peg.js.
This class uses a combination of sources of entropy to generate random data as unpredictable as possible. The key concept is sharing of random data between peers, where both peers benefit from the request.
Internally each peer generates random data using some system data, server performance/load, some PRNGs (Pseudo Random Number Generators), timing and client supplied data. The collected data is always combined with the internal state data, which changes at each request, and digested by a HMAC with the peer's secret key.
Each client-peer adds to the entropy of the server-peer by suppling variable data with the request (in purpos or not) and by the fact of connecting to the server (the exact request time is also accounted), thus changing internal state of the P2PEG.
The internal state is the sum of all collected entropy bits from system and from all client-peers that have ever requested current peer.
For client-peer there is no way to know about P2PEG's internal state or about other client-peers, hence generated data is truly random and unpredictable.
If one peer doesn't trust the other peer to be "honest", it can contact multiple peers to gather the random bits and combine the result with it's own PRN and internal state.
On a web-server entropy can also be collected from common website clients.
Basic Usage
Include the class
Get the singleton instance or just create a new instance of P2PEG
Get some random binary string
Now you can use $str as cryptographic salt, seed for PRNG, password generators or anything else
that requires unpredictable hight entropy data.
Get some random integer numbers:
Get some random text (base64 encoded)
Get some random text (by a given alphabet)
Get some random string hex encoded
Get a pseudo random 32bit integer - this method is faster then int32() for generating lots of numbers, but in turn it uses less entropy (see RNG).
Get a pseudo random 64bit integer - this method is faster then int() for generating lots of numbers, but in turn it uses less entropy (see xorshiftplus algorithm).
There are some more PRNGs, randomly seeded by P2PEG:
Advanced Usage
Before using the instance of P2PEG class, it is a good idea to set some properties:
Internal state file - optional.
Tip: Keep it inaccessible to other users on system by chmod 0600 p2peg.dat
A secret key chosen at setup
Seed the P2PEG with some bits of data or your choise
Seed the PHP's RNG
Write to /dev/random
Get a 56bit integer, if system is x64
Display a random bitmap image
Take care of what $method you allow for servImg(), cause it could display some private data to client.
The following methods are safe to display to client:
This method helps to visually inspect a random number generator (RNG). It is not enough to know how good the RNG is, but it can tell that the RNG is bad or something is wrong.
Examples:
- https://duzun.me/entropy/img/rand32
- https://duzun.me/entropy/img/rand64/64
- https://duzun.me/entropy/img/str
Get some entropy from outside
On cron you could call
This method gathers some network entropy and server entropy and can be realy slow. This is why it is a good idea to call it in background. But at the same time, it is a good idea to call it from time to time, to get some more unpredictable, crtypto-safe entropy.
... more comming soon
Sample output
Example of usage
I've created a simple password generator using P2PEG on both client and server. Each client is seeded by server, and server is seeded by each client, thus implementing P2PEG concept.
TODO
-
To improve the entropy unpredictability, I intend to create system where multiple machines periodically exchange entropy. Each pear gets entropy and gives entropy at the same time with a simple GET request like this one:
curl "https://DUzun.Me/entropy/<HMAC(random_func(), $secret)>" -
Seed
/dev/randomand update entropy count, to improve system performance -
Count the amount of entropy generated
-
Test the quality of entropy with TestU01
- Create a JavaScript version (in development here)
