paragonie/random_compat
Random Compat
random_compat is a backward-compatibility library that provides cryptographically secure random number generation functions for PHP 5.x environments. It delivers the random_bytes() and random_int() functions that are natively available in PHP 7+, enabling legacy applications to generate secure random bytes and unbiased integers from system entropy sources.
The library implements a priority-based fallback chain across operating-system CSPRNGs, selecting the best available random source in order of security. It uses rejection sampling to convert raw random bytes into unbiased integers within arbitrary ranges, eliminating modulo bias. When no secure random source is available, the library throws explicit exceptions to make failure modes clear to developers.
The polyfill defines its functions only when the native PHP 7+ equivalents are absent, preventing redeclaration errors in mixed-version environments. It wraps multiple OS-level random number generators behind a unified interface, hiding platform-specific differences from callers. The library exposes procedural functions that internally delegate to static class methods, maintaining PHP 5.x compatibility without breaking modern call patterns.
Features
- Cryptographic Random Number Generators - Generates unbiased random bytes and integers from system entropy sources for security-sensitive operations.
- Cryptographic Integer Scaling - Converts raw random bytes into unbiased integers within arbitrary ranges using rejection sampling.
- Fallback Chains - Selects the best available random source by trying OS-level CSPRNGs in order of security.
- Priority-Based CSPRNG - Selects the best available operating-system random source through a security-prioritized fallback chain.
- Unbiased Random Integer Generators - Produces unbiased random integers within arbitrary ranges using rejection sampling to avoid modulo bias.
- Cross-Platform Abstractions - Wraps multiple OS-level CSPRNGs behind a unified interface, hiding platform-specific differences from callers.
- Backward Compatibility Libraries - Delivers secure random number generation functions to PHP 5.x applications that cannot use PHP 7+ native implementations.
- PHP 5.x Compatibility Polyfills - Provides cryptographically secure random byte and integer generation functions for PHP 5.x environments.
- PHP 5.x CSPRNG Polyfills - Provides cryptographically secure randombytes() and randomint() functions for legacy PHP 5.x environments.
- PHP 5.x Random Function Compatibility - Provides cryptographically secure random number generation functions for legacy PHP 5.x applications.
