tourze/tls-crypto-random

Cryptographically secure random number generator for TLS protocol implementation

0.0.1 2025-05-23 13:03 UTC

Requires

• php: ^8.1
• tourze/tls-common: 0.0.*

Requires (Dev)

• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^10.0

MIT

README

English | 中文

A cryptographically secure random number generator library for TLS protocol implementation, providing secure random bytes and integers generation using PHP's built-in cryptographic functions.

Features

• Cryptographically Secure: Uses PHP's random_bytes() and random_int() functions
• Simple Interface: Clean API with comprehensive error handling
• Exception Safety: Proper exception handling for all edge cases
• Type Safety: Full PHP 8.1+ type declarations
• Performance: Efficient random number generation with minimal overhead

Installation

composer require tourze/tls-crypto-random

Requirements

• PHP 8.1 or higher
• OpenSSL extension (for secure random number generation)

Usage

Basic Usage

use Tourze\TLSCryptoRandom\CryptoRandom;

$random = new CryptoRandom();

// Generate random bytes
$randomBytes = $random->getRandomBytes(32); // 32 bytes
echo bin2hex($randomBytes); // Output: e.g., "a1b2c3d4e5f6..."

// Generate random integer
$randomInt = $random->getRandomInt(1, 100); // Integer between 1 and 100
echo $randomInt; // Output: e.g., 42

Interface Implementation

use Tourze\TLSCryptoRandom\Contract\RandomInterface;
use Tourze\TLSCryptoRandom\CryptoRandom;

function useRandomGenerator(RandomInterface $random): void
{
    // Generate a session ID
    $sessionId = bin2hex($random->getRandomBytes(16));
    
    // Generate a random port number
    $port = $random->getRandomInt(1024, 65535);
    
    echo "Session ID: {$sessionId}\n";
    echo "Port: {$port}\n";
}

$random = new CryptoRandom();
useRandomGenerator($random);

Error Handling

use Tourze\TLSCryptoRandom\CryptoRandom;
use Tourze\TLSCryptoRandom\Exception\RandomException;

$random = new CryptoRandom();

try {
    // Invalid length
    $random->getRandomBytes(0);
} catch (RandomException $e) {
    echo "Error: " . $e->getMessage(); // "随机字节长度必须大于0"
}

try {
    // Invalid range
    $random->getRandomInt(100, 1);
} catch (RandomException $e) {
    echo "Error: " . $e->getMessage(); // "最小值不能大于最大值"
}

API Reference

CryptoRandom Class

Implements RandomInterface and provides cryptographically secure random number generation.

Methods

getRandomBytes(int $length): string

Generates cryptographically secure random bytes.

• Parameters:
  • $length (int): Number of bytes to generate (must be > 0)
• Returns: string - Random bytes
• Throws: RandomException - If length is invalid or generation fails

getRandomInt(int $min, int $max): int

Generates cryptographically secure random integer within specified range.

• Parameters:
  • $min (int): Minimum value (inclusive)
  • $max (int): Maximum value (inclusive)
• Returns: int - Random integer
• Throws: RandomException - If range is invalid or generation fails

RandomInterface

Interface for random number generators.

interface RandomInterface
{
    public function getRandomBytes(int $length): string;
    public function getRandomInt(int $min, int $max): int;
}

Exceptions

RandomException

Thrown when random number generation fails or invalid parameters are provided.

CryptoException

Base exception class for cryptographic operations.

Security Considerations

• Uses PHP's cryptographically secure random_bytes() and random_int() functions
• Suitable for generating session tokens, salts, and other security-sensitive values
• No fallback to insecure random number generators
• Proper error handling prevents silent failures

Performance

• Efficient direct usage of PHP's built-in functions
• No additional entropy collection overhead
• Suitable for high-performance applications
• Tested with large data generation (100KB+ in under 1 second)

Testing

The package includes comprehensive tests covering:

• Basic functionality
• Edge cases and error conditions
• Performance characteristics
• Cryptographic quality (basic entropy testing)
• Concurrent usage scenarios

Run tests with:

./vendor/bin/phpunit packages/tls-crypto-random/tests

License

MIT License - see LICENSE file for details.