Uh-oh! Random number generator is not pseudorandom™

[multiwebinc]

$rand = $this->psl['crypt/rand'];
for ($i=0; $i<10000; $i++){
 $num = floor($rand->int(0, 1000000) / 1000);
 if (isset($used[$num])){
 $used[$num]++;
 }
 else{
 $used[$num] = 1;
 }
}
ksort($used);
print_r($used);

Here is the output. As you can see it is pretty much a standard normal distribution curve right in the middle of the range:

Array
(
 [479] => 1
 [480] => 2
 [481] => 1
 [482] => 1
 [483] => 4
 [484] => 11
 [485] => 26
 [486] => 26
 [487] => 63
 [488] => 89
 [489] => 162
 [490] => 225
 [491] => 345
 [492] => 401
 [493] => 509
 [494] => 617
 [495] => 770
 [496] => 792
 [497] => 853
 [498] => 896
 [499] => 830
 [500] => 738
 [501] => 675
 [502] => 489
 [503] => 411
 [504] => 333
 [505] => 253
 [506] => 212
 [507] => 91
 [508] => 73
 [509] => 51
 [510] => 25
 [511] => 12
 [512] => 5
 [513] => 6
 [514] => 1
 [518] => 1
)

Why not just use mt_rand()?

[multiwebinc]

By the way, the current RNG is ridiculously slow for large ranges while mt_rand() is almost instant.

Oh, and here's the output for the same code using mt_rand():

Array
(
 [0] => 9
 [1] => 8
 [2] => 15
 [3] => 10
 [4] => 7
 [5] => 9
 [6] => 6
 [7] => 7
 [8] => 8
 [9] => 11
 [10] => 15
 [11] => 8
 [12] => 9
 [13] => 13
 [14] => 10
 [15] => 8
 [16] => 13
 [17] => 10
 [18] => 12
 [19] => 10
 [20] => 10
 [21] => 6
 [22] => 9
 [23] => 13
 [24] => 15
 [25] => 8
 [26] => 14
 [27] => 8
 [28] => 7
 [29] => 10
 [30] => 7
 [31] => 10
 [32] => 8
 [33] => 12
 [34] => 9
 [35] => 4
 [36] => 6
 [37] => 8
 [38] => 6
 [39] => 11
 [40] => 4
 [41] => 13
 [42] => 11
 [43] => 5
 [44] => 8
 [45] => 10
 [46] => 15
 [47] => 10
 [48] => 9
 [49] => 10
 [50] => 10
 [51] => 10
 [52] => 11
 [53] => 10
 [54] => 11
 [55] => 10
 [56] => 11
 [57] => 16
 [58] => 8
 [59] => 9
 [60] => 8
 [61] => 11
 [62] => 12
 [63] => 9
 [64] => 7
 [65] => 11
 [66] => 10
 [67] => 9
 [68] => 12
 [69] => 8
 [70] => 12
 [71] => 13
 [72] => 13
 [73] => 12
 [74] => 7
 [75] => 13
 [76] => 8
 [77] => 7
 [78] => 8
 [79] => 10
 [80] => 8
 [81] => 12
 [82] => 11
 [83] => 8
 [84] => 10
 [85] => 8
 [86] => 10
 [87] => 12
 [88] => 7
 [89] => 18
 [90] => 12
 [91] => 4
 [92] => 10
 [93] => 4
 [94] => 9
 [95] => 7
 [96] => 12
 [97] => 7
 [98] => 11
 [99] => 10
 [100] => 2
 [101] => 7
 [102] => 16
 [103] => 12
 [104] => 11
 [105] => 9
 [106] => 6
 [107] => 12
 [108] => 16
 [109] => 7
 [110] => 10
 [111] => 9
 [112] => 10
 [113] => 10
 [114] => 14
 [115] => 10
 [116] => 13
 [117] => 8
 [118] => 10
 [119] => 10
 [120] => 10
 [121] => 10
 [122] => 13
 [123] => 8
 [124] => 7
 [125] => 3
 [126] => 11
 [127] => 7
 [128] => 10
 [129] => 14
 [130] => 10
 [131] => 13
 [132] => 10
 [133] => 8
 [134] => 6
 [135] => 8
 [136] => 15
 [137] => 8
 [138] => 6
 [139] => 14
 [140] => 12
 [141] => 8
 [142] => 8
 [143] => 14
 [144] => 12
 [145] => 9
 [146] => 8
 [147] => 8
 [148] => 9
 [149] => 11
 [150] => 8
 [151] => 10
 [152] => 10
 [153] => 13
 [154] => 8
 [155] => 13
 [156] => 14
 [157] => 11
 [158] => 10
 [159] => 6
 [160] => 9
 [161] => 15
 [162] => 9
 [163] => 9
 [164] => 10
 [165] => 12
 [166] => 12
 [167] => 7
 [168] => 12
 [169] => 13
 [170] => 10
 [171] => 8
 [172] => 13
 [173] => 12
 [174] => 7
 [175] => 10
 [176] => 18
 [177] => 14
 [178] => 13
 [179] => 13
 [180] => 9
 [181] => 8
 [182] => 8
 [183] => 11
 [184] => 5
 [185] => 12
 [186] => 13
 [187] => 15
 [188] => 10
 [189] => 12
 [190] => 8
 [191] => 9
 [192] => 10
 [193] => 7
 [194] => 9
 [195] => 8
 [196] => 13
 [197] => 10
 [198] => 12
 [199] => 8
 [200] => 5
 [201] => 12
 [202] => 13
 [203] => 13
 [204] => 7
 [205] => 6
 [206] => 7
 [207] => 7
 [208] => 9
 [209] => 11
 [210] => 8
 [211] => 14
 [212] => 11
 [213] => 11
 [214] => 6
 [215] => 10
 [216] => 9
 [217] => 12
 [218] => 13
 [219] => 7
 [220] => 10
 [221] => 10
 [222] => 5
 [223] => 6
 [224] => 6
 [225] => 7
 [226] => 3
 [227] => 8
 [228] => 5
 [229] => 8
 [230] => 9
 [231] => 9
 [232] => 16
 [233] => 11
 [234] => 8
 [235] => 12
 [236] => 11
 [237] => 7
 [238] => 11
 [239] => 15
 [240] => 8
 [241] => 8
 [242] => 3
 [243] => 9
 [244] => 9
 [245] => 5
 [246] => 8
 [247] => 4
 [248] => 11
 [249] => 10
 [250] => 8
 [251] => 12
 [252] => 8
 [253] => 15
 [254] => 7
 [255] => 12
 [256] => 16
 [257] => 7
 [258] => 10
 [259] => 10
 [260] => 7
 [261] => 13
 [262] => 11
 [263] => 13
 [264] => 11
 [265] => 8
 [266] => 8
 [267] => 9
 [268] => 13
 [269] => 12
 [270] => 13
 [271] => 9
 [272] => 19
 [273] => 15
 [274] => 12
 [275] => 7
 [276] => 8
 [277] => 18
 [278] => 10
 [279] => 5
 [280] => 7
 [281] => 11
 [282] => 13
 [283] => 6
 [284] => 7
 [285] => 8
 [286] => 10
 [287] => 7
 [288] => 10
 [289] => 3
 [290] => 11
 [291] => 8
 [292] => 15
 [293] => 10
 [294] => 8
 [295] => 9
 [296] => 11
 [297] => 12
 [298] => 10
 [299] => 5
 [300] => 12
 [301] => 12
 [302] => 12
 [303] => 11
 [304] => 11
 [305] => 13
 [306] => 11
 [307] => 7
 [308] => 5
 [309] => 13
 [310] => 8
 [311] => 10
 [312] => 9
 [313] => 7
 [314] => 9
 [315] => 16
 [316] => 15
 [317] => 10
 [318] => 5
 [319] => 11
 [320] => 12
 [321] => 8
 [322] => 7
 [323] => 6
 [324] => 13
 [325] => 9
 [326] => 12
 [327] => 14
 [328] => 12
 [329] => 14
 [330] => 12
 [331] => 7
 [332] => 11
 [333] => 9
 [334] => 5
 [335] => 11
 [336] => 9
 [337] => 3
 [338] => 16
 [339] => 10
 [340] => 9
 [341] => 14
 [342] => 6
 [343] => 8
 [344] => 9
 [345] => 14
 [346] => 8
 [347] => 7
 [348] => 11
 [349] => 7
 [350] => 9
 [351] => 14
 [352] => 13
 [353] => 8
 [354] => 10
 [355] => 10
 [356] => 11
 [357] => 15
 [358] => 10
 [359] => 12
 [360] => 6
 [361] => 4
 [362] => 7
 [363] => 8
 [364] => 7
 [365] => 12
 [366] => 13
 [367] => 13
 [368] => 12
 [369] => 7
 [370] => 12
 [371] => 8
 [372] => 9
 [373] => 10
 [374] => 10
 [375] => 17
 [376] => 9
 [377] => 6
 [378] => 6
 [379] => 8
 [380] => 8
 [381] => 7
 [382] => 13
 [383] => 13
 [384] => 8
 [385] => 11
 [386] => 8
 [387] => 18
 [388] => 13
 [389] => 8
 [390] => 7
 [391] => 8
 [392] => 5
 [393] => 5
 [394] => 10
 [395] => 17
 [396] => 4
 [397] => 12
 [398] => 11
 [399] => 11
 [400] => 7
 [401] => 10
 [402] => 13
 [403] => 7
 [404] => 15
 [405] => 17
 [406] => 13
 [407] => 7
 [408] => 14
 [409] => 8
 [410] => 6
 [411] => 6
 [412] => 12
 [413] => 6
 [414] => 9
 [415] => 6
 [416] => 16
 [417] => 12
 [418] => 5
 [419] => 10
 [420] => 7
 [421] => 12
 [422] => 8
 [423] => 11
 [424] => 8
 [425] => 11
 [426] => 6
 [427] => 11
 [428] => 8
 [429] => 8
 [430] => 8
 [431] => 12
 [432] => 7
 [433] => 10
 [434] => 6
 [435] => 12
 [436] => 13
 [437] => 9
 [438] => 9
 [439] => 11
 [440] => 8
 [441] => 5
 [442] => 13
 [443] => 5
 [444] => 10
 [445] => 9
 [446] => 12
 [447] => 10
 [448] => 5
 [449] => 8
 [450] => 8
 [451] => 14
 [452] => 8
 [453] => 6
 [454] => 10
 [455] => 10
 [456] => 17
 [457] => 7
 [458] => 10
 [459] => 11
 [460] => 6
 [461] => 8
 [462] => 6
 [463] => 8
 [464] => 10
 [465] => 8
 [466] => 9
 [467] => 8
 [468] => 8
 [469] => 7
 [470] => 10
 [471] => 9
 [472] => 11
 [473] => 9
 [474] => 10
 [475] => 11
 [476] => 14
 [477] => 11
 [478] => 11
 [479] => 15
 [480] => 6
 [481] => 9
 [482] => 7
 [483] => 21
 [484] => 7
 [485] => 11
 [486] => 8
 [487] => 11
 [488] => 10
 [489] => 17
 [490] => 7
 [491] => 15
 [492] => 12
 [493] => 15
 [494] => 9
 [495] => 9
 [496] => 8
 [497] => 13
 [498] => 13
 [499] => 10
 [500] => 9
 [501] => 14
 [502] => 8
 [503] => 8
 [504] => 14
 [505] => 18
 [506] => 8
 [507] => 10
 [508] => 8
 [509] => 11
 [510] => 9
 [511] => 11
 [512] => 4
 [513] => 15
 [514] => 11
 [515] => 8
 [516] => 6
 [517] => 6
 [518] => 10
 [519] => 10
 [520] => 11
 [521] => 11
 [522] => 8
 [523] => 15
 [524] => 9
 [525] => 12
 [526] => 7
 [527] => 12
 [528] => 10
 [529] => 9
 [530] => 10
 [531] => 11
 [532] => 9
 [533] => 7
 [534] => 14
 [535] => 9
 [536] => 9
 [537] => 9
 [538] => 7
 [539] => 12
 [540] => 14
 [541] => 18
 [542] => 13
 [543] => 6
 [544] => 12
 [545] => 5
 [546] => 14
 [547] => 15
 [548] => 7
 [549] => 8
 [550] => 11
 [551] => 7
 [552] => 11
 [553] => 14
 [554] => 11
 [555] => 15
 [556] => 7
 [557] => 9
 [558] => 9
 [559] => 6
 [560] => 9
 [561] => 11
 [562] => 14
 [563] => 7
 [564] => 12
 [565] => 11
 [566] => 10
 [567] => 6
 [568] => 9
 [569] => 8
 [570] => 11
 [571] => 11
 [572] => 18
 [573] => 9
 [574] => 10
 [575] => 7
 [576] => 11
 [577] => 11
 [578] => 13
 [579] => 9
 [580] => 6
 [581] => 10
 [582] => 7
 [583] => 9
 [584] => 10
 [585] => 6
 [586] => 10
 [587] => 8
 [588] => 18
 [589] => 14
 [590] => 8
 [591] => 9
 [592] => 13
 [593] => 16
 [594] => 7
 [595] => 8
 [596] => 10
 [597] => 12
 [598] => 12
 [599] => 13
 [600] => 9
 [601] => 7
 [602] => 11
 [603] => 9
 [604] => 10
 [605] => 11
 [606] => 15
 [607] => 12
 [608] => 9
 [609] => 13
 [610] => 9
 [611] => 6
 [612] => 9
 [613] => 11
 [614] => 11
 [615] => 5
 [616] => 15
 [617] => 11
 [618] => 9
 [619] => 9
 [620] => 12
 [621] => 13
 [622] => 9
 [623] => 9
 [624] => 9
 [625] => 10
 [626] => 6
 [627] => 8
 [628] => 12
 [629] => 12
 [630] => 11
 [631] => 9
 [632] => 10
 [633] => 12
 [634] => 13
 [635] => 15
 [636] => 4
 [637] => 15
 [638] => 8
 [639] => 9
 [640] => 10
 [641] => 9
 [642] => 14
 [643] => 12
 [644] => 13
 [645] => 12
 [646] => 5
 [647] => 9
 [648] => 9
 [649] => 7
 [650] => 7
 [651] => 16
 [652] => 12
 [653] => 17
 [654] => 6
 [655] => 6
 [656] => 14
 [657] => 9
 [658] => 8
 [659] => 7
 [660] => 12
 [661] => 12
 [662] => 11
 [663] => 4
 [664] => 11
 [665] => 15
 [666] => 20
 [667] => 10
 [668] => 14
 [669] => 10
 [670] => 7
 [671] => 10
 [672] => 6
 [673] => 12
 [674] => 10
 [675] => 11
 [676] => 6
 [677] => 10
 [678] => 7
 [679] => 8
 [680] => 13
 [681] => 13
 [682] => 11
 [683] => 16
 [684] => 14
 [685] => 11
 [686] => 16
 [687] => 13
 [688] => 4
 [689] => 9
 [690] => 11
 [691] => 14
 [692] => 14
 [693] => 8
 [694] => 9
 [695] => 13
 [696] => 9
 [697] => 2
 [698] => 14
 [699] => 16
 [700] => 11
 [701] => 7
 [702] => 10
 [703] => 11
 [704] => 10
 [705] => 13
 [706] => 10
 [707] => 10
 [708] => 13
 [709] => 7
 [710] => 17
 [711] => 7
 [712] => 9
 [713] => 10
 [714] => 10
 [715] => 12
 [716] => 12
 [717] => 10
 [718] => 15
 [719] => 9
 [720] => 7
 [721] => 11
 [722] => 8
 [723] => 7
 [724] => 8
 [725] => 12
 [726] => 9
 [727] => 9
 [728] => 12
 [729] => 9
 [730] => 15
 [731] => 11
 [732] => 5
 [733] => 3
 [734] => 11
 [735] => 12
 [736] => 20
 [737] => 3
 [738] => 7
 [739] => 9
 [740] => 12
 [741] => 10
 [742] => 10
 [743] => 6
 [744] => 10
 [745] => 7
 [746] => 10
 [747] => 11
 [748] => 7
 [749] => 13
 [750] => 13
 [751] => 11
 [752] => 13
 [753] => 14
 [754] => 12
 [755] => 8
 [756] => 13
 [757] => 10
 [758] => 6
 [759] => 11
 [760] => 10
 [761] => 13
 [762] => 8
 [763] => 12
 [764] => 9
 [765] => 8
 [766] => 7
 [767] => 8
 [768] => 13
 [769] => 12
 [770] => 10
 [771] => 15
 [772] => 7
 [773] => 10
 [774] => 9
 [775] => 15
 [776] => 11
 [777] => 6
 [778] => 8
 [779] => 7
 [780] => 11
 [781] => 9
 [782] => 9
 [783] => 7
 [784] => 13
 [785] => 12
 [786] => 15
 [787] => 9
 [788] => 6
 [789] => 16
 [790] => 8
 [791] => 8
 [792] => 16
 [793] => 11
 [794] => 10
 [795] => 11
 [796] => 10
 [797] => 8
 [798] => 11
 [799] => 8
 [800] => 11
 [801] => 4
 [802] => 11
 [803] => 15
 [804] => 13
 [805] => 9
 [806] => 14
 [807] => 10
 [808] => 10
 [809] => 7
 [810] => 8
 [811] => 8
 [812] => 8
 [813] => 14
 [814] => 6
 [815] => 6
 [816] => 11
 [817] => 9
 [818] => 8
 [819] => 7
 [820] => 7
 [821] => 8
 [822] => 2
 [823] => 5
 [824] => 15
 [825] => 4
 [826] => 12
 [827] => 11
 [828] => 8
 [829] => 6
 [830] => 5
 [831] => 9
 [832] => 13
 [833] => 12
 [834] => 11
 [835] => 6
 [836] => 14
 [837] => 9
 [838] => 12
 [839] => 6
 [840] => 4
 [841] => 11
 [842] => 7
 [843] => 9
 [844] => 9
 [845] => 7
 [846] => 7
 [847] => 18
 [848] => 11
 [849] => 8
 [850] => 12
 [851] => 6
 [852] => 14
 [853] => 12
 [854] => 9
 [855] => 13
 [856] => 12
 [857] => 7
 [858] => 9
 [859] => 12
 [860] => 9
 [861] => 8
 [862] => 5
 [863] => 13
 [864] => 11
 [865] => 8
 [866] => 8
 [867] => 7
 [868] => 10
 [869] => 13
 [870] => 11
 [871] => 9
 [872] => 10
 [873] => 8
 [874] => 10
 [875] => 16
 [876] => 10
 [877] => 12
 [878] => 14
 [879] => 4
 [880] => 9
 [881] => 10
 [882] => 10
 [883] => 17
 [884] => 13
 [885] => 6
 [886] => 8
 [887] => 12
 [888] => 14
 [889] => 9
 [890] => 12
 [891] => 6
 [892] => 7
 [893] => 16
 [894] => 8
 [895] => 14
 [896] => 11
 [897] => 20
 [898] => 7
 [899] => 11
 [900] => 10
 [901] => 8
 [902] => 9
 [903] => 13
 [904] => 9
 [905] => 12
 [906] => 14
 [907] => 8
 [908] => 10
 [909] => 13
 [910] => 10
 [911] => 5
 [912] => 7
 [913] => 8
 [914] => 12
 [915] => 10
 [916] => 17
 [917] => 9
 [918] => 8
 [919] => 6
 [920] => 8
 [921] => 12
 [922] => 9
 [923] => 10
 [924] => 5
 [925] => 11
 [926] => 13
 [927] => 9
 [928] => 11
 [929] => 8
 [930] => 9
 [931] => 9
 [932] => 7
 [933] => 10
 [934] => 13
 [935] => 15
 [936] => 12
 [937] => 10
 [938] => 12
 [939] => 10
 [940] => 11
 [941] => 6
 [942] => 8
 [943] => 5
 [944] => 17
 [945] => 9
 [946] => 12
 [947] => 9
 [948] => 14
 [949] => 11
 [950] => 10
 [951] => 13
 [952] => 10
 [953] => 10
 [954] => 10
 [955] => 6
 [956] => 8
 [957] => 18
 [958] => 8
 [959] => 6
 [960] => 13
 [961] => 10
 [962] => 12
 [963] => 11
 [964] => 14
 [965] => 10
 [966] => 8
 [967] => 9
 [968] => 14
 [969] => 17
 [970] => 11
 [971] => 7
 [972] => 11
 [973] => 15
 [974] => 11
 [975] => 11
 [976] => 16
 [977] => 7
 [978] => 12
 [979] => 7
 [980] => 10
 [981] => 8
 [982] => 9
 [983] => 6
 [984] => 11
 [985] => 13
 [986] => 10
 [987] => 11
 [988] => 9
 [989] => 7
 [990] => 12
 [991] => 7
 [992] => 7
 [993] => 11
 [994] => 8
 [995] => 13
 [996] => 12
 [997] => 9
 [998] => 16
 [999] => 13
)

[xqus]

Is this generated with OpenSSL available on the system?

[multiwebinc]

Yes it is:

$ php -i | grep -i openssl
SSL Version => OpenSSL/1.0.1f
openssl
OpenSSL support => enabled
OpenSSL Library Version => OpenSSL 1.0.1f 6 Jan 2014
OpenSSL Header Version => OpenSSL 1.0.1f 6 Jan 2014
OpenSSL support => enabled