# Apache::Session::Generate::MD5 - phpMan

## NAME
    [Apache::Session::Generate::MD5] - Use MD5 to create random object IDs

## SYNOPSIS
     use [Apache::Session::Generate::MD5];

     $id = [Apache::Session::Generate::MD5::generate]();

## DESCRIPTION
    This module fulfills the ID generation interface of [Apache::Session]. The
    IDs are generated using a two-round MD5 of a random number, the time
    since the epoch, the process ID, and the address of an anonymous hash.
    The resultant ID number is highly entropic on Linux and other platforms
    that have good random number generators. You are encouraged to
    investigate the quality of your system's random number generator if you
    are using the generated ID numbers in a secure environment.

    This module can also examine session IDs to ensure that they are,
    indeed, session ID numbers and not evil attacks. The reader is
    encouraged to consider the effect of bogus session ID numbers in a
    system which uses these ID numbers to access disks and databases.

    This modules takes one argument in the usual [Apache::Session] style. The
    argument is IDLength, and the value, between 0 and 32, tells this module
    where to truncate the session ID. Without this argument, the session ID
    will be 32 hexadecimal characters long, equivalent to a 128-bit key.

## AUTHOR
    This module was written by Jeffrey William Baker <<jwbaker@acm.org>>.

## SEE ALSO
    [Apache::Session]