Nate's is an intriguing idea, but I agree here with Alejandro that for custom generators it'd be very strange to demand that the implementer take a computed result that will always be some integer and then return a _pointer_ to it.<br><br>And if RandomNumberGenerator conforms to Sequence (I would recommend it, as it enables some very elegant generic uses, although to improve ergonomics we would want to allow methods of type () -> T to satisfy requirements of type () -> T?), next() most definitely cannot be an unsafe API.<br><br><br><div class="gmail_quote"><div dir="ltr">On Thu, Nov 16, 2017 at 21:12 Alejandro Alonso <<a href="mailto:aalonso128@outlook.com">aalonso128@outlook.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div name="messageBodySection" style="font-size:14px;font-family:-apple-system,BlinkMacSystemFont,sans-serif">
While this could work, I don’t believe this aligns with Swift. SecRandomCopyBytes and arc4random_buf do it this way because of the languages they were built in, and for SecRandomCopyBytes, it needs to also return an error (in the form of its return value).
For custom generators this doesn’t make sense to me because it seems as if each generator will have the same code to return an integer of a different size from what it’ll be producing. I really like Xiaodi’s solution to explicitly state what type of integer
a custom generator will return, and as a default implementation, we provide a way to transform that.</div></div><div>
<div name="messageSignatureSection" style="font-size:14px;font-family:-apple-system,BlinkMacSystemFont,sans-serif">
<br>
- Alejandro</div></div><div>
<div name="messageReplySection" style="font-size:14px;font-family:-apple-system,BlinkMacSystemFont,sans-serif">
<br>
On Nov 15, 2017, 11:26 AM -0600, Nate Cook <<a href="mailto:natecook@apple.com" target="_blank">natecook@apple.com</a>>, wrote:<br>
<blockquote type="cite" style="margin:5px 5px;padding-left:10px;border-left:thin solid #1abc9c">
<div>
<blockquote type="cite" style="margin:5px 5px;padding-left:10px;border-left:thin solid #e67e22">
<div>On Nov 13, 2017, at 7:38 PM, Xiaodi Wu <<a href="mailto:xiaodi.wu@gmail.com" target="_blank">xiaodi.wu@gmail.com</a>> wrote:</div>
<br class="m_5407030895572687974Apple-interchange-newline">
<div>
<div dir="ltr">On Mon, Nov 13, 2017 at 7:12 PM, Alejandro Alonso <span dir="ltr">
<<a href="mailto:aalonso128@outlook.com" target="_blank">aalonso128@outlook.com</a>></span> wrote:<br>
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:5px 5px;padding-left:10px;border-left:thin solid #3498db">
<div>
<div name="messageBodySection" style="font-size:14px;font-family:-apple-system,BlinkMacSystemFont,sans-serif">
After thinking about this for a while, I don’t agree with with an associated type on RandomNumberGenerator. I think a generic FixedWidthInteger & UnsignedInteger should be sufficient. If there were an associated type, and the default for Random was UInt32,
then there might be some arguments about allowing Double to utilize the full 64 bit precision. We could make Random32 and Random64, but I think people will ask why there isn’t a Random8 or Random16 for those bit widths. The same could also be said that any
experienced developer would know that his PRNG would be switched if he asked for 32 bit or 64 bit. </div>
</div>
</blockquote>
<div><br>
</div>
<div>I don't understand. Of course, Double would require 64 bits of randomness. It would obtain this by calling `next()` as many times as necessary to obtain the requisite number of bits.</div>
<div><br>
</div>
<div>At base, any PRNG algorithm yields some fixed number of bits on each iteration. You can certainly have a function that returns an arbitrary number of random bits (in fact, I would recommend that such an algorithm be a protocol extension method
on RandomNumberGenerator), but it must be built on top of a function that returns a fixed number of bits, where that number is determined on a per-algorithm basis. Moreover--and this is important--generating a random unsigned integer of arbitrary bit width
in a sound way is actually subtly _different_ from generating a floating-point value of a certain bit width, and I'm not sure that one can be built on top of the other. Compare, for example:</div>
<div><br>
</div>
<div><a href="https://github.com/xwu/NumericAnnex/blob/c962760bf974a84ec57d8c5e94c91f06584e2453/Sources/PRNG.swift#L157" target="_blank">https://github.com/xwu/NumericAnnex/blob/c962760bf974a84ec57d8c5e94c91f06584e2453/Sources/PRNG.swift#L157</a><br>
</div>
<div><a href="https://github.com/xwu/NumericAnnex/blob/c962760bf974a84ec57d8c5e94c91f06584e2453/Sources/PRNG.swift#L316" target="_blank">https://github.com/xwu/NumericAnnex/blob/c962760bf974a84ec57d8c5e94c91f06584e2453/Sources/PRNG.swift#L316</a><br>
</div>
<div><br>
</div>
<div>(These are essentially Swift versions of C++ algorithms.)</div>
<div><br>
</div>
<div>Basically, what I'm saying is that RandomNumberGenerator needs a `next()` method that returns a fixed number of bits, and extension methods that build on that to return T : FixedWidthInteger & UnsignedInteger of arbitrary bit width or U : BinaryFloatingPoint
of an arbitrary number of bits of precision. Each individual RNG does not need to reimplement the latter methods, just a method to return a `next()` value of a fixed number of bits. You are welcome to use my implementation.</div>
</div>
</div>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>An alternative to this is to have the random generator write a specified number of bytes to a pointer’s memory, as David Waite and others have suggested. This is same way arc4random_buf and SecRandomCopyBytes are implemented. Each random number generator
could then choose the most efficient way to provide the requested number of bytes. The protocol could look something like this:</div>
<div>
<div><font color="#24292E"><br>
<font face="Menlo">protocol RandomNumberGenerator {<br>
/// Writes the specified number of bytes to the given pointer’s memory.<br>
func read(into p: UnsafeMutableRawPointer, bytes: Int)<br>
}</font></font></div>
<div><font color="#24292E" face="HelveticaNeue"><br>
</font></div>
<div><font color="#24292E" face="HelveticaNeue">This is less user-friendly than having a next() method, but I think that’s a good thing—we very much want people who need a random value to use higher-level APIs and just pass the RNG as a parameter
when necessary.</font></div>
<div><font color="#24292E" face="HelveticaNeue"><br>
</font></div>
<div><font color="#24292E" face="HelveticaNeue">Nate</font></div>
<div><font color="#24292E" face="HelveticaNeue"><br>
</font></div>
</div>
</div>
<br>
</blockquote>
</div>
</div></blockquote></div>