4 ms·
What would be a good, boring, way to do encryption with PHP in 2016?
by treve 10y ago
What would be a good, boring, way to do encryption with PHP in 2016?
- dguido 10y agohttps://github.com/jedisct1/libsodium-php https://github.com/jedisct1/libsodium-php https://paragonie.com/book/pecl-libsodium https://paragonie.com/book/pecl-libsodium Docs happen to be written by the OP too...
- reitanqild 10y agoFWIW if I read correctly our own CiPHPerCoder in this thread is Scott Arciszewski from paragonie. I often find his posts interesting and sometimes a welcome adjustment to some long-running counterproductive memes.
- CiPHPerCoder 10y agoYes, I am Scott. And thank you. :)
- hannob 10y agoUse an AEAD. Learn that PHP doesn't support an AEAD. Wait for PHP 7.1... I recently covered this a bit when I looked at owncloud's crypto: https://blog.hboeck.de/archives/880-Pwncloud-bad-crypto-in-the-Owncloud-encryption-module.html https://blog.hboeck.de/archives/880-Pwncloud-bad-crypto-in-t... The situation is far from ideal. Recommending libsodium-php is also not as simple, as this requires an additional thing to be installed on a server, which probably isn't the case for most shared hosting environments.