3 ms·
Never heard of openssl_seal() until now -from my brief read am I right in thinking it's a similar workflow to PGP?
by BuildTheRobots 12y ago
Never heard of openssl_seal() until now -from my brief read am I right in thinking it's a similar workflow to PGP?
- sarciszewski 12y agoYeah, similar in concept. You encrypt a message with a public key and can only decrypt it with the private key. It's great for storing data so that a root/filesystem compromise won't reveal any of the previously encrypted data. I'm hoping that jedisct1 will add a parallel functionality to libsodium soon. :) https://github.com/jedisct1/libsodium/issues/231 https://github.com/jedisct1/libsodium/issues/231
- BuildTheRobots 12y agoParallelism is always a good thing. The specific similarity with PGP that jumped to mind is that you're not actually using your key (or recipients key) to encrypt the message. You're actually generating a random session key to encrypt the message contents and then you're encrypting the session key against the recipients key and sending them that. I was really taken by surprise the first time I read that, but after playing some more with crypto "obviously" you'd have to -otherwise what happens when your message is longer than your key?