#32917 [WFx]: Native support for encryption/hashing algorithms

ID: 32917 User updated by: brian_bisaillon at rogers dot com Reported By: brian_bisaillon at rogers dot com Status: Wont fix Bug Type: Feature/Change Request Operating System: BSD, Linux, Windows, UNIX PHP Version: 5.0.4 New Comment: Anyway, I got everything working. In the past, I thought they stopped supporting the mcrypt DLLs and I remember using them and having problems with crashes, etc. However, now everything works fine so my PHP applications work fine in Windows now. w00t... Previous Comments: ------------------------------------------------------------------------ [2005-05-06 14:55:10] brian_bisaillon at rogers dot com You are saying that the DLL at the following web site will work with the latest version of PHP 5 on Windows? http://ftp.emini.dk/pub/php/win32/mcrypt/ I thought the developers chose to no longer support the Windows DLLs? If I am mistaken then I apologize for this because for some reason I remember them no longer supporting the Windows DLLs. Perhaps that was a decision at one time and now they support it again? ------------------------------------------------------------------------ [2005-05-06 10:32:13] derick@php.net FYI, mcrypt works fine without Cygwin... and this has nothing to do with security either. If you read the mcrypt manual page you see where you can get the libmcrypt dll... which works fine with our standard build for Windows. Extra encryption algorithms should be done in an extension, not in the core of PHP either. ------------------------------------------------------------------------ [2005-05-02 22:42:45] brian_bisaillon at rogers dot com Description: ------------ Dear PHP Software Engineers, I would like you to consider adding native support for FIPS PUBS 140-2, 180-2, 186-2, 197 and 198. I want to be able to use encryption/hashing algorithms on data without having to implement a full PKI solution. To date, I have been using the mcrypt and mhash extensions to PHP but they are not very portable across multiple operating systems. For example, why do end users have to use Cygwin under Windows just to be able to run PHP applications that use mcrypt and mhash? The fact that end users have to use Cygwin under Windows just increases their learning curve. This fact has a negative impact on PHP applications. Anyway, I am hoping that PHP will get serious when it comes to natively supporting encryption/hashing algorithms that comply with FIPS approved standards/specifications. Please CC security@php.net because this message concerns security. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=32917&edit=1