Re: encryption decryption without mcrypt?

On Thu, 24 Aug 2000, Brian Huddleston wrote: > And just to reiterate Dean's point. The numbers used to generate the pad > must be truly random. Really. > Otherwise your security begins and ends with how good your random number > generator is...the usual answer > being, not very. So you end up being not much better off than Rot13ing it. > > Use a real encryption algorhytm if you are serious about it at all. ...which gets us back to our original question: How do we use encryption and cryptographic hash functions without mcrypt and mhash libraries? I can't seem to get them to work with PHP 4.0.1p12 and Apache 1.3.12 (they compile, but Apache won't run), and our other friend doesn't have any control over his server configuration. Any ideas for using encryption without these modules? My only suggestion is to run openssl or a perl script from system() and pipe the results to a file. Any other ideas? And don't say, "Make up your own algorithms." First, I'm not a number theorist; my algorithms would be highly deficient; second, I don't want to implement Triple-DES in PHP, as that would be even slower than running a system() command with openssl. Dean.