Re: Data Enryption
| From: | Jochem Maas | Date: | Thu, 13 Jan 2005 02:37:29 +0000 |
| Subject: | Re: Data Enryption | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-206262@lists.php.net to get a copy of this message | ||
Jason Wong wrote:
On Thursday 13 January 2005 01:55, Greg Donald wrote:thank god for your input, for a minute I thought I was (being) a complete moron. :-) (no disrespect to Zend, but ZCE _sounds_ a lot like MSCE and everyone knows what thats worth ;-) - just a but of humour guys!) actually I only noticed the ZCE after I posted; I just thought it a good idea to give the 'noobs' a heads up regarding the fact thatgetting encryption (& security) right is hard (well I think it it anyway)!On Wed, 12 Jan 2005 18:09:08 +0100, Jochem Maas <jochem@iamjochem.com>wrote:No offence, but as you are a ZCE, this might lead people that that function is useful and might actually use it. Notwithstanding the fact that it is an extremely weak encryption, OP please note that it is pointless to be encrypting/storing/decrypting data all on the same machine. And if the data to be encrypted is anywhere near sensitive then using weak encryption is worse than no encryption (no encryption doesn't waste CPU cycles and doesn't give a false sense of security).I'm no expert on crypto (and never will be either! designing good crypto is something best left to the very very very very best in terms of computer science) but I think that the following function represents very weak crypto -Feel free to not use it then.. geez.