Re: Studying mcrypt

On Thu, Aug 4, 2011 at 12:23 PM, Donovan Brooke <lists@euca.us> wrote: > Alex Nikitin wrote: > [snip] > > There is code obfuscation with PHP, and you can compile it into C++ with >> HipHop for php for example... >> > [snip] > > > Of course, obfuscation is never a great security solution. Compiling it > into C++ is interesting... the question would be if the code could be > de-compiled.. if so, then probably not a great solution either. > > > Donovan > > -- > D Brooke > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > It's never a good idea to store all your keys in code, that is why we have an iv, and a salt that you can use... neither is program encryption, since i can dump it in it's executing form out of memory fairly easily; this is why hard drive encryption without a controller that does crypto off the main system is fairly pointless... -- The trouble with programmers is that you can never tell what a programmer is doing until it’s too late. ~Seymour Cray