Re: [INTERNALS-WIN] Re: new crypt implementation, latest DES version used, blowfish support
| From: | Steph Fox | Date: | Sun, 20 Jul 2008 19:44:05 +0000 |
| Subject: | Re: [INTERNALS-WIN] Re: new crypt implementation, latest DES version used, blowfish support | ||
| References: | 1 2 | Groups: | php.internals.win |
| Request: | Send a blank email to internals-win+get-102@lists.php.net to get a copy of this message | ||
Hi Pierre,
Alexander Peslyak (Solar designer), the author of the Blowfish implementation and known security expert, was kind enough to review my code and point me to a better implementation of the DES (his revision of the FreeSec code). It does not use any locking mechanism (being fully reentrant), provides extended DES support (not only standard) and is under BSD license (always preferable than the lgpl one we used until now).Excuse me displaying my ignorance (this really isn't my area) - Alexander's code is already in the PHP core. Is there some reason for a Windows-specific crypt implementation? It looks to me like MD5 and standard DES are covered twice over in your current patch and the BLOWFISH check could be shared x-platform, but I could be missing something? Thanks, - Steph