Re: PHP 7.1 Cryptography Projects
| From: | Pierre Joye | Date: | Tue, 04 Aug 2015 15:47:46 +0000 |
| Subject: | Re: PHP 7.1 Cryptography Projects | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-87613@lists.php.net to get a copy of this message | ||
On Tue, Aug 4, 2015 at 2:23 PM, Stanislav Malyshev <smalyshev@gmail.com> wrote:
>> * Adding streaming encryption/decryption support to OpenSSL
>
> Hm... Implementing streaming cyphers right is not trivial, and if we'd
> be doing our own crypto (as opposed to providing API to existing
> libraries) we need a real lot of review to be confident it's done right.
I totally agree. Except bundling existing widely used code (if really
necessary, like what we did for blowfish for example), I would
strongly recommend to never even try to implement our own crypto
features.
Cheers,
--
Pierre
@pierrejoye | http://www.libgd.org