Re: [RFC][VOTE] OpenSSL AEAD support

From: Date: Sat, 23 Jan 2016 21:01:05 +0000
Subject: Re: [RFC][VOTE] OpenSSL AEAD support
References: 1  Groups: php.internals 
Request: Send a blank email to internals+get-90856@lists.php.net to get a copy of this message
Just FYI, I'm voting against this proposal, as the number of parameters is simply growing out of control, which involves: - more BC breaks if default parameters change - more security issues if the defaults are unsafe (or become unsafe, for whatever reason) - more cognitive load (it's arguably more complex) In general, this simply pushes too many responsibilities on the interface. Support for AEAD can be moved to a separate function, which involves a minor BC break: collision with pre-existing functions, if anybody was crazy/stupid enough to implement crypto in userland, and even worse in the global namespace. Marco Pivetta http://twitter.com/Ocramius http://ocramius.github.com/ On 20 January 2016 at 17:40, Jakub Zelenka <bukka@php.net> wrote: > Hi, > > The vote is now open: > > https://wiki.php.net/rfc/openssl_aead#voting > > Cheers > > Jakub >

« previous php.internals (#90856) next »