[RFC] [VOTE] Improve hash_hkdf() parameter

From: Date: Sat, 25 Mar 2017 02:25:32 +0000
Subject: [RFC] [VOTE] Improve hash_hkdf() parameter
Groups: php.internals 
Request: Send a blank email to internals+get-98631@lists.php.net to get a copy of this message
Hi all, Since hash_hkdf() is in PHP 7.1.2, I start vote from today. Current hash_hkdf() function signature does not make sense. - hash_hkdf() is simple hash_hmac() extension, yet it has totally different signature. - Return value is binary unlike other hash functions. - The signature is insecure. https://wiki.php.net/rfc/improve_hash_hkdf_parameter Current signature is overly optimized very limited crypto operation and cannot be optimal by above reasons. Fortunately, almost all users are not using current hash_hkdf(). It's only from 7.1.2 to 7.1.4 now. We should avoid yet another new inconsistent and insecure function. It would be better to be fixed ASAP, IMHO. Vote start: 2017-03-25 Vote end: 2017-04-06 UTC 23:59:59 Thank you for voting. <https://wiki.php.net/rfc/improve_hash_hkdf_parameter> -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.internals (#98631) next »