Re: Proposed new package
| From: | Derick Rethans | Date: | Tue, 18 Feb 2003 12:34:48 +0000 |
| Subject: | Re: Proposed new package | ||
| References: | 1 2 3 4 5 6 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-13446@lists.php.net to get a copy of this message | ||
On Tue, 18 Feb 2003, Michael Bretterklieber wrote:
> Hi,
>
> Derick Rethans wrote:
> >>>
> >>
> >>the Crypt-classes should handle this by generating a random IV
> >>internaly, or not?
> >
> >
> > erm, no. If you want to decrypt the encrypted data you will need the
> > same IV otherwise it wont work.
> >
> hmm. makes sense.
>
> so we must also provide support for reading and writing IV's in the
> Crypt API.
Yup, but remember the IV doesn't need to be secure at all, only random
and if possible unique.
Derick
--
-------------------------------------------------------------------------
Derick Rethans http://derickrethans.nl/
JDI Media Solutions http://www.jdimedia.nl/
PHP Magazine - PHP Magazine for Professionals http://php-mag.net/
-------------------------------------------------------------------------