Re: Proposed new package

Sorr for the confusion, I just typed that example up off the top of my head, I do have IVs in the implementation; just forgot to include it and before I could correct the example my internet connection went down for "scheduled maintenance". Don't get me started on my ISP. On Tue, 18 Feb 2003 13:34:48 +0100 (CET) Derick Rethans <d.rethans@jdimedia.nl> wrote:

On Tue, 18 Feb 2003, Michael Bretterklieber wrote:

Hi, Derick Rethans wrote:

the Crypt-classes should handle this by generating a

random IV

internaly, or not?

erm, no. If you want to decrypt the encrypted data you

will need the

same IV otherwise it wont work.

hmm. makes sense. so we must also provide support for reading and writing IV's in the Crypt API.

Yup, but remember the IV doesn't need to be secure at all, only random and if possible unique. Derick -- ------------------------------------------------------------------------- Derick Rethans

                               http://derickrethans.nl/  JDI Media Solutions                            http://www.jdimedia.nl/
 PHP Magazine - PHP Magazine for Professionals      http://php-mag.net/

------------------------------------------------------------------------- -- PEAR Development Mailing List (http://pear.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php