Please remember that now is just impossible to use AES-GCM with the current OpenSSL extension API, there is no way to get/set the authentication tag. With AES-GCM you already get a MAC for free, that should be the default operation mode.
https://bugs.php.net/bug.php?id=67304 On Thu, Feb 26, 2015 at 5:18 PM, Leigh <lei...@gmail.com> wrote: > On 26 February 2015 at 16:07, Stefan Esser <stefan.es...@sektioneins.de> > wrote: > > Hi, > > > >> libgcrypt does at least have a maintainer but it's poor > >> Werner Koch who is so destitute he lives on charity raised > >> on Kickstarter and has his work cut out just trying to deal > >> with GPG: http://is.gd/cbHCYO > > > > Wow. Just WOW. > > > > Are you jealous that thousands of people consider Werner Koch's work > > valuable and therefore support him building the financial ground to pay > > full-time maintainers for a software that millions use without even > > knowing (HINT: package signatures) or are you just a jerk? > > > > Unbelievable. > > > > Stefan Esser > > Woah, hold on there Stefan. I think you may have misinterpreted > something here. Toms words definitely don't have any negative feeling > to them, if anything I got the feeling of sympathy, and the "poor > maintainer" might have to quit one day unless he gets more funding! > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > >
