Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Jakub Zelenka
On Mon, Feb 2, 2015 at 12:03 PM, Leigh wrote: > > In Rogaway's own OCB FAQ it states: > > The number τ, the tag length of the scheme, is, like the blockcipher > E, a parameter of the mode. It’s a number 0 ≤ τ ≤ 128. > > http://web.cs.ucdavis.edu/~rogaway/ocb/ocb-faq.htm > The OCB is just in open

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 2 February 2015 at 11:46, Jason Gerfen wrote: > According to documentation provided about the OCB mode of AES it says the > following: > > Section 3: The scheme >> >> The tag length is an integer τ ∈ [0 .. n]. ... As for the tag length, a >> suggested default of τ = 64 is reasonable. Tags of 32

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Jason Gerfen
On Mon, Feb 2, 2015 at 3:58 AM, Leigh wrote: > On 2 February 2015 at 10:57, Leigh wrote: > > length (not sure how of > > Not sure how often tag lengths aside from 16 are used. > ​ According to documentation provided about the OCB mode of AES it says the following: Section 3: The scheme > The

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 2 February 2015 at 10:57, Leigh wrote: > length (not sure how of Not sure how often tag lengths aside from 16 are used. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 1 February 2015 at 17:57, Jakub Zelenka wrote: > Hey, > > I have already implemented all of this in crypto ext ( > https://github.com/bukka/php-crypto ) and also added support for streams > (e.g. > https://github.com/bukka/php-crypto/blob/master/tests/stream_filters_cipher_gcm_dec_read.phpt > )

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-01 Thread Jakub Zelenka
Hey On Sat, Jan 31, 2015 at 4:21 PM, Leigh wrote: > On 31 January 2015 at 16:13, Jason Gerfen wrote: > > On Sat, Jan 31, 2015 at 8:53 AM, Leigh wrote: > >> At the very basic end of the spectrum, we could have openssl_get_tag > >> and openssl_set_tag, or add an extra parameter to the end of > >

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Leigh
On 31 January 2015 at 16:13, Jason Gerfen wrote: > On Sat, Jan 31, 2015 at 8:53 AM, Leigh wrote: >> At the very basic end of the spectrum, we could have openssl_get_tag >> and openssl_set_tag, or add an extra parameter to the end of >> openssl_encrypt and openssl_decrypt (pass by ref for encrypt,

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Jason Gerfen
On Sat, Jan 31, 2015 at 8:53 AM, Leigh wrote: > Hi list, > > A couple of bug reports have highlighted the fact that our > openssl_encrypt and openssl_decrupt functions have no way of getting > or setting tags required for authenticated cipher modes (i.e. GCM, > CCM, OCB (not sure if this is avail

[PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Leigh
Hi list, A couple of bug reports have highlighted the fact that our openssl_encrypt and openssl_decrupt functions have no way of getting or setting tags required for authenticated cipher modes (i.e. GCM, CCM, OCB (not sure if this is available in OpenSSL)). https://bugs.php.net/bug.php?id=68962 h