Re: [PHP-DEV] crypto_something

2015-02-26 Thread Albert Casademont Filella
Please remember that now is just impossible to use AES-GCM with the current OpenSSL extension API, there is no way to get/set the authentication tag. With AES-GCM you already get a MAC for free, that should be the default operation mode. https://bugs.php.net/bug.php?id=67304 On Thu, Feb 26, 2015

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Benjamin Eberlei
On Thu, Feb 26, 2015 at 5:27 PM, Tom Worster wrote: > On 2/26/15, 11:07 AM, "Stefan Esser" wrote: > > >Hi, > > > >> libgcrypt does at least have a maintainer but it's poor > >> Werner Koch who is so destitute he lives on charity raised > >> on Kickstarter and has his work cut out just trying to

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Tom Worster
On 2/26/15, 11:17 AM, "Anthony Ferrara" wrote: >One thing I'd like to make clear: I do not intend to target 7 with >this functionality (possibly 7.1 or later). I'd rather build a POC and >play with it for a bit. So while I do want to discuss it, I just >wanted to set expectations properly. Agree

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Tom Worster
On 2/26/15, 11:07 AM, "Stefan Esser" wrote: >Hi, > >> libgcrypt does at least have a maintainer but it's poor >> Werner Koch who is so destitute he lives on charity raised >> on Kickstarter and has his work cut out just trying to deal >> with GPG: http://is.gd/cbHCYO > >Wow. Just WOW. > >Are you

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Anthony Ferrara
Leigh and all, On Thu, Feb 26, 2015 at 11:12 AM, Leigh wrote: > On 26 February 2015 at 15:37, Tom Worster wrote: >> On 2/26/15, 3:48 AM, "Stanislav Malyshev" wrote: >> >>>The custom is that the first word names the function group (yes, I know >>>old functions do not follow it, but this is new o

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Leigh
On 26 February 2015 at 16:07, Stefan Esser wrote: > Hi, > >> libgcrypt does at least have a maintainer but it's poor >> Werner Koch who is so destitute he lives on charity raised >> on Kickstarter and has his work cut out just trying to deal >> with GPG: http://is.gd/cbHCYO > > Wow. Just WOW. > >

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Leigh
On 26 February 2015 at 15:37, Tom Worster wrote: > On 2/26/15, 3:48 AM, "Stanislav Malyshev" wrote: > >>The custom is that the first word names the function group (yes, I know >>old functions do not follow it, but this is new one). Unless we're going >>to introduce a group of functions called sec

Re: [PHP-DEV] crypto_something

2015-02-26 Thread Stefan Esser
Hi, > libgcrypt does at least have a maintainer but it's poor > Werner Koch who is so destitute he lives on charity raised > on Kickstarter and has his work cut out just trying to deal > with GPG: http://is.gd/cbHCYO Wow. Just WOW. Are you jealous that thousands of people consider Werner Koch's

[PHP-DEV] crypto_something

2015-02-26 Thread Tom Worster
On 2/26/15, 3:48 AM, "Stanislav Malyshev" wrote: >The custom is that the first word names the function group (yes, I know >old functions do not follow it, but this is new one). Unless we're going >to introduce a group of functions called secure_*, random_* is a natural >choice. This reminds me o