[dev] security idea
Apis Hytt
php3dev@carousel.tabcat.com
Mon, 6 Nov 2000 16:06:32 -0600 (CST)
The mhash-0.8.3 has added several new key based hash methods
plus the regular ones, recently.
I have just compiled and am building in apache-1.3-dev-cvs and
php4-dev-cvs. The mhash kit itself passes the built-in tests so looks
promising.
http://mhash.sourceforge.net
Apis
-nnnn-
On Mon, 6 Nov 2000, Chuck Hagenbuch wrote:
> Quoting Jon Parise <jon@csh.rit.edu>:
>
> > I think a good short-term action would be to encrypt the passwords
> > stored in the session data with some simple key ($conf['sitename'])
>
> Any ideas on what to use for the encryption? I'd like to not require mcrypt -
> I'm looking at the package.HCEMD5 code that we've had around for a while...
>
> -chuck
NNNN