[dev] security idea

Apis Hytt php3dev@carousel.tabcat.com
Mon, 6 Nov 2000 16:06:32 -0600 (CST)


	The mhash-0.8.3 has added several new key based hash methods
		plus the regular ones, recently.

	I have just compiled and am building in apache-1.3-dev-cvs and
php4-dev-cvs.  The mhash kit itself passes the built-in tests so looks
promising.

http://mhash.sourceforge.net

Apis
-nnnn-
On Mon, 6 Nov 2000, Chuck Hagenbuch wrote:

> Quoting Jon Parise <jon@csh.rit.edu>:
> 
> > I think a good short-term action would be to encrypt the passwords
> > stored in the session data with some simple key ($conf['sitename'])
> 
> Any ideas on what to use for the encryption? I'd like to not require mcrypt -
> I'm looking at the package.HCEMD5 code that we've had around for a while...
> 
> -chuck
NNNN