php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #32917 Native support for encryption/hashing algorithms
Submitted: 2005-05-02 22:42 UTC Modified: 2005-05-14 07:36 UTC
From: brian_bisaillon at rogers dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.0.4 OS: BSD, Linux, Windows, UNIX
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: brian_bisaillon at rogers dot com
New email:
PHP Version: OS:

 

 [2005-05-02 22:42 UTC] brian_bisaillon at rogers dot com
Description:
------------
Dear PHP Software Engineers,

I would like you to consider adding native support for FIPS PUBS 140-2, 180-2, 186-2, 197 and 198. I want to be able to use encryption/hashing algorithms on data without having to implement a full PKI solution.

To date, I have been using the mcrypt and mhash extensions to PHP but they are not very portable across multiple operating systems. For example, why do end users have to use Cygwin under Windows just to be able to run PHP applications that use mcrypt and mhash? The fact that end users have to use Cygwin under Windows just increases their learning curve. This fact has a negative impact on PHP applications.

Anyway, I am hoping that PHP will get serious when it comes to natively supporting encryption/hashing algorithms that comply with FIPS approved standards/specifications.

Please CC security@php.net because this message concerns security.


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-05-06 10:32 UTC] derick@php.net
FYI, mcrypt works fine without Cygwin... and this has nothing to do with security either. If you read the mcrypt manual page you see where you can get the libmcrypt dll... which works fine with our standard build for Windows.

Extra encryption algorithms should be done in an extension, not in the core of PHP either.
 [2005-05-06 14:55 UTC] brian_bisaillon at rogers dot com
You are saying that the DLL at the following web site will work with the latest version of PHP 5 on Windows?

http://ftp.emini.dk/pub/php/win32/mcrypt/

I thought the developers chose to no longer support the Windows DLLs? If I am mistaken then I apologize for this because for some reason I remember them no longer supporting the Windows DLLs. Perhaps that was a decision at one time and now they support it again?
 [2005-05-14 07:36 UTC] brian_bisaillon at rogers dot com
Anyway, I got everything working. In the past, I thought 
they stopped supporting the mcrypt DLLs and I remember 
using them and having problems with crashes, etc. However, 
now everything works fine so my PHP applications work fine 
in Windows now. w00t...
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Mon Jul 01 11:01:32 2024 UTC