PHP encryption for the common man
-
Here’s an interesting read from Thomas Myer on encryption of data using PHP.
“In this increasingly virtual online world, you have to be careful to protect your data. Learn the basics of encoding and encrypting important bits of information, such as passwords, credit card numbers, and even entire messages. Get an overview of what it means to encrypt and decrypt information, as well as some practical examples involving passwords and other data, using PHP’s built-in functionality.”
Advertisement
1 Comment
Leave a Comment
























September 10th, 2006 at 11:34 am
This approach is unsafe - it does not protect the IV from man in the middle attacks in CBC block mode, which exposes the leader block to arbitrary attack without plaintext.
There is a safer method here:
http://blog.sc.tri-bit.com/archives/101
The MITM attack is explained at the blog entry.