summaryrefslogtreecommitdiffstats
path: root/system/libraries/Encryption.php
AgeCommit message (Collapse)AuthorFilesLines
2018-01-09[ci skip] Merge pull request #5376 from jim-parry/copyright-updateAndrey Andreev1-2/+2
Annual copyright update Conflicts resolved: system/libraries/Cache/drivers/Cache_apcu.php
2017-12-27Merge pull request #5367 from carusogabriel/clean-elsesAndrey Andreev1-4/+2
Clean elses
2017-01-19Fix byte-safety issues & actually test for themAndrey Andreev1-5/+5
2017-01-03Update copyright data to 2017Master Yoda1-2/+2
2016-10-03[ci skip] Alter a docblockAndrey Andreev1-1/+1
2016-07-28Remove dead code written for PHP 5.2Andrey Andreev1-4/+2
2016-03-22random_bytes()-related improvementsAndrey Andreev1-6/+20
See #4260
2016-01-11[ci skip] Update ellislab.com links to https tooAndrey Andreev1-1/+1
2016-01-11[ci skip] Update codeigniter.com links to httpsAndrey Andreev1-2/+2
2016-01-11[ci skip] Bump year to 2016Andrey Andreev1-2/+2
2015-11-24Use PHP7's random_bytes() when possibleAndrey Andreev1-0/+5
Close #4260
2015-04-01Fixed typoAchraf Almouloudi1-1/+1
2015-02-05Merge pull request #3551 from gadelat/voidsAndrey Andreev1-1/+1
Fixed inconsistent return types
2015-02-04Fix typos in func namesGabriel Potkány1-2/+2
2015-02-04Fixed inconsistent return typesGabriel Potkány1-1/+1
2015-01-21Remove closing blocks at end of PHP filesvlakoff1-3/+0
2015-01-20[ci skip] Change some log messages' levelAndrey Andreev1-3/+3
'Class Loaded' type of messages flood log files when log_threshold is set to 2 (debug). They're now logged as 'info' level. This is manually applying PR #1528, which was created to do the same thing, but became outdated.
2015-01-09Bulk (mostly documentation) updateAndrey Andreev1-3/+3
- Remove PHP version from license notices - Bump year number in copyright notices - Recommend PHP 5.4 or newer to be used - Tell Travis-CI to test on PHP 5.3.0 instead of the latest 5.3 version Related: #3450
2014-11-07Fix #3317 ... MCrypt sucksAndrey Andreev1-0/+1
2014-10-27[ci skip] Switch to MIT license; close #3293Andrey Andreev1-14/+25
2014-07-12Fix CI_Encryption::substr() for PHP 5.3Andrey Andreev1-1/+4
Nothing critical, just an edge case that isn't currently used
2014-07-12Fix CI_Encryption::substr() usage of mb_substr()Andrey Andreev1-1/+1
The whole point was to use 8bit encoding
2014-07-07Continuing from previous commit ... use CI_Encryption::substr()Andrey Andreev1-8/+8
2014-07-07Fix potential bugs in password_hash(), CI_EncryptionAndrey Andreev1-8/+53
strlen(), substr() are not byte-safe when mbstring.func_overload is enabled
2014-07-02Remove GCM mode from CI_Encryption (OpenSSL)Andrey Andreev1-3/+2
While openssl_get_cipher_methods() lists 'aes-<keysize>-gcm' as supported, it appears that this is only half of the story. To be more specific, only the encryption operation of GCM is performed, and the authentication message is completely missing, rendering the whole thing useles.
2014-06-21Add CI_Encryption::create_key()Andrey Andreev1-0/+15
This was planned, we somehow forgot about it. :)
2014-06-19Remove the custom IV option from CI_EncryptionAndrey Andreev1-51/+36
It serves for no practical purpose and can only do harm.
2014-03-04CI_Encryption: Remove MCrypt 'work-arounds' for CAST-128 compatibilityAndrey Andreev1-21/+4
Turns out it's OpenSSL's fault for performing 16 rounds instead of 12 for key sizes of 5-11 bytes. Reference: http://tools.ietf.org/rfc/rfc2144.txt
2014-02-18CI_Encryption::hkdf() to follow RFC5869 more strictlyAndrey Andreev1-1/+1
2014-02-112013 > 2014darwinel1-1/+1
Update copyright notices from 2013 to 2014. And update one calendar example in user_guide from year 2013/2014 to 2014/2015.
2014-02-10CI_Encryption: Rename 'base64' parameter to 'raw_data' and add docsAndrey Andreev1-2/+2
2014-02-07CI_Encryption: Optimizations and test casesAndrey Andreev1-26/+18
2014-02-06CI_Encryption: CAST-128/CAST5 and RC4/ARCFour compatibilityAndrey Andreev1-15/+50
2014-02-06CI_Encryption: Time-attack-safe HMAC verificationAndrey Andreev1-4/+18
2014-02-05CI_Encryption: HMAC to not be derived from the encryption keyAndrey Andreev1-58/+56
2014-02-05More CI_Encryption improvementsAndrey Andreev1-46/+6
- Make OpenSSL the default driver if available (because MCrypt is stupid). - Require MCRYPT_DEV_URANDOM for the MCrypt availability check (because security; also, incidentally - it's faster that way ;)).
2014-02-05CI_Encryption: More MCrypt/OpenSSL compatibility and get rid of the ↵Andrey Andreev1-17/+69
MCRYPT_MODE_* constants
2014-02-05CI_Encryption: Add Blowfish to compatibility listAndrey Andreev1-7/+11
2014-02-05CI_Encryption: Work around MCrypt's dumb behavior in ECB modeAndrey Andreev1-49/+65
2014-02-04CI_Encryption: Remove ARCFour from aliased ciphers due ...Andrey Andreev1-4/+2
Seems like there are some issues with it
2014-02-04CI_Encryption: Fix more errors and add a 'portability' test caseAndrey Andreev1-17/+17
2014-02-04Fix a logical error in CI_EncryptionAndrey Andreev1-3/+3
2014-02-04CI_Encryption: Fix some errors and add unit tests for hkdf()Andrey Andreev1-10/+10
2014-02-04CI_Encryption improvementsAndrey Andreev1-99/+199
- HMAC authentication by default. - HKDF support. - Reduce code repetition.
2014-02-03Introducing CI_Encryption (a CI_Encrypt replacement)Andrey Andreev1-0/+718
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-06-03 04:37:31 +0200