Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Jason Gerfen
On Mon, Feb 2, 2015 at 3:58 AM, Leigh lei...@gmail.com wrote: On 2 February 2015 at 10:57, Leigh lei...@gmail.com wrote: length (not sure how of Not sure how often tag lengths aside from 16 are used. ​ According to documentation provided about the OCB mode of AES it says the following:

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 2 February 2015 at 11:46, Jason Gerfen jason.ger...@gmail.com wrote: According to documentation provided about the OCB mode of AES it says the following: Section 3: The scheme The tag length is an integer τ ∈ [0 .. n]. ... As for the tag length, a suggested default of τ = 64 is

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 2 February 2015 at 10:57, Leigh lei...@gmail.com wrote: length (not sure how of Not sure how often tag lengths aside from 16 are used. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Leigh
On 1 February 2015 at 17:57, Jakub Zelenka bu...@php.net wrote: Hey, I have already implemented all of this in crypto ext ( https://github.com/bukka/php-crypto ) and also added support for streams (e.g.

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-02 Thread Jakub Zelenka
On Mon, Feb 2, 2015 at 12:03 PM, Leigh lei...@gmail.com wrote: In Rogaway's own OCB FAQ it states: The number τ, the tag length of the scheme, is, like the blockcipher E, a parameter of the mode. It’s a number 0 ≤ τ ≤ 128. http://web.cs.ucdavis.edu/~rogaway/ocb/ocb-faq.htm The OCB is

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-02-01 Thread Jakub Zelenka
Hey On Sat, Jan 31, 2015 at 4:21 PM, Leigh lei...@gmail.com wrote: On 31 January 2015 at 16:13, Jason Gerfen jason.ger...@gmail.com wrote: On Sat, Jan 31, 2015 at 8:53 AM, Leigh lei...@gmail.com wrote: At the very basic end of the spectrum, we could have openssl_get_tag and

[PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Leigh
Hi list, A couple of bug reports have highlighted the fact that our openssl_encrypt and openssl_decrupt functions have no way of getting or setting tags required for authenticated cipher modes (i.e. GCM, CCM, OCB (not sure if this is available in OpenSSL)). https://bugs.php.net/bug.php?id=68962

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Jason Gerfen
On Sat, Jan 31, 2015 at 8:53 AM, Leigh lei...@gmail.com wrote: Hi list, A couple of bug reports have highlighted the fact that our openssl_encrypt and openssl_decrupt functions have no way of getting or setting tags required for authenticated cipher modes (i.e. GCM, CCM, OCB (not sure if

Re: [PHP-DEV] OpenSSL ext. improvements for authenticated cipher modes.

2015-01-31 Thread Leigh
On 31 January 2015 at 16:13, Jason Gerfen jason.ger...@gmail.com wrote: On Sat, Jan 31, 2015 at 8:53 AM, Leigh lei...@gmail.com wrote: At the very basic end of the spectrum, we could have openssl_get_tag and openssl_set_tag, or add an extra parameter to the end of openssl_encrypt and