Re: [PHP-DEV] hash_hkdf() signature and return value

2017-09-06 Thread Yasuo Ohgaki
Hi Dan, Sorry for keep posting broken English. I shouldn't difficult. > It shouldn't be difficult. Looking forward more than handful, useful and common hash_hkdf() application examples for PHP that justify the API. If you would not like to spend time for working code, just ideas are OK also.

Re: [PHP-DEV] hash_hkdf() signature and return value

2017-09-06 Thread Yasuo Ohgaki
Hi Dan, I appreciate your feedback, regardless of your opinion towards this issue. On Wed, Sep 6, 2017 at 8:04 PM, Dan Ackroyd wrote: > On 6 September 2017 at 02:15, Yasuo Ohgaki wrote: > > What should we do for this? > > Not us, you. > OK. It is

Re: [PHP-DEV] hash_hkdf() signature and return value

2017-09-06 Thread Dan Ackroyd
On 6 September 2017 at 02:15, Yasuo Ohgaki wrote: > What should we do for this? Not us, you. You should start listening to other people's feedback. You continually refuse to accept any feedback that doesn't agree with your world-view, not only on the subject of hkdf, but on

[PHP-DEV] hash_hkdf() signature and return value

2017-09-05 Thread Yasuo Ohgaki
Hi all, This is the last recommendation for hash_hkdf[1]. In fact, this would be the last chance to fix because we'll have 7.2 soon. The issue is secure usage and API consistency. Currently hash_hkdf() has following signature: hash_hkdf(string $algo , string $ikm [, int $length = 0 [, string