Love Fuel?    Donate

FuelPHP Forums

Ask your question about FuelPHP in the appropriate forum, or help others by answering their questions.
Does Fuel still use phpseclib besides for legacy (en/de)cryption in Fuel v1.8.1+?
  • wpoormanwpoorman
    Poking through the code since the 1.8.1 update, it looks like phpseclib is only used in Crypt in case of legacy (en/dec)cryption/(en/de)coding needs. Is this correct?
  • HarroHarro
    Accepted Answer
    Correct.
  • wpoormanwpoorman
    Thanks for the answer!

    So can it be assumed that in 1.9 and beyond phpseclib would be deprecated? And it would be encouraged to use sodium for any hashing, symmetric, and asymmetric encryption needs going forward?
  • HarroHarro
    Yes, it is much more secure, the old Crypt encryption could be broken with sufficient GPU power.

    And in PHP 7.2+, Sodium support it is built-in.
  • efxefx
    Its fixed I had not need to crypt, md5 filename is ok.

    ----

    hey, I just switched to 1.8.1 and I have:
    ERROR - 2018-06-07 10:57:11 --> Error - hex2bin() only expects hexadecimal characters in /opt/fuel-1.8.1/vendor/paragonie/sodium_compat/src/Core/Util.php on line 343

    I see in my code :
    \Crypt::encode it supposed to create the error ? I dont see any sodium replacement in doc ?

    thanks
  • HarroHarro
    Release docs haven't been updated online yet, so see https://fuelphp.com/dev-docs/classes/crypt/config.html

    And no, it is not supposed to do that, but without a backtrace it's difficult to pinpoint a cause.
  • efxefx
    thanks Harro
Add a Comment

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Categories

In this Discussion