Download as PDF, PPTX
![@adam_englander
PHP[TEK] 2018
Wifi:
Sheraton Conference
Pass: phptek2018
Twitter:
#phptek
Rate the Talks
https://joind.in/event/phptek-2018](https://image.slidesharecdn.com/phptek2108-cryptographyadvancesinphp7-180601213135/75/php-tek-2108-Cryptography-Advances-in-PHP-7-2-1-2048.jpg)
Uploaded byAdam Englander
php[tek] 2108 - Cryptography Advances in PHP 7.2
The document summarizes advances in cryptography introduced in PHP 7.2, highlighting significant changes such as the deprecation of SSL in favor of TLS and the introduction of the sodium library for secure cryptographic operations. It discusses new features like strong authentication methods, modern encryption algorithms, and simple interfaces for implementing security practices. Additionally, it provides examples of key generation, encryption, and hashing functions using the sodium library.
More Related Content
Similar to php[tek] 2108 - Cryptography Advances in PHP 7.2
![php[world] 2016 - Tales From the Crypto: A Cryptography Primer](https://cdn.slidesharecdn.com/ss_thumbnails/phpworld2016-talesfromthecrypto-acryptographyprimer-161117190616-thumbnail.jpg?width=640&height=640&fit=bounds)
![PHP 7 Crash Course - php[world] 2015](https://cdn.slidesharecdn.com/ss_thumbnails/php7crashcourse-151118173002-lva1-app6892-thumbnail.jpg?width=640&height=640&fit=bounds)
![Don't Loose Sleep - Secure Your Rest - php[tek] 2017](https://cdn.slidesharecdn.com/ss_thumbnails/dontloosesleep-secureyourrest-170524214928-thumbnail.jpg?width=640&height=640&fit=bounds)
![php[tek] 2018 - Biometrics, fantastic failure point of the future](https://cdn.slidesharecdn.com/ss_thumbnails/phptek2018-biometricsfantasticfailurepointofthefuture-180601212954-thumbnail.jpg?width=640&height=640&fit=bounds)
php[tek] 2108 - Cryptography Advances in PHP 7.2
- 1. @adam_englander PHP[TEK] 2018 Wifi: Sheraton Conference Pass:phptek2018 Twitter: #phptek Rate the Talks https://joind.in/event/phptek-2018
- 2. @adam_englander Cryptography Advances in PHP7.2 Adam Englander Software Architect, iovation
- 3. @adam_englander Half of thechanges identified in the PHP7.2.0 release announcements were related to cryptography.
- 4. @adam_englander SSL is Dead! Longlive TLS!
- 5. @adam_englander Streams ssl:// is nowan alias of tls://
- 6. @adam_englander Steam Defaults STREAM_CRYPTO_METHOD_TLS_SERVER, STREAM_CRYPTO_METHOD_TLS_CLIENT, and tls://default to TLSv1.0 + TLSv1.1 + TLSv1.2 Instead of TLSv1.0 only
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14. @adam_englander Does a Lotof Heavy Lifting
- 15. @adam_englander Secure Like thePhantom Zone
- 16.
- 17.
- 18.
- 19. @adam_englander Constant-Time Test forEquality "abcdefg" == "hijklmnop" sodium_memcmp("abcdefg", "hijklmnop") "abcdefg" == "abcdefq" sodium_memcmp("abcdefg", "abcdefq")
- 20. @adam_englander String Memory Overwrite sodium_memzero($value); $value= "000000"; $value = "secret";
- 21. @adam_englander Fast Like theMillennium Falcon
- 22.
- 23.
- 24.
- 25.
- 26.
- 27.
- 28. @adam_englander Time based rathercount based iterations
- 29.
- 30.
- 31.
- 32.
- 33. @adam_englander Blake2b for datavalidation
- 34.
- 35. @adam_englander Symmetric Key Encryption a.k.asecret key encryption
- 36.
- 37.
- 38.
- 39.
- 40. @adam_englander AES256-GCM if youlike pain
- 41. @adam_englander Asymmetric Key Cryptography a.k.a.public key encryption
- 42.
- 43. @adam_englander Signatures can beattached or detached
- 44.
- 45.
- 46.
- 47.
- 48.
- 49.
- 50. @adam_englander Key Generation $keyPair =sodium_crypto_box_keypair();
- 51. @adam_englander Getting Public/Private KeyPairs $secretKey = sodium_crypto_box_secretkey( $keyPair); $publicKey = sodium_crypto_box_publickey( $keyPair);
- 52. @adam_englander Creating Mixed KeyPairs sodium_crypto_box_keypair_from_secretkey_and_publickey( $mySecretKey, $theirPublicKey );
- 53. @adam_englander Encryption $nonce = random_bytes( SODIUM_CRYPTO_BOX_NONCEBYTES); $ciphertext= sodium_crypto_box( "Hello ,World!", $nonce, $keyPair);
- 54.
- 55.
- 56. @adam_englander Key Generation $keyPair =sodium_crypto_sign_keypair();
- 57. @adam_englander Getting Public/Private KeyPairs $secretKey = sodium_crypto_sign_secretkey( $keyPair); $publicKey = sodium_crypto_sign_publickey( $keyPair);
- 58. @adam_englander Signing $signedMsg = sodium_crypto_sign( "Hello,World!", $secretKey );
- 59. @adam_englander Signature Verification $originalMsg =sodium_crypto_sign_open( $signedMsg, $publicKey ); if ($originalMsg === false) { throw new Exception("Fail!"); }
- 60.
- 61. @adam_englander Standard Hash $h =sodium_crypto_generichash("Msg"); print base64_encode($h); URvIHd4RGAg4xWLIK7NfMiP0YGHr3kqVXCez9InPHgM=
- 62. @adam_englander Signed Hash $key =random_bytes( SODIUM_CRYPTO_GENERICHASH_KEYBYTES); $h = sodium_crypto_generichash( "Msg", $key); print base64_encode($h); /qV2j5MfGBjJ9g60PQnnQYSt1Y/1csjJzq37C1pE4SE=
- 63. @adam_englander Short Hash $key =random_bytes( SODIUM_CRYPTO_SHORTHASH_KEYBYTES); $h = sodium_crypto_shorthash( "Msg", $key); print base64_encode($h); eCTWVTKkkKw=
- 64.
- 65. @adam_englander Create KDF Hash $hash= sodium_crypto_pwhash_str( 'Password', SODIUM_CRYPTO_PWHASH_OPSLIMIT_INTERACTIVE, SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE ); print base64_encode($hash); $argon2id$v=19$m=65536,t=2,p=1$qCcD3BqZjmbYEFMKxgsUjA$5BzYYNuACwp3Zq p29QnT9upRxVZykU/P8isst91uKYE==
- 66.
- 67.
- 68. @adam_englander Create Password Hash $hash= password_hash( 'Password', PASSWORD_ARGON2I ); $argon2i$v=19$m=1024,t=2,p=2$WW15cG1NLjR0cXZET3Nzeg$ImFwKTaVgDHme95M ROV5S9ssG+e458gdpLz9Cwwiba8
- 69.
- 70.
- 71.