[TYPO3-dev] Symmetric encryption library for t3lib

[Martin Kutschker]

Marcus Krause schrieb:
> Martin Kutschker schrieb am 10/30/2009 11:12 AM Uhr:
>> Marcus Krause schrieb:
>>> I'd like to hear any comments and suggestions. Do you consider such
>>>  library an effort worth to be made? Is the current dependency on
>>> PHP mcrypt extension valid for a t3lib library?
>> What is the advantage of this wrapper class over direct use of
>> mcrypt? Is there any direct use case for the Core or the shipped
>> system extensions?
> 
> It's an abstraction from a complex area. With proper presets, encryption
> /decryption is done with one single method call each.
> If you use mcrypt function calls, you need do understand the basics of
> symmetric encryption, ciphers, modes and need more code.

Good. I hope it doesn't get so easy that you can use it in a way that it offers no encryption at all
if you're clueless and only know that t3lib/security will get you magically security.

> There's a use case; the latest security bulletin contains an issue with
> encryption/decryption. Please understand, that I don't want to point
> directly to the code.

That is, the Core uses mcrypt already and you want to add helper code. Right?

Masi