I need simple encryption, mycrypt doesnt work

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

Image
Sorry for throwing the thread off topic GWsux. It may be best to create a new thread on this line of discussion unless GWsux wants to continue moving off topic.
User avatar
Ollie Saunders
DevNet Master
Posts: 3179
Joined: Tue May 24, 2005 6:01 pm
Location: UK

Post by Ollie Saunders »

Sorry for throwing the thread off topic GWsux
My fault too.

In response to your problem GWsux, you can decrypt with mcrypt. Cytography is as much about decryption as encryption. Hashing and mhash are irreversible .
toasty2
Forum Contributor
Posts: 361
Joined: Wed Aug 03, 2005 10:28 am
Location: Arkansas, USA

Post by toasty2 »

Er, mcrypt is impossible in my position, I have a webhost, and apparently they don't have mcrypt, and I really doubt they would install it for me. But, I don't need encryption anymore, I was going to save some important user info (encrypted) inside a cookie, but now I've thought of a better way using sessions. Thank you all anyway :)
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

If the webhost is a shared one, your sessions are likely readable by other users. I would encrypt the data there too, if it's actually sensitive.
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Post by Benjamin »

All you have to do is run the encrypted data through the same function with the same key to decrypt it.
Post Reply