2022
-
Understanding access control
Mar 18
Every application that allows authentication requires a proven form of access control. It’s important to understand the different formats available.
-
Cryptopals: Set 1 – challenge 8
Mar 14
The final Cryptopals challenge in set 1 involves detecting AES when used in ECB mode. It will become a handy utility later on …
-
Cryptopals: Set 1 – challenge 7
Mar 13
Next up with Cryptopals is a challenge to decrypt AES in ECB mode. This is relatively easy in PHP!
-
Cryptopals: Set 1 – challenge 6
Mar 12
A return to Cryptopals means we get to break the repeating-key cipher we were working with before. Breaking crypto is fun!
-
Cooking with credentials – pepper
Mar 6
No meal is complete without salt AND pepper. No password hashing scheme is truly secure without both, either!
-
Cooking with credentials – salting
Mar 5
Learn how to securely hash and anonymize user passwords in PHP using native functions that automatically apply salt.
-
Cooking with credentials – the basics
Mar 4
There are many ways to store user credentials for verification on the application side. Of all of them, only hashing is considered secure.
-
A Libsodium-based secure remote password scheme for PHP
Feb 24
Let’s geek out on my favorite form of authentication – not sending passwords over the wire in the first place!
-
Self-obfuscating value objects
Feb 22
Sometimes, certain design patterns can aid in security as well as reusability of code. Let’s look at value objects as an example.
-
Securing tokens in PHP
Feb 21
Learn how password reset and other tokens can be secured by splitting the data and leveraging common password hash methodologies.
-
Cryptopals: Set 1 – challenge 5
Feb 19
Breaking encryption is fun. Building an encryption cipher is even more so! Let’s continue our Cryptopals journey with XOR.
-
Cryptopals: Set 1 – challenge 4
Feb 18
Now that we know how to crack a single-byte XOR cipher, let’s expand and crack even more through Cryptopals’ next challenge.