2023
2022
-
Understanding access control
Mar 18
Every application that allows authentication requires a proven form of access control. It’s important to understand the different formats available.
-
Cryptopals: Set 1 – challenge 8
Mar 14
The final Cryptopals challenge in set 1 involves detecting AES when used in ECB mode. It will become a handy utility later on …
-
Cryptopals: Set 1 – challenge 7
Mar 13
Next up with Cryptopals is a challenge to decrypt AES in ECB mode. This is relatively easy in PHP!
-
Cryptopals: Set 1 – challenge 6
Mar 12
A return to Cryptopals means we get to break the repeating-key cipher we were working with before. Breaking crypto is fun!
-
Cooking with credentials – pepper
Mar 6
No meal is complete without salt AND pepper. No password hashing scheme is truly secure without both, either!
-
Cooking with credentials – salting
Mar 5
Learn how to securely hash and anonymize user passwords in PHP using native functions that automatically apply salt.
-
Cooking with credentials – the basics
Mar 4
There are many ways to store user credentials for verification on the application side. Of all of them, only hashing is considered secure.
-
You should learn PHP
Mar 2
PHP is the language that drives the Internet. It’s not the most publicly loved of languages, but its utilization makes it the most popular.
-
A Libsodium-based secure remote password scheme for PHP
Feb 24
Let’s geek out on my favorite form of authentication – not sending passwords over the wire in the first place!
-
String comparison in PHP
Feb 23
PHP ships with multiple, native mechanisms for comparing arbitrary string values. Let’s take a closer look at two that quantify “sameness.”