Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:20034
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Date: Tue, 15 Nov 2005 23:11:43 +0100
To: internals@lists.php.net
Message-ID: <20051115221143.GA28082@hardened-php.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.8i
Subject: PHP 5.1.0 - sha256() and sha256_file() support
From: sesser@hardened-php.net (Stefan Esser)

Hello,

with MD5 and SHA1 more or less broken, I have hacked together sha256() and sha256_file(),
because people want a secure hashing function in plain PHP without the need for 3rd party
libraries like mhash.

Both functions are already available to users of the PHP Hardening-Patch for quite a while.
Actually it is too late in the release process to add it, although it just adds new files
and only adds a few things in some tables. It is more or less impossible to break something
but you never know.

If we for some reasons need another 5.1.0 RC, we can maybe add the patch. (It doesn't need
more than a few compile tests ;)

Patch: http://www.suspekt.org/php-5.1.0-sha256.patch

(So ilia... It is maybe up to your judgement only if I should do a last minute feature commit ;)

Stefan

-- 
--------------------------------------------------------------------------
 Stefan Esser                                               sesser@php.net
 Hardened-PHP Project                         http://www.hardened-php.net/

 GPG-Key                gpg --keyserver pgp.mit.edu --recv-key 0x15ABDA78
 Key fingerprint       7806 58C8 CFA8 CE4A 1C2C  57DD 4AE1 795E 15AB DA78
--------------------------------------------------------------------------