Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:20045 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 20445 invoked by uid 1010); 16 Nov 2005 01:38:13 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 20430 invoked from network); 16 Nov 2005 01:38:13 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 16 Nov 2005 01:38:13 -0000 X-Host-Fingerprint: 70.85.46.36 unknown Received: from ([70.85.46.36:36045] helo=prohost.org) by pb1.pair.com (ecelerity 2.0 beta r(6323M)) with SMTP id D1/CA-07637-58D8A734 for ; Tue, 15 Nov 2005 20:38:13 -0500 Received: (qmail 26245 invoked from network); 16 Nov 2005 01:38:09 -0000 Received: from prohost.org (HELO ?127.0.0.1?) (70.85.46.36) by prohost.org with SMTP; 16 Nov 2005 01:38:09 -0000 Message-ID: <437A8D80.6090008@prohost.org> Date: Tue, 15 Nov 2005 20:38:08 -0500 User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Sara Golemon CC: internals@lists.php.net References: <20051115221143.GA28082@hardened-php.net> <003d01c5ea4d$61bbdbd0$5c8be5a9@ohr.berkeley.edu> In-Reply-To: <003d01c5ea4d$61bbdbd0$5c8be5a9@ohr.berkeley.edu> X-Enigmail-Version: 0.93.0.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Re: PHP 5.1.0 - sha256() and sha256_file() support From: ilia@prohost.org (Ilia Alshanetsky) Sara Golemon wrote: > I've had implementations of sha256,384, and 512 lying about for months now > (possibly over a year), but was told they didn't have a place in core since > mhash provided the functionality (A statement I recall agreeing with at the > time fwiw). What changed? Didn't you hear md5/sha1 are cracked in seconds by evil governments and corporations, put on your tin foil hat TODAY! I think the issue is that mhash is a relatively rare extension due to a dependency on a library that is rarely available. I think that perhaps for 6.0 we need to look into a php extension that could provide some commonly used hashes without any decencies. Ilia