Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:28316
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain php.net from 140.211.166.39 cause and error)
DomainKey-Status: good
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
	s=mx; d=php.net;
	h=From:Subject:To:Date;
	b=Ukl9Nn5ApQWwwr14B5OPbhnQTTqM2KQEkXLvOdZWyUVM0wjr+ny/QHlgyVlnhLPY
	6C/fBTX3rIXQkRTfNiMc69i1T8VI9QONGHtaqMdmD1RDzyivi+LAHacl992GYK5w
Message-ID: <45F22261.2000500@php.net>
Date: Fri, 09 Mar 2007 19:13:37 -0800
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: Stanislav Malyshev <stas@zend.com>
CC: Andi Gutmans <andi@zend.com>, Wez Furlong <wez@omniti.com>, 
 internals@lists.php.net
References: <700A466F-7822-4371-AD6A-36F6880E6368@omniti.com> <698DE66518E7CA45812BD18E807866CE12B468@us-ex1.zend.net> <45F1B956.4060003@zend.com>
In-Reply-To: <45F1B956.4060003@zend.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] OpenID enabling patch for OpenSSL and PHP 5
From: pollita@php.net (Sara Golemon)

>> Doesn't seem like this ever got commited.
>> Can we include this in PHP 5.2.2? It doesn't break existing APIs so I
>> think it's a good idea.
> 
> I think adding bignum functions is OK (though it duplicates GMP to a 
> measure) - while we are at it, why not add implementation for 
> btwoc(number) also?
> 
I'd suggest making big_int (in PECL) into a bundled extension.  I know 
the original author hasn't touched it since 2005, but I've been using 
the underlying library in a few applications and would be willing to 
take over maintenance on it (Alexander Valyalkin released it into the 
public domain -- So bundling it is not an issue).

I'd also like to expand it with things like DSA/RSA implementations and 
some additional number theory applications like euclidean inversion and 
the like.

I know that bc would be a reasonable candidate for this kind of 
exploitation, but the fact is that bc was designed with base10 in mind 
and isn't particularly performant when comparsed against 
gmp/openssl/big_int.

Of those three, big_int is the only one with the clean licensing (and 
ultra-small footprint) to make bundling it feasible.

-Sara

P.S. - Not that there's anything wrong with the OpenSSL implementation 
Wez did... Just tossing out my thoughts on the long-term direction to 
take with big number libraries.