Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:48327
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.170 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type:content-transfer-encoding;
        b=OR4FvJ1/U5aqw+apxftnTWsmsrM1KH25wzyxOWKv+X7H8jNHKHwDt0jxAnxno50K+0
         hZf0enyawMNbfah3PLZLHUfp54qwoZLIFvCouMMUo+slx1fxBTPhYTjlALb4ziy/1Tgs
         aLjdE+wvHsov10/RqeL39nycGR3BuQKm20FAE=
MIME-Version: 1.0
In-Reply-To: <A8.40.27340.20403FB4@pb1.pair.com>
References: <D0.2B.05421.113F1FB4@pb1.pair.com>
	 <AANLkTilSOPh0yWZ6dcXCK-v7fcQDeRUcV85M6aOeD4in@mail.gmail.com>
	 <A8.40.27340.20403FB4@pb1.pair.com>
Date: Tue, 18 May 2010 23:26:58 +0200
Message-ID: <AANLkTildJlXp3Re94TdFNhB7yoWo2YhYD_F4ENm8KR-o@mail.gmail.com>
To: Sara Golemon <pollita@php.net>
Cc: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] openssl_(en|de)crypt missing IV
From: pierre.php@gmail.com (Pierre Joye)

On Tue, May 18, 2010 at 11:17 PM, Sara Golemon <pollita@php.net> wrote:
>>> Fixing this is a simple matter, but I wanted to bounce approaches for B=
C
>>> (or
>>> lack thereof) off everyone else since this version of openssl_encrypt()
>>> is
>>> already "in the wild".
>>
>>> I think it's worth a BC break. =A0Comments?
>>
>> To break BC is a no go, even if your arguments are appealing (even in
>> a major version).
>>
>
> I disagree about it's no-go-ness, given the fact that these functions are=
n't
> particularly usable as-is, but it's also not worth a fight.
>
> Given the comments made on list my intentions are as follows:
>
> 1) Add $iv as a fifth, optional parameter to openssl_(en|de)crypt()
> 2) Throw a warning if openssl_encrypt() is used without an IV
> 3) Add openssl_cipher_get_iv_length($cipher)
>
> I intend to make these changes on both trunk and PHP_5_3 because, IMO, th=
is
> is a bug, not merely a missing feature.
>
> The only BC break is the warning raised when using openssl_encrypt() with=
out
> an IV. =A0Given the extremely bad practice using a NULL IV represents, I =
think
> this is a reasonable course of action.

It changes the signature making the fifth argument a complete
different thing. I strongly disagree with this strategy, even if I can
understand your reasoning. We can't begin to "fix" things by changing
existing API signatures, that's going to end badly.

To define a new and clean API is not only BC but may also allow
obvious naming. And last but not least, it can then be merged in 5.3
without worrying about any possible impact.

Cheers,
--=20
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org