Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:81537
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.175 as permitted sender)
MIME-Version: 1.0
Sender: jakub.php@gmail.com
In-Reply-To: <CAH8MpnktGy27BGFyH9i+tdfuMbti8KzHEXp=KD5LWy0vnKtxMw@mail.gmail.com>
References: <CAH8MpnktGy27BGFyH9i+tdfuMbti8KzHEXp=KD5LWy0vnKtxMw@mail.gmail.com>
Date: Sun, 1 Feb 2015 18:07:06 +0000
Message-ID: <CAEKnhAE93rGQmN=jo-uWe4eRq2J8NZM8P=zjHeiKcMn+-KvxDw@mail.gmail.com>
To: Daniel Lowrey <rdlowrey@php.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=bcaec51a74b49b129b050e0ab450
Subject: Re: [PHP-DEV] Re: OpenSSL ext. improvements for authenticated cipher modes.
From: bukka@php.net (Jakub Zelenka)

--bcaec51a74b49b129b050e0ab450
Content-Type: text/plain; charset=UTF-8

Hey,

On Sun, Feb 1, 2015 at 5:49 PM, Daniel Lowrey <rdlowrey@php.net> wrote:
>
>   - openssl_decrypt() now returns mixed ... if $options['get_tag'] == true
> then return [$decryptedString, $tag], otherwise return $decrypted string as
> before to preserve BC.
>   - the encrypt function could use $options['set_tag'] to define that (or
> any other secondary information needed for the operation).
>

I think that you confused it a bit :). The encryption results in cipher
text and a tag. The decryption then validates the tag so you pass the tag
as a parameter.

Except that it's almost the same what I thought. I'm just not sure that
mixed return value is a good idea. It seems a bit better having tag as a
reference to me. But it's just a small detail that could be added to the
RFC as a choice :)

Cheers

Jakub

--bcaec51a74b49b129b050e0ab450--