PHP Internals News: Episode 35: Cryptography

PHP Internals News: Episode 35: Cryptography



Thursday, November 7th 2019, 09:35 GMT


London, UK



In this episode of "PHP Internals News" I chat with Scott
Arciszewski (Website, Twitter, GitHub, Patreon) about the
recent PHP-FPM vulnerability and the state of
cryptography in PHP.


The RSS feed for this podcast is
https://derickrethans.nl/feed-phpinternalsnews.xml, you
can download this episode's MP3 file, and it's available
on Spotify and iTunes. There is a dedicated website:
https://phpinternals.news


Show Notes




PHP-FPM bug




PHP Bug Report




CVE 2019-11043




Exploit Code






ECB Penguin




Padding Oracle Attack




Constant Time Encoding with ext/sodium:
sodium_base642bin()




Ciphersweet




Supersingular isogeny key exchange






Credits



Music: Chipper Doodle v2 — Kevin MacLeod
(incompetech.com) — Creative Commons: By
Attribution 3.0