PHP Internals News
PHP Internals News
Derick Rethans
PHP Internals News: Episode 35: Cryptography
1 seconds Posted Nov 7, 2019 at 9:35 am.
GMT
0:00
0:01
Download MP3
Show notes
PHP Internals News: Episode 35: Cryptography
Thursday, November 7th 2019,
London, UK
In this episode of "PHP Internals News" I chat with Scott Arciszewski (Website, Twitter, GitHub, Patreon) about the recent PHP-FPM vulnerability and the state of cryptography in PHP.
The RSS feed for this podcast is https://derickrethans.nl/feed-phpinternalsnews.xml, you can download this episode's MP3 file, and it's available on Spotify and iTunes. There is a dedicated website: https://phpinternals.news
Show Notes
PHP-FPM bug
PHP Bug Report
CVE 2019-11043
Exploit Code
ECB Penguin
Padding Oracle Attack
Constant Time Encoding with ext/sodium: sodium_base642bin()
Ciphersweet
Supersingular isogeny key exchange
Credits
Music: Chipper Doodle v2 — Kevin MacLeod (incompetech.com) — Creative Commons: By Attribution 3.0