Removing argon2 library files in favor of --with-argon2[=DIR]

- Configure flag now accepts --with-argon2 for dynamic linking with
libargon2. Argon2 will be enabled in password_* only i

Removing argon2 library files in favor of --with-argon2[=DIR]

- Configure flag now accepts --with-argon2 for dynamic linking with
libargon2. Argon2 will be enabled in password_* only if this
flag is passed.
- --with-argon2 config flag allows user passed directory for linking
- Added Argon2 specific tests to ensure existing tests do not fail
when argon2 is disable

show more ...

Working implementation with password_hash, password_verify

Split rand and mt_rand into separate files

Move HAVE_ATTRIBUTE_ALIGNED check outside crypt block

This is checked outside the crypt() implementation as well.

Remove PHP_*_CRYPT constants

They are always 1.

Ensure that all crypt() formats are supported

Checks for md5, sha512 and sha256 were missing.

As a result the PHP_*_CRYPT constants are always 1 now.

Deduplicate NAN/INF portability, move to Zend

Additional improvements to crypt() detection code

Reformat to normalize tabs vs spaces, return 1 if crypt.h not
defined, fix C99 compliance.

ext/standard/config.m4: fix crypt() test segfaults in >=glibc-2.17.

Starting with glibc-2.17, the crypt() function will report an EINVAL
and return NULL when the format of the "salt" par

ext/standard/config.m4: fix crypt() test segfaults in >=glibc-2.17.

Starting with glibc-2.17, the crypt() function will report an EINVAL
and return NULL when the format of the "salt" parameter is
invalid. The current tests for crypt() pass its result to strcmp(),
causing segfaults when the value returned from crypt() is NULL.

This commit modifies the test programs to exit with failure when
crypt() returns NULL.

Reference: https://bugs.gentoo.org/show_bug.cgi?id=518964

show more ...

Use arc4random on OpenBSD 5.5+ and NetBSD 7+

As discussed with @weltling, keeping arc4random on the condition that the OS has a solid implementation of it

Remove arc4random

There has been a lot of discussion around whether arc4random should be included. Given how many different impementations of it are in the wild, we can't guarantee a secure

Remove arc4random

There has been a lot of discussion around whether arc4random should be included. Given how many different impementations of it are in the wild, we can't guarantee a secure implementation on all platforms.

show more ...

Add support for getrandom(2), add type check on file descriptor

Fix to_read, throw exception if syscall fails

Fixes thanks to feedback from sarnold at ##crypto on freenode

Add support for getrandom(2), add type check on file descriptor

Fix to_read, throw exception if syscall fails

Fixes thanks to feedback from sarnold at ##crypto on freenode

Correction on error conditions

Remove dead code (thanks @defuse)

It turns out getrandom can take >256, getentropy refuses.

Better semantics

Thanks @defuse for catching my silly mistake here

Cast to size_t to be explicit

Let's simplify the logic a bit

Let's be consistent; define everything before we do any logic

Continuously check that the file descriptor is still a valid one

Add device type check on fd initialization

show more ...

Improve CSPRNG implementation

Initial implementation for CSPRNG API

- Fixed bug #67827 (broken detection of system crypt sha256/sha512 support)

fix detection of mbstate_t with clang

AC_TRY_COMPILE expexts a function body

fix detection of mbstate_t with clang

AC_TRY_COMPILE expexts a function body

Patch commit d9f85373e32 by moving the float_to_double function to
a header file.

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support fo

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support for Decimal floating point numbers and
now defaults to using similar logic as what libmysqlclient does:
convert a 4 byte floating point number into a string, and then the
string into a double. The quirks of MySQL are maintained as seen in
Field_Float::val_str()

show more ...

Patch commit d9f85373e32 by moving the float_to_double function to
a header file.

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support fo

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support for Decimal floating point numbers and
now defaults to using similar logic as what libmysqlclient does:
convert a 4 byte floating point number into a string, and then the
string into a double. The quirks of MySQL are maintained as seen in
Field_Float::val_str()

show more ...

Patch commit d9f85373e32 by moving the float_to_double function to
a header file.

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support fo

Fix for bugs #68114 (Build fails on OS X due to undefined symbols)
and #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
has rounding errors).

The patch removes support for Decimal floating point numbers and
now defaults to using similar logic as what libmysqlclient does:
convert a 4 byte floating point number into a string, and then the
string into a double. The quirks of MySQL are maintained as seen in
Field_Float::val_str()

show more ...

enable static tsrm ls cache in ext/standard

exclude log2 usage which requires C99 support