5 Commits (2d5a0bf5aeeb3843a9dd3c9c12a6c680035cede5)

Author SHA1 Message Date
Tom Worster c455a3c54b Security component enhancements 9 years ago
Tom Worster e7a888ad11 use file_get_contents and not magic numbers 9 years ago
Tom Worster 1f41a2c9af Fixes #9878,9879,9880: Make `\base\Security` use `random_bytes()`, LibreSSL, mcrypt, limit OpenSSL to Windows, and to prefer `password_hash()` over `crypt()` 9 years ago
freezy 6a4436f95b [Fixes #9177] Password Hash Cost setting for Security component 9 years ago
Alexander Makarov 6949992246 Simplified tests directory structure a bit 10 years ago
tom-- 4512833fac Fixes #7215: Uses OpenSSL crypto lib instead of Mcrypt. Added testing of encrypted data compatibility, both backward and forward 10 years ago
tom-- cf42333ffb control of backwards/forwards compat regression test 10 years ago
Alexander Mohorev 899b778994 Correct type declarations 10 years ago
RichWeber 92cd13a913 pull origin 10 years ago
tom-- c6a8b418ef compareString(): timing depends only on length of `$actual` input, unit test 10 years ago
Alexander Makarov c5a3cd511e Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public 10 years ago
tom-- 2c5c2c101b Fixes #4131: Security adjustments 10 years ago
Alexander Makarov 481db35512 Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation 10 years ago
Paul Klimov 90a625013c Result check at `Security::generateRandomKey()` added 10 years ago
Qiang Xue 399b6b18e3 Fixes #4103 10 years ago
Paul Klimov 052ae83340 Option `Security::autoGenerateSecretKey` added 10 years ago
Paul Klimov 5a42985750 Option `Security::useDeriveKeyUniqueSalt` added 10 years ago
Paul Klimov 4ce4707a3a Option `Security::passwordHashStrategy` added 10 years ago
Paul Klimov 4063502439 Option `Security::deriveKeyStrategy` added 10 years ago
Paul Klimov 4768dcdbc2 Method `Security::compareString()` extracted 10 years ago
Klimov Paul db0beb6b6b 'yii\base\Security' component created. 10 years ago