Tom Worster
|
e7a888ad11
|
use file_get_contents and not magic numbers
|
9 years ago |
Tom Worster
|
1f41a2c9af
|
Fixes #9878,9879,9880: Make `\base\Security` use `random_bytes()`, LibreSSL, mcrypt, limit OpenSSL to Windows, and to prefer `password_hash()` over `crypt()`
|
9 years ago |
freezy
|
6a4436f95b
|
[Fixes #9177] Password Hash Cost setting for Security component
|
9 years ago |
Alexander Makarov
|
6949992246
|
Simplified tests directory structure a bit
|
10 years ago |
tom--
|
4512833fac
|
Fixes #7215: Uses OpenSSL crypto lib instead of Mcrypt. Added testing of encrypted data compatibility, both backward and forward
|
10 years ago |
tom--
|
cf42333ffb
|
control of backwards/forwards compat regression test
(cherry picked from commit 10be911)
|
10 years ago |
Alexander Mohorev
|
899b778994
|
Correct type declarations
|
10 years ago |
RichWeber
|
92cd13a913
|
pull origin
|
10 years ago |
tom--
|
c6a8b418ef
|
compareString(): timing depends only on length of `$actual` input, unit test
|
10 years ago |
Alexander Makarov
|
c5a3cd511e
|
Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public
|
10 years ago |
tom--
|
2c5c2c101b
|
Fixes #4131: Security adjustments
|
10 years ago |
Alexander Makarov
|
481db35512
|
Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation
|
10 years ago |
Paul Klimov
|
90a625013c
|
Result check at `Security::generateRandomKey()` added
|
10 years ago |
Qiang Xue
|
399b6b18e3
|
Fixes #4103
|
10 years ago |
Paul Klimov
|
052ae83340
|
Option `Security::autoGenerateSecretKey` added
|
10 years ago |
Paul Klimov
|
5a42985750
|
Option `Security::useDeriveKeyUniqueSalt` added
|
10 years ago |
Paul Klimov
|
4ce4707a3a
|
Option `Security::passwordHashStrategy` added
|
10 years ago |
Paul Klimov
|
4063502439
|
Option `Security::deriveKeyStrategy` added
|
10 years ago |
Paul Klimov
|
4768dcdbc2
|
Method `Security::compareString()` extracted
|
10 years ago |
Klimov Paul
|
db0beb6b6b
|
'yii\base\Security' component created.
|
10 years ago |