-
-
Notifications
You must be signed in to change notification settings - Fork 58
Cryptography support through the scripting interface #1496
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Cryptography support through the scripting interface #1496
Conversation
Check message length before attempting to encrypt.
Do we want to still support 512 bit length RSA keys. 512 bit length keys are laughably insecure these days, and OpenSSL is currently discussing whether to disable key generation using 512 bit lengths. Several other projects have also removed key generation support of lower than 1024 bits already. I will probably be removing it unless there is any real reason to keep it. I doubt there are any legacy applications here that would require such a thing. |
Should Enc/decrypting binary data would be handy to have as well |
"They said we couldn't do it. They said we shouldn't do it. They begged us not to do it, and we did it anyway!" - Soldier
This provides basic cryptography support through the scripting interface utilizing OpenSSL.
Currently, errors generated using these interfaces will simply return a
null
value. For example, if a encryption fails, instead of receiving a string containing the encrypted data, you will receivenull
.The function names are not finalized just yet. I need to come up with some easy to use and understand names for the future. I am also working on how to include key pair generation options when trying to generate a new key pair. There are different padding methods available to us. The current default is to use what are the recommended options, but having alternatives might make sense seeing as how other padding methods are still somewhat used.
The current outputs of this interface will always be PEM formatted. This interface also always assumes PEM formatted keys as an input.
TODO: