PHP Internals News: Episode 35: Cryptography

London, UK Thursday, November 7th 2019, 09:35 GMT

In this episode of "PHP Internals News" I chat with Scott Arciszewski (Website, Twitter, GitHub, Patreon) about the recent PHP-FPM vulnerability and the state of cryptography in PHP.

The RSS feed for this podcast is https://derickrethans.nl/feed-phpinternalsnews.xml, you can download this episode's MP3 file, and it's available on Spotify and iTunes. There is a dedicated website: https://phpinternals.news

Show Notes

• PHP-FPM bug

  • PHP Bug Report

  • CVE 2019-11043

  • Exploit Code

• ECB Penguin

• Padding Oracle Attack

• Constant Time Encoding with ext/sodium: sodium_base642bin()

• Ciphersweet

• Supersingular isogeny key exchange

Credits

Music: Chipper Doodle v2 — Kevin MacLeod (incompetech.com) — Creative Commons: By Attribution 3.0