Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Use sodium_(bin2hex|hex2bin) instead of paragonie/constant_time_encoding

Download Browse

Constant time encoding/decoding to/from hexadecimal can be done with libsodium, let's leverage that. It's one less lib and with libsodium in PHP 7.2 it will be one less side channel potential issue caused by a pure PHP implementation. This is part of story #12266: use an API key rather than a login / password Change-Id: I9903fcf3e2db9b3471c1c67a299f4a256b3aa4cf

+3 −67
Thomas Gerbet (tgerbet) 2018-10-01 16:55
Thomas Gerbet (tgerbet) 2018-10-02 09:03
1bebce0f8c09ae9842ee1058c0bd90d972454456
b7deaa97b4ef01c529d627f93f4314f78ab29cbb
git #tuleap/stable/1bebce0f8c09ae9842ee1058c0bd90d972454456

Modified Files

Side by side diff
Inline diff
Name
M src/common/User/AccessKey/AccessKey.php +2 −2 Go to diff View file
M src/composer.json +0 −1 Go to diff View file
M src/composer.lock +1 −64 Go to diff View file