PHP Internals News: Episode 35: Cryptography

London, UK Thursday, November 7th 2019, 09:35 GMT

In this episode of "PHP Internals News" I chat with Scott Arciszewski (Website, Twitter, GitHub, Patreon) about the recent PHP-FPM vulnerability and the state of cryptography in PHP.

The RSS feed for this podcast is https://derickrethans.nl/feed-phpinternalsnews.xml, you can download this episode's MP3 file, and it's available on Spotify and iTunes. There is a dedicated website: https://phpinternals.news

Show Notes* PHP-FPM bug

+ PHP Bug Report
+ CVE 2019-11043
+ Exploit Code

• ECB Penguin
• Padding Oracle Attack
• Constant Time Encoding with ext/sodium: sodium_base642bin()
• Ciphersweet
• Supersingular isogeny key exchange

Credits Music: Chipper Doodle v2 — Kevin MacLeod (incompetech.com) — Creative Commons: By Attribution 3.0