PHP Internals News: Episode 35: Cryptography

PHP Internals News: Episode 35: Cryptography Thursday, November 7th 2019, 09:35 GMT London, UK In this episode of "PHP Internals News" I chat with Scott Arciszewski (Website, Twitter, GitHub, Patreon) about the recent PHP-FPM vulnerability and the state of cryptography in PHP. The RSS feed for this podcast is https://derickrethans.nl/feed-phpinternalsnews.xml, you can download this episode's MP3 file, and it's available on Spotify and iTunes. There is a dedicated website: https://phpinternals.news Show Notes PHP-FPM bug PHP Bug Report CVE 2019-11043 Exploit Code ECB Penguin Padding Oracle Attack Constant Time Encoding with ext/sodium: sodium_base642bin() Ciphersweet Supersingular isogeny key exchange Credits Music: Chipper Doodle v2 — Kevin MacLeod (incompetech.com) — Creative Commons: By Attribution 3.0