BROADCASTS.com

Published: Nov. 7, 2019, 9:35 a.m.

\n \n \n PHP Internals News: Episode 35: Cryptography\n \n \n Thursday, November 7th 2019, 09:35 GMT\n London, UK\n \n

In this episode of "PHP Internals News" I chat with Scott Arciszewski (Website, Twitter, GitHub, Patreon) about the recent PHP-FPM vulnerability and the state of cryptography in PHP.

\n

The RSS feed for this podcast is https://derickrethans.nl/feed-phpinternalsnews.xml, you can download this episode's MP3 file, and it's available on Spotify and iTunes. There is a dedicated website: https://phpinternals.news

\n \n Show Notes\n

\n
• \n

  \n PHP-FPM bug\n

  \n
  \n
  • \n

    \n PHP Bug Report\n

    \n
  \n
  • \n

    \n CVE 2019-11043\n

    \n
  \n
  • \n

    \n Exploit Code\n

    \n
  \n
  \n
\n
• \n

  \n ECB Penguin\n

  \n
\n
• \n

  \n Padding Oracle Attack\n

  \n
\n
• \n

  Constant Time Encoding with ext/sodium: sodium_base642bin()

  \n
\n
• \n

  \n Ciphersweet\n

  \n
\n
• \n

  \n Supersingular isogeny key exchange\n

  \n
\n

\n \n \n Credits\n \n \n

Music: Chipper Doodle v2 — Kevin MacLeod (incompetech.com) — Creative Commons: By Attribution 3.0

\n \n \n \n \n \n \n \n \n \n \n \n \n