CodeIgniter Encryption Library

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP



CodeIgniter Encryption Library



I'm building a quick site with CodeIgniter and currently I'm making use of the CI 'encrypt' library. Reading through here it sounds like I just throw on a quick:


$this->encrypt->encode($secret_data);



and do this when you want to use it:


$this->encrypt->decode($encripted_string);



Then the magic of CI and Mcrypt do the rest.



Well I'm not sure I can sleep without knowing what is going on in the background. So I have two questions...



How is this working? Or is there a good resource to explain to me how this is working that I can read up on it?



Is this generally thought of as a safe way to encrypt data? If not where else should I be looking.





The CodeIgniter Encryption Class provides two-way keyed encoding using XOR Hashing and Mcrypt. Check in system -> libraries for the encrypt.php file and descover what the class does....
– Vickel
Mar 22 '16 at 18:44





Thanks for the pointer.
– Miles
Mar 22 '16 at 18:48





I've updated the comment into an answer, hope it gives you some more info...
– Vickel
Mar 22 '16 at 19:10





The best resource that explains how its working is the source (old and new). It is code with small bite size (easy to understand) and documented functions.
– Artjom B.
Mar 22 '16 at 20:44





Question 1 is off-topic, because you're asking for an off-site resource. Question 2 is somewhat opinion-based. You would need to define your security margin for question 2.
– Artjom B.
Mar 22 '16 at 20:46




2 Answers
2



1. How is it working:



codeigniter 2.x



The CodeIgniter Encryption Class provides a two-way keyed encoding using XOR Hashing and Mcrypt.



interesting about XOR Hashing: https://stackoverflow.com/a/27952689/2275490



the php manual about Mcrypt: http://php.net/manual/en/book.mcrypt.php



Also you might want to check in system->libraries for the encrypt.php file and discover what it does.



codeigniter 3.x



Provides two-way keyed encoding using Mcrypt



the php manual about Mcrypt: http://php.net/manual/en/book.mcrypt.php
the CI manual: http://www.codeigniter.com/userguide3/libraries/encryption.html



2. thought as safe way to encrypt data:



that's opinion based, I think definitely yes for a "quick site"





Thanks for being willing to delve into opinion. I know asking for it is a risky proposition, but sometimes it's useful to get other's opinions.
– Miles
Mar 22 '16 at 20:26





No, CI_Encrypt uses AES through Mcrypt by default. There is no "XOR Hashing" going on in there (yes, there is key hashing with XOR, but is not like the answer you linked to).
– Artjom B.
Mar 22 '16 at 20:41





@ArtjomB.: edited the answer, please check...
– Vickel
Mar 22 '16 at 21:04



You're reading the "wrong" thing ...



The CodeIgniter documentation on EllisLab's website is outdated and no longer the official one. It's also for CodeIgniter 2.x, which is itself no longer supported.



The official documentation is on codeigniter.com, and you should be using CodeIgniter 3.x, which deprecates that old CI_Encrypt library and replaces it with a new one, which is far better and more well-documented, here:


CI_Encrypt



http://www.codeigniter.com/userguide3/libraries/encryption.html





Great point. Based on what I read, I may upgrade it from CI 2 to 3.
– Miles
Mar 22 '16 at 20:19






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

-

Popular posts from this blog

Firebase Auth - with Email and Password - Check user already registered

Image
Clash Royale CLAN TAG #URR8PPP Firebase Auth - with Email and Password - Check user already registered I want to check when a user attempts to signup with createUserWithEmailAndPassword() in Firebase user Authentication method, this user is already registered with my app. createUserWithEmailAndPassword() 8 Answers 8 To detect whether a user with that email address already exists, you can detect when the call to createUserWithEmailAndPassword () fails with auth/email-already-in-use . I see that @Srinivasan just posted an answer for this. createUserWithEmailAndPassword () auth/email-already-in-use Alternatively, you can detect that an email address is already used by calling fetchSignInMethodsForEmail() (previous called fetchProvidersForEmail() ). fetchSignInMethodsForEmail() fetchProvidersForEmail() When the user trying to create an user with same email address, the task response will be "Response: The email address is already in use by another account." mFirebas
Read more

Dynamically update html content plain JS

Image
Clash Royale CLAN TAG #URR8PPP Dynamically update html content plain JS So I have a script bound in my index.html, which literally has to fetch an array of jsons from an api, then dynamically update my page when get response. But as a result I'm getting an as the only update of my page. here is my script fetch(url) .then((resp) => resp.json()) .then((resp) => resp.results.forEach(item => fetch(item.url) .then((response)=> response.json()) .then((response) => pokeArr.push(response)) .catch(console.log) ) ).catch(console.log) const filler = () => if(!pokeArr) return 0 pokeArr.map((i,j)=> return `<tr>$i.name</tr>` ) const pokeindex = () => document.getElementById('a').appendChild(document.createElement(filler())) pokeindex() When I'm consoling it, I can see in the console all the responses I get, so I'm at least doing the fetching part right. What's parberakan ? What's pokeArr ? – T.J. Crowder Aug 8 at 12
Read more

How to determine optimal route across keyboard

Image
Clash Royale CLAN TAG #URR8PPP How to determine optimal route across keyboard I'm trying to automate the typing process in a video game. Players are given an on-screen QWERTY keyboard layout that they can navigate with the control stick (up, down, left, right) in order to select a letter to type. I was wondering if there was a module for Python (or some other resource I could explore) that would help my program find a path across the keyboard as it types each letter in a given message. In other words, if the first letter typed was "A" and the next letter was "B", the module would know that the program should move 1 space down on the keyboard and 4 spaces to the right. Currently, I have the program resetting to the "G" key after each letter is typed (allowing me to use fixed-directions as the program parses each character in the desired message). As you can imagine, this is quite inefficient and defeats the purpose of automating the typing in the fir
Read more