14 Commits

Author SHA1 Message Date
4512833fac Fixes #7215: Uses OpenSSL crypto lib instead of Mcrypt. Added testing of encrypted data compatibility, both backward and forward 2015-02-24 14:03:41 +03:00
899b778994 Correct type declarations 2014-10-25 16:35:50 +03:00
c6a8b418ef compareString(): timing depends only on length of $actual input, unit test 2014-07-27 12:03:03 -04:00
c5a3cd511e Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public 2014-07-26 14:09:38 +04:00
2c5c2c101b Fixes #4131: Security adjustments 2014-07-26 03:29:30 +04:00
481db35512 Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation 2014-06-30 16:36:52 +04:00
90a625013c Result check at Security::generateRandomKey() added 2014-06-29 15:39:25 +03:00
399b6b18e3 Fixes #4103 2014-06-28 21:58:07 -04:00
052ae83340 Option Security::autoGenerateSecretKey added 2014-06-28 00:11:48 +03:00
5a42985750 Option Security::useDeriveKeyUniqueSalt added 2014-06-27 23:30:28 +03:00
4ce4707a3a Option Security::passwordHashStrategy added 2014-06-27 23:05:23 +03:00
4063502439 Option Security::deriveKeyStrategy added 2014-06-27 22:10:02 +03:00
4768dcdbc2 Method Security::compareString() extracted 2014-06-27 21:33:42 +03:00
db0beb6b6b 'yii\base\Security' component created. 2014-06-27 14:24:58 +03:00