12 Commits

Author	SHA1	Message	Date
tom--	c6a8b418ef	compareString(): timing depends only on length of $actual input, unit test	2014-07-27 12:03:03 -04:00
Alexander Makarov	c5a3cd511e	Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public	2014-07-26 14:09:38 +04:00
tom--	2c5c2c101b	Fixes #4131: Security adjustments	2014-07-26 03:29:30 +04:00
Alexander Makarov	481db35512	Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation	2014-06-30 16:36:52 +04:00
Paul Klimov	90a625013c	Result check at Security::generateRandomKey() added	2014-06-29 15:39:25 +03:00
Qiang Xue	399b6b18e3	Fixes #4103	2014-06-28 21:58:07 -04:00
Paul Klimov	052ae83340	Option Security::autoGenerateSecretKey added	2014-06-28 00:11:48 +03:00
Paul Klimov	5a42985750	Option Security::useDeriveKeyUniqueSalt added	2014-06-27 23:30:28 +03:00
Paul Klimov	4ce4707a3a	Option Security::passwordHashStrategy added	2014-06-27 23:05:23 +03:00
Paul Klimov	4063502439	Option Security::deriveKeyStrategy added	2014-06-27 22:10:02 +03:00
Paul Klimov	4768dcdbc2	Method Security::compareString() extracted	2014-06-27 21:33:42 +03:00
Klimov Paul	db0beb6b6b	'yii\base\Security' component created.	2014-06-27 14:24:58 +03:00