ncryptf / ncryptf-php

Completed

Push — master ( d865ae...34c801 )

by Charles

created 2018-09-13 18:06 UTC

Changes

	2 issues (2 minor) were introduced. 1 issue was fixed.
	5 added classes/operations
		A	Request::encryptBody() added
		A	RequestResponseTest::testv2EncryptDecrypt() added
		A	RequestResponseTest::testv1EncryptDecrypt() added
		A	Response::getVersion() added
		A	Response::decryptBody() added

9.86

▲ + 0.03

Head	Charles R. Portwood II 2018-09-13 13:00 GMT-0500 Implementing v2 encryption method - API change: `request::encrypt($request, $nonce)` is now `request::encrypt($request, $signatureKey, $nonce, $version)` - V2 encryption method implementation: - To avoid cognative overhead of needing to manage multiple headers, x-nonce, x-sigpubkey, x-signature, x-pubkey have been consolodated into the request body itself with a checksum .- New requst body format consists of: - 4 byte header marker: `DE259002` in hex - 24 byte nonce - 32 byte public key used to encrypt the body - The encrypted crypto_box - 32 byte signature public key - 64 byte signature - 64 byte checksum - The signature is now built into the request payload to ensure that it is always checked - The 64 byte checksum serves as a tamper check to ensure that nothing was dropped (either by TCP or malicious attempts), and is a checksum of all prior components concatenated together - Version 2 is explicitly marked by a 4 byte header, hex encoded as `DE259002` - All data within the new encrypted body is raw binary - Updating tests to ensure v1 and v2 implementations still work
Base	Charles R. Portwood II 2018-09-07 16:41 UTC fixing key order