JSON Object Signing and Encryption library for PHP.
Role in this project:
Back-end Developer & Security Engineer Contributions:48 commits, 47 PRs, 49 pushes in 2 years 6 months
Contributions summary:Alessandro primarily focused on enhancing the security and stability of the PHP-based library. Their contributions include preventing timing attacks in HMAC verification by using PHP 5.6 native functions and a timing-safe comparison function. Additionally, the user addressed potential vulnerabilities by handling cases where public keys are empty or invalid, and corrected errors in HMAC invocations. Furthermore, the user added support for PHP7, fixing issues related to the use of the library with the updated PHP version.
encryptionphp
Contributions:83 commits, 36 PRs, 66 pushes in 1 month
persisthubothubot-scriptlinks