Simon Willison's Weblog: opensslhttp://simonwillison.net/2007-08-02T12:30:03+00:00Simon WillisonSide-Channel Attacks and Security Theatre2007-08-02T12:30:03+00:002007-08-02T12:30:03+00:00https://simonwillison.net/2007/Aug/2/links/#atom-tag
<p><strong><a href="http://www.links.org/?p=245">Side-Channel Attacks and Security Theatre</a></strong></p>
“In order to mount most of these attacks the attacker must be local [...] every good security person knows that if your attacker has the ability to run stuff on your machine, it is game over, so why are we even caring about these attacks?”
<p>Tags: <a href="https://simonwillison.net/tags/ben-laurie">ben-laurie</a>, <a href="https://simonwillison.net/tags/openssl">openssl</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/securitytheatre">securitytheatre</a>, <a href="https://simonwillison.net/tags/sidechannel">sidechannel</a></p>
OpenID (and TypeKey) using native OpenSSL functions in PHP2007-02-10T22:49:55+00:002007-02-10T22:49:55+00:00https://simonwillison.net/2007/Feb/10/wez/#atom-tag
<p><strong><a href="http://netevil.org/node.php?nid=949">OpenID (and TypeKey) using native OpenSSL functions in PHP</a></strong></p>
Wez Furlong shows how a small patch to PHP’s OpenSSL support makes it a whole lot easier to perform the cryptography behind OpenID (at the moment you need to use the bc or gmp modules).
<p>Tags: <a href="https://simonwillison.net/tags/openid">openid</a>, <a href="https://simonwillison.net/tags/openssl">openssl</a>, <a href="https://simonwillison.net/tags/php">php</a>, <a href="https://simonwillison.net/tags/wez-furlong">wez-furlong</a></p>