globaltradingtechnologies/crypt-bundle

Provides symfony encryptor/decryptor services based on various cryptographic components

crypt-bundle's Issues

Add an optional requirement for ext-mcrypt and health-check for that

To prevent an errors in defuse/php-encryption code we should mark that ext-mcrypt is optional dependency and add a health-checks for openssl and mcrypt extensions.

crypt:aes:generate-key command should return non-zero exit code in case of failure

Now when key cannot be generated due to crypto-specific reasons or simply cannot be dumped into filesystem command returns zero exit code

Change php-encryption version

Change defuse/php-encryption version

Encrypted string with aes_binary_cryptor doesn't match with previous encrypted string

Problem

Encrypted string with aes_binary_cryptor never matches with the same string previously encrypted with the same encryptor.

Current configuration

gtt_crypt:
    cryptors:
        aes:
            aes_binary_cryptor:
                key_size: 256
                key_path: "%kernel.project_dir%/config/aes/first.key"
                binary_output: true
    doctrine:
        dbal:
            encrypted_string: aes_binary_cryptor

How to simulate the problem

$string1 = $this->crypt->encrypt('abc');
$string2 = $this->crypt->encrypt('abc');

// $string1 never matches with $string2!

How I'm applying it in a repository method

$qb = $this->createQueryBuilder('q');
$qb->andWhere('q.name = :name');
$qb->setParameter('name', $name, TypeEnum::ENCRYPTED_STRING);

$query = $qb->getQuery();
return $query->execute();

Do not throw an exception during building a container

See https://github.com/GlobalTradingTechnologies/crypt-bundle/blob/master/DependencyInjection/GttCryptExtension.php#L121-L123

This leads to an exception during cache warming on build computer. However it will be better to remove this check and replace it with a health-check.

[RSA] Change default value for binary_output to false

This change will make binary output default behavior the same for RSA and AES.

Update Packagist repository

The version of the GitHub repository does not match with the Packagist version.

https://packagist.org/packages/gtt/crypt-bundle