spaze / encryption Goto Github PK

Hi Michal

I'm starting to use this library on my projects (initially to store OTP secrets in the database).

When considering key rotation, I think equivalent of password_needs_rehash() function would be useful. I'm using that currently to check whether bcrypt hash needs rehashing on user's login and was thinking about the same for this.

Yes, one could either re-encrypt it every time (every login) or run a foreach on all records on re-key, but that's not the point.

I believe the implementation is trivial and I'm more than happy to prepare PR.

Before I do that, I wanted to ask you whether you would consider this functionality to be merged or not?

Also, I was thinking about the best method name, needsReencrypt(string $data): bool maybe?

Halite version 5 was released today, which contains a few security improvements and may be worth the effort to upgrade to v5.

https://github.com/paragonie/halite/releases/tag/v5.0.0

(You're receiving this issue because Packagist says you depend on Halite.)