In a book about security, cryptography is an expected topic. I have chosen to neglect cryptography in the majority of the book because its purpose is narrow, and developers need to pay attention to the big picture. Relying on encryption is often a red herring. It serves its purpose well, but encrypting something doesn't magically make an application secure. The key types of cryptography with which a PHP developer should be familiar are as follows:
The majority of this appendix focuses on symmetric cryptography using the mcrypt extension. Other good resources that you should review are as follows:
|