Hi,
I'm part of the developer team of DokuWiki and we are using the same
Blowfish implementation in DokuWiki that you are using in PHPMyAdmin
so I think you might be interested in what I found out about this
Blowfish implementation.
I was alerted that something might be wrong in the Blowfish
implementation when a user complained that he couldn't decrypt a text
that was encrypted on another system. I found that the ciphertext
depends on the system (even if both systems are 64 bit systems).
I dug a bit deeper into the code and added debug output. After some
tests I found that the problem is that the algorithm is adding large
integers. The expected result is an integer overflow, however PHP
gives a float as result. This float is then used in a binary XOR with
an int, I think this results in a cast back to int, but as it is
explained in the PHP documentation for floats beyond the integer range
this cast is undefined as the float doesn't have enough precision.
This loss of precision happens in the calculation of the S-boxes which
means that these S-boxes are most probably less random than they
should be. I think the security of the algorithm might be flawed
because of this but I'm not sure. However at least one thing is clear:
this is not Blowfish.
Another thing I found strange is that the key setup routine is called
after every chunk. I couldn't find any documentation which suggests
this as algorithm, what I found is that the p and s-boxes remain the
same during the encryption of multiple blocks.
We don't plan to fix the implementation, instead we deprecated it and
want to replace it after the current release,
http://phpseclib.sourceforge.net/ (AES) is a possible candidate. I
assume that regardless which library we choose the ciphertext will be
different so it doesn't matter if we also switch the block cipher.
Regards,
Michael Hamann
Hello, My name is Jayesh Anandani.I am new to the open source world.I have
worked with phpmyadmin for a quite a time now.I have read the homepage of
gsoc 2012,idea list,applicant guide and many other pages but still i am
confused on what to start with. I don't know how to start contributing and
what all is necessary in order to fix the bugs!It would be very kind of you
if you guide me for the same!
--
Jayesh Anandani
13KSP337 – knowafest.com
Third Year – Computer Science Engineering
U.V. Patel College Of Engineering,
Kherva,Gujarat.
Welcome to the second beta release for phpMyAdmin 4.0.0. With this
version, the HTML frames are gone and the navigation panel now presents
a tree. This version requires Javascript.
Version 4.0 contains many bug fixes and smaller new features; moreover,
the documentation has a new look and contains an index.
Details will appear on http://phpmyadmin.net. In a hurry? you can visit
https://sourceforge.net/projects/phpmyadmin/files to download.
Marc Delisle, for the team
Hello Everyone,
I am Viraj, a fourth year Computer Science student studying here in Manipal
in India. I was going through the wiki page for GSOC 2013 idea list.I liked
the idea of Automated Testing . I have developed the college website using
Php and also done my internship with a start-up company Babajob Services
Pvt. Ltd. in India where I had use selenium to write all the tests
including Functional Tests, Unit Tests, Integration Tests.So I feel that
this is a right fit for me and would love to work on this project.
--
Regards
Viraj Sinha
Dept of Comp Sc
MIT,Manipal
Michael Cihar wrote:
>Anyway this really does not look like project for whole summer, try proposing something bigger or use some of our ideas.
Well that was the first idea. The second one is to develop a Web App
based on FireFox OS, as the apps can be run on any system who has
FireFox installed on it(even on Android). So the one I would like to
develop will have following features:
1. Multiple PMA instances e.g. one of xyz.com another of abc.com.
2. A local cache and Saving queries locally so if someone want to
retrieve something later(even without internet he/she can).
3. No need of css and js to be send through request as the app will
have them locally.
4. A sweet UI that give a real touch of pma.
5. The app will be a packaged App, so we will be able to trigger an
update when we want to do so.
It will be truly an Ajax based app, so we need to port new php codes
with the next version to make it working but we will be having a
support for later versions too.
For those who are not familiar with FireFox OS, its a Linux based OS
working on b2g(Boot to Gecko) project of mozilla. The app only require
FireFox 16 or newer to work. The new upcoming market for mobiles is
all set by Mozilla.
The apps have their own icon, there dedicated folder and prefs.
Regards
Dron Rathore
Hi all,
I am back from my mozilla drive and just going to stick back to pma. I
got this idea for Gsoc:
Refactorig the Front End Deliverables,
Currently we are serving the Js+Css in sprited mode but on the other
hand we are not able to Cut down the Bandwidth usage of our users I.e.
We can have them served with Cache headers. Also the current scheme is
somepage.php?files[]=file1&file2&....[...]
As per the web standards any url with query string is never cached.
So I would like to turn this into something like this in individual rendering:
somefolder/file1
somefolder/file2
Now we will be keeping a gz on server side so that we won't have to
gzip the files every time. The files will the served with a cache
header so we will be responding back only if the header value
IF-MODIFIED-SINCE and will check that with timestamp of the file, in
case its smaller then we will gz again else we will just say 301 Not
Modified. This will save a lot bandwidth usage and a php5 memory
Lekage bug.
Regards
Dron Rathore
3rd Yr. Computer Engg.
Jaipur National University,
Jaipur, India
hi every one,
I'm Sakura Abeysinghe.
I'm a Computer Engineering undergraduate at
University of Peradeniya, Sri Lanka.
I've been using phpmyadmin for a long time
and I would like to contribute to it. I'm interested in GIT
and I have some new ideas to share. can you guide me?
Hi All,
I am a final year undergraduate who is willing to participate in GSOC
2013. Because of my earlier experience and future interests, it will
great if I can do a project in phpMyAdmin. So read the ideas wiki
provided by you. I am specially interested in these ideas,
Refactoring: Designer/schema integration
Refactoring: SQL executor, Column's structure manipulation
Refactoring: Server view
Can you provide me further steps to continue to work in these ideas?
Also If I talk about myself a bit, I had the chance to complete my
software engineering internship at WSO2 Lanka Pvt Ltd(www.wso2.com),
which is a leading middle-ware solutions development company. Since
they are using lot of open source projects, had many chances to get a
good exposure to the projects and there code-bases. Also I have did
lot of projects in developing those FOSS products. You can find more
about those from my LinkedIn profile -
lk.linkedin.com/pub/andun-s-l-gunawardana/34/646/703/ or from my blog
http://www.insightforfuture.blogspot.com/
Specially I want highlight the project Streaming XPath Parser for WSO2
ESB (http://wso2.org/library/articles/2013/01/streaming-xpath-parser-wso2-esb)
which mainly built on top of AXIOM and Data Streams. This
implementation provides a high performance XPath parser to the ESB.
Also the project of Entitlement Servlet Filter implementation for WSO2
Application Server.
http://wso2.org/library/tutorials/2012/12/providing-xacml-fine-grained-auth…
So I think the above highlighted experiences makes me a good candidate
to do a project in GSOC.
Thanks & Regards
Andun S.L. Gunawardana
Undergraduate
Department of Computer Science And Engineering
University of Moratuwa, Sri Lanka
