Comments (5)
What does that mean??? How can I fix it??? Can anybody shed some light?
It sounds like Limesurvey has a bug in their code that uses sodium_compat rather than a sodium_compat bug.
Weirdly, their function claims to be "encryption" but isn't.
We recommend talking to the Limesurvey developers. Paragon Initiative Enterprises does not develop or support Limesurvey.
from sodium_compat.
I am using latest version of Limesurvey 5.0.1.
I created a new survey, which I want it to be anonymous but with a list of participants. I have created tokens and sent them to the participants. However, when they click on the invitation link, they get the following error:
Server error 500: Argument 1 must be at least CRYPTO_SIGN_BYTES long.
Taking a look into the source code, right at the "compat.php" file we have (line 2878):
const CRYPTO_SIGN_BYTES = 64;
//....
/* Input validation: */
if (ParagonIE_Sodium_Core_Util::strlen($signedMessage) < self::CRYPTO_SIGN_BYTES)
{
throw new SodiumException('Argument 1 must be at least CRYPTO_SIGN_BYTES long.');
}
In Limesurvey, if I attempt to set a 64 token long, it changes it to 15.
So, I don't get it. What should be longer than 64?
What does that mean??? How can I fix it??? Can anybody shed some light?
I have tried the same thing in Limesurvey version 3 LTS, and everything works flawlessly. However, I want to use the version 5, since it has the ability to encryt the email addresses.
from sodium_compat.
Weirdly, their function claims to be "encryption" but isn't.
Hi! I'm a developer for LimeSurvey. Do you have time to elaborate on this comment?
from sodium_compat.
I'm not sure what's unclear.
Encrypt input data using AES256 CBC encryption
The functions name is encrypt()
It uses crypto_sign
, which is a digital signature, not encryption.
Read this blog post for a deeper understanding of the concepts: https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-password-cryptography-decoded
from sodium_compat.
Thanks
from sodium_compat.
Related Issues (20)
- Constants such as SODIUM_CRYPTO_PWHASH_ALG_DEFAULT
- Undefined constant 'CRYPTO_AEAD_XCHACHA20POLY1305_IETF_KEYBYTES' HOT 15
- Issue in crypto_box_open function HOT 2
- sodium_crypto_aead_xchacha20poly1305_ietf_encrypt doesn't take null as Argument 2 HOT 5
- suggests ext-sodium HOT 2
- What would a hypothetical sodium_compat v2 look like? HOT 1
- PHP 8.1 x86 deprecation: Implicit conversion from float 4294967295 to int loses precision HOT 11
- Uncaught Error: Class 'ParagonIE_Sodium_Core32_Curve25519' not found HOT 4
- 'include guards' in src/Compat.php (among others) do nothing HOT 3
- Class not found due to autoload-fast.php not including directory HOT 2
- php newb seeing memory exhaustion composer-requiring into snipe-it HOT 2
- Build of sodium-compat.phar fails
- box.json omits autoload-php7.php HOT 2
- HKDF HOT 2
- AEAD - AEGIS-128L and AEGIS-256 HOT 1
- Missing file using composer install HOT 3
- Appveyor is failing (PHP 5.6 on Windows) HOT 1
- PHP 8.4 Compatibility
- [Internal] Modernize Code Style
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sodium_compat.