August 7, 2015 by P.I.E. Staff

A human-readable overview of commonly misused cryptography terms and fundamental concepts.

July 19, 2015 by P.I.E. Staff

Some useful things that can be built with a CSPRNG.

July 6, 2015 by P.I.E. Staff

A lesson on cryptographically secure pseudorandom number generators in PHP, and how to generate random integers and strings from a high quality entropy source like /dev/urandom to generate secure random passwords in PHP.

June 16, 2015 by P.I.E. Staff

Although Cross-Site Scripting is one of the most common vulnerabilities on the Internet, it remains an unsolved problem (unlike SQL Injection).

June 4, 2015 by P.I.E. Staff

The first in a two-part series. We establish a mathematical definition for popularity within a given dataset and build some abuse resistance into the algorithm design.

May 26, 2015 by P.I.E. Staff

It's 2015; there's no excuse for writing code vulnerable to SQL Injection any more

May 14, 2015 by P.I.E. Staff

Alternative title: "Libmcrypt considered harmful." You should use libsodium if you can, or OpenSSL if you can't.

May 5, 2015 by P.I.E. Staff

A developer's short guide to encryption, authentication, and authenticated encryption with examples in PHP

April 21, 2015 by P.I.E. Staff

Login forms with a remember me checkbox are a common requirement. We explore the security of login forms and a robust model for remember me checkboxes.

April 17, 2015 by P.I.E. Staff

How to configure and use PHP's build-in session management system for maximum security.