The Curious Engineer

All blogs / Security

Paragon Initiative

paragonie.com

The official blog of Paragon Initiative Enterprises.

SecurityPHP

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
95 from 15 Apr 2015 to 7 Apr 2026
Posting
now and then (1 in the last year)
Kind
company blog
Feed
https://paragonie.com/rss

2026 1

  1. Post-Quantum Cryptography for the PHP Community

2025 1

  1. Accelerating The Adoption of Post-Quantum Cryptography

2024 1

  1. Release: sodium_compat v2 and the Future of Our Polyfill Libraries

2022 2

  1. Recap: Our Contributions to a More Secure Internet
  2. Solving Open Source Supply Chain Security for the PHP Ecosystem

2021 4

  1. Promoting Misuse-Resistance in PASETO Libraries
  2. Introducing PASERK, the First PASETO Extension, for Key Wrapping and Serialization
  3. PASETO is an Even More Secure Alternative to the JOSE Standards (JWT, etc.)
  4. Ristretto255 for the PHP Community

2019 7

  1. Against Cipher Agility in Cryptography Protocols
  2. Improving the Cryptography of the JavaScript Ecosystem
  3. Demystifying Server-Side HTTP Requests for WordPress Developers
  4. WordPress 5.2: Mitigating Supply-Chain Attacks Against 33% of the Internet
  5. The Definitive 2019 Guide to Cryptographic Key Sizes and Algorithm Recommendations
  6. CipherSweet: Searchable Encryption Doesn't Have to be Bitter
  7. Our PHP Security Roadmap for the Year 2019

2018 8

  1. Slice Of PIE #01
  2. Slice Of PIE #00
  3. Security Concerns Surrounding WebAuthn: Don't Implement ECDAA (Yet)
  4. How and Why Developers Use Asymmetric (Public Key) Cryptography in Real-World Applications
  5. Protecting RSA-based Protocols Against Adaptive Chosen-Ciphertext Attacks
  6. Celebrating Three Years of PIE on Pi Day
  7. Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)
  8. Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past

2017 20

  1. The 2018 Guide to Building Secure PHP Software
  2. Assuring Ciphertext Integrity for Homomorphic Cryptosystems
  3. Securing the PHP Community with Paragon Initiative Enterprises Hosted Services
  4. Certainty: Automated CACert.pem Management for PHP Software
  5. Supply Chain Attacks and Secure Software Updates
  6. The Quick Guide to Simple and Secure Automatic Updates
  7. Introducing Ward: Web Application Realtime Defender - WAF, IDS, Automatic Security Updates for PHP Software
  8. It Turns Out, 2017 is the Year of Simply Secure PHP Cryptography
  9. Chronicle Will Make You Question the Need for Blockchain Technology
  10. Hardening Your PHP-Powered APIs with Sapient
  11. Libsodium Quick Reference: Similarly-Named Functions and Their Use-Cases
  12. Why You Want Paragon Initiative Enterprises to Audit Your Code
  13. Building Searchable Encrypted Databases with PHP and SQL
  14. Checklist-Driven Security Considered Harmful
  15. How We Engineered CMS Airship to be Simply Secure
  16. No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid
  17. Split Tokens: Token-Based Authentication Protocols without Side-Channels
  18. Cryptographically Secure PHP Development
  19. Configuration-Driven PHP Security Advice Considered Harmful
  20. Let's Make 2017 the Year of Simply Secure PHP Cryptography

2016 24

  1. Everything You Know About Public-Key Encryption in PHP is Wrong
  2. CMS Airship: Now and Tomorrow
  3. Do-It-Yourself Hand-Crafted, Boutique, Artisinal Cryptosystems
  4. Guide to Automatic Security Updates For PHP Developers
  5. Untangling the Forget-Me Knot: Secure Account Recovery Made Simple
  6. On the (in)security of popular open source Content Management Systems written in PHP
  7. CMS Airship - Simply Secure Content Management - Now Available in the AWS Marketplace
  8. Crypto-misnomers: "Zero Knowledge" Considered Self-Descriptive
  9. HTTPS Made Easy: Setting up Caddy for PHP 7 on Debian Jessie
  10. Securing a PHP Application in 2016: The Pocket Guide
  11. The PHP Security Platinum Standard: Raising the Bar with CMS Airship
  12. Constant-Time Encoding: Boring Cryptography, RFC 4648, and You
  13. How to Generate Secure Random Numbers in Various Programming Languages
  14. What's New in Defuse Security's PHP Encryption Library Version 2
  15. Solve All Your Cryptography Problems in 3 Easy Steps
  16. Keyggdrasil, Continuum, and the Cryptography Powering CMS Airship
  17. Go PHP 7 - Our Commitment to Maintaining our Open Source Projects
  18. Securely Implementing (De)Serialization in PHP
  19. Introducing CMS Airship: A Secure Content Management System for the Modern Web
  20. Client Authenticity is Not the Server's Problem
  21. One Login To Rule them All - Seamless and Secure Cross-Domain Authentication
  22. Our Software Development Philosophy
  23. How to Safely Store Your Users' Passwords in 2016
  24. On The Design and Implementation of a Stealth Backdoor for Web Applications

2015 27

  1. In 2015, We Moved the Needle Towards Being Secure
  2. Don't Fear the Hacker - The Missing First Step in Cybersecurity Plans
  3. Let's Re-Think Security Trade-Offs
  4. Choosing the Right Cryptography Library for your PHP Project: A Guide
  5. Preventing Timing Attacks on String Comparison with a Double HMAC Strategy
  6. How to Securely Allow Users to Upload Files
  7. Coming to WordPress 4.4: CSPRNG
  8. Building Secure Web Applications in PHP
  9. The Comprehensive Guide to URL Parameter Encryption in PHP
  10. How to Safely Implement Cryptography Features in Any Application
  11. The State of Cryptography in PHP
  12. A Gentle Introduction to Application Security
  13. You Wouldn't Base64 a Password - Cryptography Decoded
  14. Common Uses for Cryptographically Secure Random Numbers
  15. How to Securely Generate Random Strings and Integers in PHP
  16. On Estimating the Impact of a Software Vulnerability
  17. Everything You Need to Know About Preventing Cross-Site Scripting Vulnerabilities in PHP
  18. Securing Your Business's Online Presence - A Guide For Non-Experts
  19. Quantifying Popularity in Real-Time for High-Volume Websites, Part 1
  20. Preventing SQL Injection in PHP Applications - the Easy and Definitive Guide
  21. If You're Typing the Word MCRYPT Into Your PHP Code, You're Doing It Wrong
  22. How to Teach Yourself Application Security
  23. Using Encryption and Authentication Correctly (for PHP developers)
  24. Implementing Secure User Authentication in PHP Applications with Long-Term Persistence (Login with "Remember Me" Cookies)
  25. The Fast Track to Safe and Secure PHP Sessions
  26. A new PHAR Auditing Utility - Introducing Pharaoh
  27. Introducing ASGard, the Authentic Software Guard