includes/hmac.php
2009-02-26 Dan HMAC functions are now standards-compliant (not a security issue). This BREAKS 1.1.6-hg passwords!
2009-01-04 Dan Two big commits in one day I know, but redid password storage to use HMAC-SHA1. Consolidated much AES processing to three core methods in session that should handle everything automagically. Installation works; upgrades should. Rebranded as 1.1.6.
less more (0) tip