We have moved our forum to GitHub Discussions. For questions about Phalcon v3/v4/v5 you can visit here and for Phalcon v6 here.

How are Phalcon cookies signed?

SparklingSoda Oct '18

Created Oct '18	Last Reply Oct '18	Replies 1	Views 309	Votes 0

SparklingSoda 6.0k

Is it HMAC?

Jonathan Aaron Steel
79.0k

edited Oct '18
Oct '18

https://github.com/phalcon/cphalcon/blob/master/phalcon/http/cookie.zep#L301

https://docs.phalcon.io/en/3.4/crypt

Althrough there is commit which does have hmac implementation:

https://github.com/phalcon/cphalcon/commit/7ff31aa155e159e885241650d7e9796eecc93369#diff-70ac11989967ef7c9d25b4b435f0d1f3R201

But this is not present in the master?! Ping @sergeyklay for this..