WordPress / two-factor

Two-Factor Authentication for WordPress.
https://wordpress.org/plugins/two-factor/
GNU General Public License v2.0
724 stars 152 forks source link

Add support for encrypting TOTP secrets #455

Open jeffpaul opened 2 years ago

jeffpaul commented 2 years ago

Add support for encrypting TOTP secrets (if a constant is defined).

More details to be shared.

calvinalkan commented 2 years ago

@jeffpaul Ping me here or in PR's.

Whats the minimum version for this project?

calvinalkan commented 2 years ago

Strongly vote for https://github.com/defuse/php-encryption/blob/master/composer.json

Supports the minimum PHP version required here.

calvinalkan commented 2 years ago

Or libsodium which is in php7.2 core and WP core includes sodium_compat.

https://paragonie.com/book/pecl-libsodium/read/04-secretkey-crypto.md

jeffpaul commented 2 years ago

@calvinalkan not sure what minimum version you're referencing but this plugin requires WordPress 4.3 and PHP 5.6. If those are not what you were referencing, please restate so someone can chime in and help... thanks!

calvinalkan commented 2 years ago

@calvinalkan not sure what minimum version you're referencing but this plugin requires WordPress 4.3 and PHP 5.6. If those are not what you were referencing, please restate so someone can chime in and help... thanks!

Yes im refering to the PHP Version.

Defuse/encryption supports PHP5.6