codeigniter - CodeIgniter中的加密 key

Question

如果要使用Session类，则CodeIgniter 2.0.2需要在配置文件中设置加密 key ，即$config['encryption_key']。可以是任何字符串吗？安全的crypto_key的任何示例吗？

谢谢。

Answer 1

The key should be as random as possible and it must not be a regular text string, nor the output of a hashing function, etc.

要将 key 保存到 application/config/config.php ，请打开文件并进行以下设置:

$config['encryption_key'] = 'yourKeyHere'

Random Key Generator

It's important for you to know that the encoded messages the encryption function generates will be approximately 2.6 times longer than the original message. For example, if you encrypt the string "my super secret data", which is 21 characters in length, you'll end up with an encoded string that is roughly 55 characters (we say "roughly" because the encoded string length increments in 64 bit clusters, so it's not exactly linear). Keep this information in mind when selecting your data storage mechanism. Cookies, for example, can only hold 4K of information.