3 docs tagged with "Cryptography"

Keep using $_SESSION, but store the session in a signed JWT cookie instead of on the server: no Redis, no sticky sessions.

Create and validate JWT tokens in a few lines, with the same API for a shared secret or a key pair, and no weak keys accepted.

Symmetric encryption without storing or sending a key: each message derives its own key from a shared key seed.