picodexter/parameter-encryption-bundle

Symfony PcdxParameterEncryptionBundle

PcdxParameterEncryptionBundle

DEPRECATION WARNING!

THIS BUNDLE IS NOW DEPRECATED / ABANDONED

The Symfony Secrets management that was introduced with Symfony 4.4 offers an official solution for the original purpose of this bundle., _(*1)

Please refer to it instead., _(*2)

Active development on this project has therefore been stopped., _(*3)

END OF DEPRECATION WARNING

This bundle lets you save Symfony parameters in an encrypted form and automatically decrypt them during runtime., _(*4)

, _(*5)

Purpose

What It Does

This bundle allows developers to save sensitive information in Symfony parameters in an encrypted form so that it can be committed to a VCS. The only remaining sensitive information, the decryption key, could then be saved in an unversioned parameters.yml file or simply passed in an environment variable., _(*6)

Through this approach you can easily keep all stage-specific configuration files in the VCS and use a switch mechanism to detect which one to load. This helps you keep the number of stage-specific (automatically) deployed but unversioned files to an absolute minimum., _(*7)

What It Does Not Do

The intention is not to provide security in a way that an attacker with access to the webspace file system wouldn't be able to decrypt the parameters., _(*8)

The PHP process needs to read both the encrypted data as well as the decryption key(s), be it in the file system or in memory as an environment variable. Someone who manages to infiltrate the process therefore automatically gains relevant read access to both pieces of information as well., _(*9)

Additionally, anyone who can read the Symfony application cache would be able to extract the dumped container including all decrypted parameters anyway., _(*10)

Features

• Provides encryption for Symfony parameters
• Does not impact overall application performance when container is cached
• Allows defining keys in base64 encoded format to support binary values
• Allows generating keys with PBKDF2
• Allows specifying multiple algorithm configurations to enable usage of different methods of encryption in the same application
• Modular approach to harness encryption ciphers from reputable third-party Composer packages
• Highly configurable
• Highly extensible (custom encrypters, decrypters, key transformers, ...)
• 100% code coverage

Furthermore, this bundle comes with the following ciphers out-of-the-box:, _(*11)

Symmetric Ciphers

• Caesar

Documentation

The documentation source files are located in the Resources/doc/ directory of this bundle., _(*12)

Installation

Please refer to the Getting Started guide., _(*13)

License

This bundle is released under the MIT license., _(*14)

Authors

• picodexter | GitHub | picodexter.io

See also the list of contributors., _(*15)

Contributing

The official project repository with the issue tracker can be found on GitHub., _(*16)

Please refer to the contributing document., _(*17)