I have two sites.
The first site requires users to log in. An authentication token then will be passed to the second site when the users navigate from the first to the second. So the users can’t just grab the url of the second sites and login to it.
What is the best encryption/ authentication algorithm that I can use for the this authentication purpose?
Typical PK scheme. On site1 encrypt auth info with site1’s private key, and site2’s public key. On site2 decrytp using site2’s private key, and site1’s public key.
Functions of interest:
openssl_private_encrypt()openssl_private_decrypt()openssl_public_encrypt()openssl_public_decrypt()