php session encryption

Question

I'd like to have sessions data encrypted like they are in suhosin, is there any library out there providing that?

Answer 1

You could easily use mcrypt or a custom AES encryption to encrypt session data. The best bet would to create a session wrapper class that encrypts variables when you set them.

For key management, you could create a unique key and store it in a cookie, so that only the user can decrypt their own session data.