Session-Storage-Secure

Encrypted, expiring, compressed, serialized session data with integrity

This module implements a secure way to encode session data. It is primarily intended for storing session data in browser cookies, but could be used with other backend storage where security of stored session data is important. Features include: Data serialization and compression using Sereal Data encryption using AES with a unique derived key per encoded session Enforced expiration timestamp (optional) Integrity protected with a message authentication code (MAC) The storage protocol used in this module is based heavily on A Secure Cookie Protocol by Alex Liu and others. Liu proposes a session cookie value as follows:

cpan: Session::Storage::Secure cpan-module: Session::Storage::Secure