Using an Encryption class in a WordPress Plugin

Are those requirement equal to those of WordPress core?

No, WordPress still runs on PHP 5.2 with few more limitations on top and aims to work on a toaster found at garbage dump.

Are those requirements practical for modern PHP hosting?

Quite, PHP 5.4 is obsolete (security support ended last year) with lowest supported version being newer 5.5 at the moment, openssl is pretty common I think, hash functions are built-in I think?

Essentially it’s your choice which of the two you are targeting. It’s more of a business decision first than technical one.

Related Posts:

  1. Simplest two-way encryption using PHP
  2. Are the default salts secure?
  3. Moving wordpress out of the public directory
  4. Encrypt emails?
  5. Moving away from MD5: Where to declare the custom global $wp_hasher?
  6. wordpress website host price and security [closed]
  7. Can someone do something to my website if I posted a snapped image of the header and covered my logo? (On reddit, when explaining a question)
  8. Links to root domain from search engines don’t work, but direct links and links from other referrers do
  9. Advice On How to Backup WordPress
  10. How to get real password (before encrypt) when register a user?
  11. SSL Error: unable to get local issuer certificate
  12. When you use ‘badidea’ or ‘thisisunsafe’ to bypass a Chrome certificate/HSTS error, does it only apply for the current site? [closed]
  13. What is the difference between a cer, pvk, and pfx file?
  14. Encrypt Password in Configuration Files?
  15. Where does Internet Explorer store saved passwords?
  16. Infected Files – what to do [closed]
  17. Why does WordPress need my private ssh key to update?
  18. Why escape if the_content isnt?
  19. Why does WordPress have more than one salt?
  20. What is the ideal setup to address security concerns?
  21. is_email() VS sanitize_email()
  22. Can someone explain the use cases of esc_html?
  23. Close a wordpress blog – keep site as it is but prevent hacks
  24. Moving wp-config.php: Can this be done after site launch?
  25. Prevent setup-config.php page from appearing when host blocks database
  26. How to get WordPress to save upload file beyond web root [closed]
  27. WordPress and Security
  28. Is security a problem in WordPress?
  29. Is /wp-login.php?redirect_to[] exploitable?
  30. Logout via Subdomain, non-wordpress page on a different server?
  31. brute force attack even though it is limited by IP
  32. What should I do about hacked server?
  33. How can I tell who changed the password?
  34. WordPress website Security [closed]
  35. How do I authenticate WP users from a chrome extension?
  36. Can’t reset WordPress password
  37. Website is being flooded [closed]
  38. Is the “lost password” feature truly a vulnerability?
  39. Is it possible to reduce the minimum character length for passwords?
  40. Handling email piping attachments and detecting unsupported file types
  41. Why was my blog post inserted lot’s of ad links by others?
  42. Should I Worry About SQL Injection When Using wp_insert_post?
  43. Auth cookie value security risk?
  44. Is there a way for a user to have an alias?
  45. Security – Shortcode injection attack
  46. Registration Plugin – Recaptcha integration
  47. Security threat with `home_url`?
  48. How to combat flooding admin-ajax.php?
  49. When is wp_set_password() called or how to capture a password
  50. Would it be dangerous to send all the wp_options to javascript file?
  51. Frequently getting attacks on admin-ajax.php, wp-cron.php, xmlrpc.php and wp-login.php
  52. Should I disable directory listing for wp-includes?
  53. How to get WordPress to send Password Reset Link Email instead of New Password?
  54. Safety side of storing emoji into database
  55. Verifying that I have fully removed a WordPress hack?
  56. Large Session Tokens
  57. How can I safely hide the fact that my website runs on WordPress? [closed]
  58. How to change permissions of WordPress and/or apache on macOS securely?
  59. How can I display nickname instead username in links
  60. My WordPress Websites are always under attack
  61. Is there value in using a wp_nonce for POST requests?
  62. Limit Login Attempts BEFORE PHP is executed?
  63. Safe to say WordPress security releases don’t have database upgrades
  64. Config file with no Keys..?
  65. How much should I worry about these messages?
  66. Security concerns with external links
  67. Uploading .webm format on WordPress results in security guidline breach and fail
  68. fail2ban to prevent Brute Force Attacks on WordPress?
  69. .htaccess password protection bypassed
  70. Session Cookie security questions
  71. How to give the same error message when the wrong password or wrong username is used?
  72. Storing FTP details in wp-config.php
  73. Spam injected in w3 total cache page cache [closed]
  74. How to distinguish between a hack and an encoding error?
  75. Prevent editor from adding script or form
  76. How to change location of wp-config.php to folder or 2 folders up?
  77. How might I sanitize an XML file before WP Import? (Does wordpress verify or clean text when importing from an XML document? )
  78. Finding where a snippet of code is coming from
  79. Remove hacked code – out of ideas! [closed]
  80. Secure Server after configuration
  81. After limiting the access to my wp-login.php by IP through .htaccess, all my password-protected posts stopped working. What’s the best solution now?
  82. Block JSON access over the net
  83. The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
  84. Security: Critical backend outside of wordpress
  85. How to check whether a site has been compromised without browsing into it?
  86. Retrieve $_POST data to send to javascript without using localize script
  87. My site thinks it’s secure when it is fact not
  88. Is it possible to only have the admin interface bind to the local loopback?
  89. Should I change the default file and folder permissions?
  90. WordPress exploited theme is causing high io load on server
  91. How to rewrite rules for WP-security in Nginx?
  92. How to set custom validation for WordPress Passwords?
  93. Is it a bad idea to CHMOD 777 all the files on your site?
  94. How to stop repeated hack on header.php of custom theme? [closed]
  95. Default installation permissions for wp-config.php
  96. Correct setup to block file modifications from hackers
  97. How do you search for backdoors from the previous IT person?
  98. How to test if my server is vulnerable to the ShellShock bug?
  99. Is wp-cron.php vulnerable to external attacks and how to protect it?
  100. How to address security vulnerabilities: LUCKY13, BEAST, and BREACH