Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:86335 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 36808 invoked from network); 21 May 2015 07:49:11 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 21 May 2015 07:49:11 -0000 Authentication-Results: pb1.pair.com smtp.mail=ppetermann80@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=ppetermann80@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.175 as permitted sender) X-PHP-List-Original-Sender: ppetermann80@gmail.com X-Host-Fingerprint: 209.85.217.175 mail-lb0-f175.google.com Received: from [209.85.217.175] ([209.85.217.175:35428] helo=mail-lb0-f175.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 31/52-20801-3FD8D555 for ; Thu, 21 May 2015 03:49:07 -0400 Received: by lbbuc2 with SMTP id uc2so11921380lbb.2 for ; Thu, 21 May 2015 00:49:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=FEo7JR+cNc3WVyegW91QtemMqkqNii8w2jeSP1aZTOU=; b=cgp9yZagdMXQF8qAsC2LESO/1Bijip5akK9BrQjJF6Dq95mLOH8n7bwATmLibN0l4Q mHu+Vbkhn8NtIdeC+Zqq7YfZIMG+sV5ogSmf2F9F/4M8qHqwFtLfSDdY2k/4A/w8ELnR lNqZMoS/qyoLN/VP56+d7hPi1b1g4gRAKs2b/lIm5UuVlrVCi6HcpCxmK36IdPss3fsP 4L++DgYvJYeLwBFf71KHABmsIkyyqU4lFH65CHmMaG19D9lvBYG5tvC6oHjQduCEZsUz HNCikR13cYuZimaJs4dOQXzhpLUnd7e/iQWoYTh4AeKk0kXnbNqR1NqPQrHftPvKd6n6 aipw== MIME-Version: 1.0 X-Received: by 10.153.7.133 with SMTP id dc5mr1116023lad.17.1432194544331; Thu, 21 May 2015 00:49:04 -0700 (PDT) Received: by 10.114.58.103 with HTTP; Thu, 21 May 2015 00:49:04 -0700 (PDT) In-Reply-To: References: Date: Thu, 21 May 2015 09:49:04 +0200 Message-ID: To: "internals@lists.php.net" Content-Type: multipart/alternative; boundary=001a1134847410791f051692c7c3 Subject: Fwd: [PHP-DEV] [RFC] [PHP 7.1] libsodium From: ppetermann80@gmail.com (Peter Petermann) --001a1134847410791f051692c7c3 Content-Type: text/plain; charset=UTF-8 Hi Scott, I personally think the RFC is a bit short, also I just had a very brief look at the documentation of the extension in question, and find its API a bit strange, whats up with having everything in static method calls? regards, PP 2015-05-21 3:15 GMT+02:00 Scott Arciszewski : > Hi Internals Team, > > I'm sure everyone is really focused (and excited) for PHP 7.0.0 later this > year, and many of you might not want to discuss what 7.1.x looks like yet. > > The current state of cryptography in PHP is, well, abysmal. Our two main > choices for handling symmetric cryptography are libmcrypt (collecting dust > since 2007) and openssl, which lacks a streaming API (e.g. mcrypt_generic) > and GCM support. > > While mcrypt is slowly decomposing in the corner and code is being > desperately migrated towards openssl in case a critical vulnerability is > discovered in the abandonware choice, the libsodium extension has been > growing steadily. Thanks to Remi, it should soon be compatible with both > PHP 5.x and 7.x (decided at compile-time). The libsodium library itself has > landed in Debian 8 and Ubuntu 15.04 and adoption is expected to persist by > the next Ubuntu LTS is released. > > I think now is a good time to talk about the possibility of making > libsodium a core PHP extension, depending on where things are when we near > the 7.1 feature freeze. > > I've just opened an RFC for precisely this purpose: > https://wiki.php.net/rfc/libsodium > > Regards, > > Scott Arciszewski > Chief Development Officer > Paragon Initiative Enterprises > -- Peter Petermann Email: ppetermann80@gmail.com - get my public PGP key from SKS Keyservers PGP Key: http://pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x0E6DBD675836A5C7 --001a1134847410791f051692c7c3--