Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:90112
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain paragonie.com from 209.85.215.43 cause and error)
MIME-Version: 1.0
Date: Tue, 5 Jan 2016 12:16:09 -0500
Message-ID: <CAKws9z0F9cxiM2LDMJ2ptWtLQcdd6EhTgwiJ=tw3m383aWP6Jg@mail.gmail.com>
To: PHP Internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Help Design a New Cryptography API for PHP 7.1
From: scott@paragonie.com (Scott Arciszewski)

TL;DR, make this part of PHP 7.1:

   $cipher = new Php\Crypto\Symmetric([
        'driver' => 'openssl'
    ]);
    $key = $cipher->deriveKey(
        $someUserProvidedPasswordString,
       $someHardCodedSalt
    );
    $encrypted = $cipher->encrypt($message, $key);

I'm developing a userland prototype in PHP here, so hopefully anyone
can join in even if you're not fluent in C:
https://github.com/paragonie/pco_prototype

Once we're happy with how the API functions, and what the
default/allowed parameters will be for each driver, we can start
writing the PHP extension and move forward with the RFC to merge it.

Here's an overview of the project:

* The API (what we're discussing)
* The drivers (we don't develop these)
    * Libsodium
    * OpenSSL
    * Room to grow in case we need to adopt for a post-quantum
cryptography library

Scott Arciszewski
Chief Development Officer
Paragon Initiative Enterprises <https://paragonie.com>