Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:97722
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.210.179 as permitted sender)
MIME-Version: 1.0
Sender: julienpauli@gmail.com
In-Reply-To: <CAKws9z2x1wz_WA9_XWOjbf-M9m917DN=zWzhXw3JNqdewyL_9g@mail.gmail.com>
References: <CAKws9z2x1wz_WA9_XWOjbf-M9m917DN=zWzhXw3JNqdewyL_9g@mail.gmail.com>
Date: Thu, 12 Jan 2017 11:23:32 +0100
Message-ID: <CAMUwpuTeJfaaCMMU4cDvwXRoHjZaVwNkZMg5KA1VOjm5zJq0Gw@mail.gmail.com>
To: Scott Arciszewski <scott@paragonie.com>
Cc: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a1136a42256def50545e31e25
Subject: Re: [PHP-DEV] [RFC] libsodium (PHP 7.2)
From: jpauli@php.net (Julien Pauli)

--001a1136a42256def50545e31e25
Content-Type: text/plain; charset=UTF-8

On Wed, Jan 11, 2017 at 7:22 PM, Scott Arciszewski <scott@paragonie.com>
wrote:

> Hi all,
>
> I'm resurrecting my RFC to add libsodium as a core extension to PHP 7.2.
>
> In response to feedback from Pierre Joye, I've outlined which parts of the
> existing libsodium API I'd like exposed in the core extension. Most
> notably:
>
> - Removed crypto_aead_aes256gcm_* because OpenSSL offers it
> - Removed crypto_aead_chacha20poly1305_* because crypto_aead_* is awaiting
> the CAESAR winner https://competitions.cr.yp.to/caesar.html
> - Removed crypto_pwhash_scryptsalsa208sha256_* because we have Argon2i now
>
> If anyone would like to weigh in on this in the next few weeks, I'd greatly
> appreciate it.
>
> I'm also developing a polyfill for most of the API features (except
> pwhash): https://github.com/paragonie/sodium_compat
>
>
I guess you are talking about this : https://wiki.php.net/rfc/libsodium

Huge +1.


What about libsodium usage under Windows ?
I guess under *Nix, we'll rely on the OS shipping of the library , but
that's not the same flavour for Windows, where we usually need to embed,
and maintain the library.

I see a second vote for the API , PHP is not really a language where
You\Use\Things\Like\That , I'm all +1 to use_things_like_that() instead :-)

After Mcrypt has been abandonned , we really really need such a library
binding added to Core IMO.


Julien.Pauli

--001a1136a42256def50545e31e25--