@paragon@phpc.social

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

Replying to

Not directly relevant: We're currently cooking up a PHP extension (with a separate, pure-PHP polyfill for users that cannot install extensions). The adoption and migration pains that PHP users experience are something we take very seriously.

4

1

0

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

Replying to

The PHP extension (written in Rust): https://github.com/paragonie/ext-pqcrypto

github.com

3

2

4

0

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

Replying to

For folks that cannot install extensions (or just don't have a Rust toolchain setup): https://github.com/paragonie/pqcrypto_compat

github.com

3

1

0

Paragon Initiative Enterprises @paragon@phpc.social

· 12mo ago

If you're a #Laravel or #Symfony developer and wish you could only store encrypted data in your database, but still query your database against those encrypted fields, you're in luck!

A few years ago, we introduced CipherSweet for searchable encryption in PHP software, designed for SQL databases.

Today, we've tagged the first release for Doctrine and Eloquent adapters for CipherSweet.

Learn more:

https://github.com/paragonie/ciphersweet?tab=readme-ov-file#using-ciphersweet

#php #encryption #php #security #opensource

github.com

9

0

7

0

Paragon Initiative Enterprises @paragon@phpc.social

· 5mo ago

Replying to

If you've never heard of Wycheproof before: https://github.com/C2SP/wycheproof

github.com

2

0

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

RE: https://phpc.social/@paragon/116364892926842512

We were originally planning to publish this on April 15, the 11 year anniversary of our inaugural blog post.

However, the accelerated timelines from Google and Cloudflare indicated that waiting another week is delaying it too much. So we pushed publish today instead.

phpc.social

2

0

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

Replying to

@ocramius@mastodon.social Not yet: https://www.yubico.com/blog/future-proofing-authentication-a-look-at-the-future-of-post-quantum-cryptography/

yubico.com

2

1

0

Paragon Initiative Enterprises @paragon@phpc.social

· 6mo ago

Replying to

If you'd like to hear more, tune in later this month.

2

0

Paragon Initiative Enterprises @paragon@phpc.social

· 12mo ago

New sodium_compat releases.

**Pay attention to the release notes** if you use our polyfill to provide `sodium_base642bin()` with one of thee `*_NO_PADDING` constants.

For modern (PHP 8.1 and newer) systems, v2:

https://github.com/paragonie/sodium_compat/releases/tag/v2.3.0

For legacy (PHP 5.2.4 - 8.0 as well as 8.1+) systems, v1:

https://github.com/paragonie/sodium_compat/releases/tag/v1.22.0

#php #libsodium #cryptography #base64 #polyfill

github.com

2

0

1

0

Paragon Initiative Enterprises @paragon@phpc.social

· 9mo ago

Replying to

WordPress ticket: https://core.trac.wordpress.org/ticket/64462#ticket Pull Request to prevent Composer from installing affected versions if Roave/SecurityAdvisories is used: https://github.com/FriendsOfPHP/security-advisories/pull/756

core.trac.wordpress.org

1

0

2

0

Paragon Initiative Enterprises @paragon@phpc.social

· 12mo ago

Replying to

https://github.com/paragonie/sodium_compat/pull/199 It looks like this will give a noticeable performance gain for all legacy versions of PHP as well, which should make the version of WordPress that gets these changes significantly faster where this code is used.

github.com

1

0

2

0