Version 1.12.2

• Fixes #106
• Fixes #112
• Possible fix for #113

Version 1.12.1

Fixes #107.

Version 1.12.0

• #100 - Fixed sodium_compat on PHP 5.2.4 - 5.2.17. We now include 5.2 on Travis CI so any changes that would break 5.2 will be caught early.

  • As part of this fix, we now include a SplFixedArray polyfill for PHP 5.2.

• We now include php74-snapshot on Travis CI (to ensure our code works on PHP 7.4 when it comes out). PHP 8 will be our focus soon after 7.4 is out.

• Fixed BLAKE2b on 32-bit platforms.

• The previous fixes in the 1.11 series have been resolved (and hopefully no more Windows weirdness happens).

  If anyone else encounters any weird Windows behavior, please upgrade to the latest patch release for your version of PHP (i.e. PHP 7.3.10 is currently fine to report bugs on while 7.3.9 is not).

• #98 - Implemented an Ed25519 optimization discovered by Isus Lovecruft in ed25519-dalek.

Version 1.11.4

Merged #100 (proposed fix for #101 which was caused trying to fix #99 without being able to reproduce any of the problems caused by some Windows users).

Version 1.11.3

• Complete fix for #99

Version 1.11.2

Workaround for Windows-specific issues with defined() and define().

Version 1.11.1

• Fixed an issue with sodium_base642bin() and sodium_bin2base64() erroneously returning "" when an input was falsy, rather than strictly checking for empty string inputs.

Version 1.11.0

• #91, #93, #96 - We now use PHPStan in addition to Psalm in Travis CI
• #92, #95 - Added missing features from polyfill
  • sodium_add()
  • sodium_base642bin()
  • sodium_bin2base64()
  • sodium_crypto_kdf_derive_from_key()
  • sodium_crypto_kdf_keygen()
  • sodium_crypto_kx_client_session_keys()
  • sodium_crypto_kx_keypair()
  • sodium_crypto_kx_publickey()
  • sodium_crypto_kx_secretkey()
  • sodium_crypto_kx_seed_keypair()
  • sodium_crypto_kx_server_session_keys()
  • sodium_crypto_pwhash_str_needs_rehash()
  • sodium_crypto_secretstream_xchacha20poly1305_keygen()
  • sodium_crypto_secretstream_xchacha20poly1305_init_push()
  • sodium_crypto_secretstream_xchacha20poly1305_push()
  • sodium_crypto_secretstream_xchacha20poly1305_init_pull()
  • sodium_crypto_secretstream_xchacha20poly1305_pull()
  • sodium_crypto_secretstream_xchacha20poly1305_rekey()
  • sodium_crypto_sign_keypair_from_secretkey_and_publickey()
  • sodium_pad()
  • sodium_unpad()

Version 1.10.1

This merely exposes an internal API used by the the XChaCha20 RFC test vectors.

Version 1.10.0

New method:

• ParagonIE_Sodium_Compat::runtime_speed_test() for estimating if our 32-bit implementation is slow enough to risk timeouts on e.g. Ed25519 verification.
  • Returns TRUE is everything is safe.
  • Returns FALSE if performance is a concern.