[php-src] PR #25246: ext/sodium: Accept an optional tweak for ipcrypt ND and NDX
| From: | rafamolina1 | Date: | Fri, 06 Nov 2026 17:31:30 +0000 |
| Subject: | [php-src] PR #25246: ext/sodium: Accept an optional tweak for ipcrypt ND and NDX | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40360@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25246
Author: rafamolina1
## Summary
-
sodium_crypto_ipcrypt_nd_encrypt() and
sodium_crypto_ipcrypt_ndx_encrypt() take an optional $tweak. Omitting it
still generates a random tweak, so existing calls keep working.
- Known-answer tests cover the deterministic, ND, NDX, and prefix-preserving vectors from
draft-denis-ipcrypt.
The ipcrypt functions themselves already landed in PHP 8.6 (GH-20960). This follows up on GH-25242
by making the non-deterministic modes reproducible.
## Test plan
- [x] make test TESTS="ext/sodium/tests/crypto_ipcrypt.phpt
ext/sodium/tests/crypto_ipcrypt_nd.phpt ext/sodium/tests/crypto_ipcrypt_pfx.phpt
ext/sodium/tests/sodium_bin2ip.phpt" against libsodium 1.0.21