Re: Fwd: [PHP-DEV] [RFC] [PHP 7.1] libsodium

On 21/05/15 09:49, Peter Petermann wrote: > Hi Scott, > > I personally think the RFC is a bit short, > also I just had a very brief look at the documentation of the extension in > question, and find its API a bit strange, > whats up with having everything in static method calls? > > regards, > PP > > 2015-05-21 3:15 GMT+02:00 Scott Arciszewski <scott@paragonie.com>: > >> The current state of cryptography in PHP is, well, abysmal. Our two main >> choices for handling symmetric cryptography are libmcrypt (collecting dust >> since 2007) and openssl, which lacks a streaming API (e.g. mcrypt_generic) >> and GCM support. >> >> >> I think now is a good time to talk about the possibility of making >> libsodium a core PHP extension, depending on where things are when we near >> the 7.1 feature freeze. >> >> I've just opened an RFC for precisely this purpose: >> https://wiki.php.net/rfc/libsodium >> Yes, the choice of API looks pretty awkward; if we could settle on PHP-5.6+, change Sodium to a namespace and all methods to functions therein. -- Regards, Mike