Closed weierophinney closed 3 years ago
v1.0.1 is out, the notes from v1.0.0 are a must read before weighing whether or not to use it.
Originally posted by @paragonie-scott at https://github.com/zendframework/zend-crypt/issues/43#issuecomment-307533002
We'd like to add that a lot of changes (including better support for 32-bit platforms) have landed since v1.0.0. The latest version is v1.12.2, which has been adopted by WordPress without major issue.
This package is considered feature-complete, and is now in security-only maintenance mode, following a decision by the Technical Steering Committee. If you have a security issue, please follow our security reporting guidelines. If you wish to take on the role of maintainer, please nominate yourself
https://github.com/paragonie/sodium_compat#cryptography-primitives-provided
Zend\Crypt users interested in modern ECC may want to see sodium_compat adopted in the near future. In particular, public-key encryption via
ParagonIE_Sodium_Compat::crypto_box_seal()
and digital signatures viaParagonIE_Sodium_Compat::crypto_sign_detached()
.I would, however, wait until sodium_compat has been audited first: https://github.com/paragonie/sodium_compat/issues/8
Originally posted by @paragonie-scott at https://github.com/zendframework/zend-crypt/issues/43