search

paragonie / paseto

Platform-Agnostic Security Tokens
https://paseto.io
Other
3.24k stars 108 forks source link

Implement V3/V4 #128

Closed paragonie-security closed 3 years ago

paragonie-security commented 3 years ago

See #127. This does not have test vectors yet. This is a PR against the spec branch to make the changes easier to visualize on Github.

The next steps are as follows (just to prevent any astonishment):

  1. Minimum two week comment period for #127, starting on 2021-07-19 and concluding 2021-08-02. We will be reaching out to PASETO maintainers to ask them for feedback, but the floor's open to anyone.
  2. Once we're happy with v3/v4's design and merge #127, this branch will be updated to conform to the spec (assuming it changes).
  3. This pull request will be re-targeted at the master branch.
  4. Once we're happy with the implementation, the branch will be merged.
  5. We will then release a new major version of the PASETO library for PHP with the new features.
    • The main reason it's a breaking change is that phpecc relies on ext-gmp and we raised our minimum PHP version.
    • (After it's is released, we may bump the minimum PHP version to 7.4 or 8.0 in another minor release. We just want to minimize the number of people orphaned on v1/v2 protocols.)
  6. The matrix on https://paseto.io will be updated.
panva commented 3 years ago

https://github.com/panva/paseto/pull/19#issuecomment-885028964

paragonie-security commented 3 years ago

There is now a PHP implementation of PASERK that builds upon the implementation in this branch.

paragonie-security commented 3 years ago

Ditto for https://github.com/paragonie/paseto/pull/127#issuecomment-889841866