Use OpenSSL (PHP 8.1+, OpenSSL 3.0) If Available

paragonie / phpecc

Pure PHP Elliptic Curve Cryptography Library

16 stars 3 forks source link

Use OpenSSL (PHP 8.1+, OpenSSL 3.0) If Available #19

Closed paragonie-security closed 5 months ago

paragonie-security commented 5 months ago

Native implementations will almost always offer better performance than anything we can code in PHP
Using a native implementation is more likely to be secure against side-channel attacks
The library will continue to be backwards compatible with systems that do not use OpenSSL

paragonie-security commented 5 months ago

Unfortunately, https://github.com/php/php-src/issues/14074

Even if this is a bug that gets fixed, the fix will only be available for PHP 8.2+ (since 8.1 is in "security fixes only" mode). I'll have to increase the bar to 8.2 for this.

Unfortunately, Ubuntu 24.04 offers php8.1-cli to fresh installs. That's mildly annoying.

paragonie-security commented 5 months ago

Hey @masterpink0 I think you uploaded some files by mistake. I've removed them.