Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-27 Thread Yasuo Ohgaki
Hi Scott, On Mon, May 25, 2015 at 6:42 PM, Scott Arciszewski wrote: > How should we reconcile your standard recommendations with NaCl proper and > how libsodium is used in other languages? > > I'll try to loop Frank Denis in on this conversation again, but any > specific objections (esp. bikeshe

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-27 Thread Francois Poirotte
Hi, I like Anthony's idea of a crypto framework (abstracting away whatever underlying library is actually used). Not sure yet how this could be implemented though. For what it's worth, I started playing with libtomcrypt (yet another crypto API) a few weeks ago as an attempt to replace the ol

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-26 Thread Rowan Collins
On 26/05/2015 23:52, Scott Arciszewski wrote: That's fair, and one of the reasons I wanted to make ext/libsodium part of the core was so that segueing into a PDO-style cryptography API would be more natural. Instead of "wrap openssl and maybe wrap libsodium if it's already installed" it would be

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-26 Thread Scott Arciszewski
That's fair, and one of the reasons I wanted to make ext/libsodium part of the core was so that segueing into a PDO-style cryptography API would be more natural. Instead of "wrap openssl and maybe wrap libsodium if it's already installed" it would be "wrap what the language already has". Am I mist

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-26 Thread Anthony Ferrara
Scott, On Wed, May 20, 2015 at 9:15 PM, Scott Arciszewski wrote: > Hi Internals Team, > > I'm sure everyone is really focused (and excited) for PHP 7.0.0 later this > year, and many of you might not want to discuss what 7.1.x looks like yet. > > The current state of cryptography in PHP is, well,

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-25 Thread Scott Arciszewski
How should we reconcile your standard recommendations with NaCl proper and how libsodium is used in other languages? I'll try to loop Frank Denis in on this conversation again, but any specific objections (esp. bikeshedding) would probably be best moved towards new issues on the jedisct1/libsodium

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-24 Thread Yasuo Ohgaki
Hi Scott, On Thu, May 21, 2015 at 10:15 AM, Scott Arciszewski wrote: > Hi Internals Team, > > I'm sure everyone is really focused (and excited) for PHP 7.0.0 later this > year, and many of you might not want to discuss what 7.1.x looks like yet. > > The current state of cryptography in PHP is, w

Re: [PHP-DEV] [RFC] [PHP 7.1] libsodium

2015-05-22 Thread Markus Fischer
On 21.05.2015 03:15, Scott Arciszewski wrote: > I've just opened an RFC for precisely this purpose: > https://wiki.php.net/rfc/libsodium >From https://github.com/jedisct1/libsodium-php : // Binary to hexadecimal $hex = Sodium::sodium_bin2hex($bin); // Hexadecimal to binary $bin = Sodium::sodium_