← Feed

Posts

• Post #2926117

  New sodium_compat releases. **Pay attention to the release notes** if you use our polyfill to provide `sodium_base642bin()` with one of thee `*_NO_PADDING` constants. For modern (PHP 8.1 and newer) systems, v2: https://github.com/paragonie/sodium_compat/releases/tag/v2.3.0 For legacy (PHP 5.2.4 - 8.0 as well as 8.1+) systems, v1: https://github.com/paragonie/sodium_compat/releases/tag/v1.22.0 #php #libsodium #cryptography #base64 #polyfill

• Post #2926116

  If you're a #Laravel or #Symfony developer and wish you could only store encrypted data in your database, but still query your database against those encrypted fields, you're in luck! A few years ago, we introduced CipherSweet for searchable encryption in PHP software, designed for SQL databases. Today, we've tagged the first release for Doctrine and Eloquent adapters for CipherSweet. Learn more: https://github.com/paragonie/ciphersweet?tab=readme-ov-file#using-cipher...

• Post #2926115

  We've identified a way to make sodium_compat faster without introducing side-channels. https://github.com/paragonie/sodium_compat/pull/198

• Post #2926114

  The new sodium_compat releases are out, with improved performance! https://github.com/paragonie/sodium_compat/releases/tag/v1.23.0 https://github.com/paragonie/sodium_compat/releases/tag/v2.4.0 #php #cryptography #libsodium #crypto

• Post #2926113

  # sodium_compat security release * https://github.com/paragonie/sodium_compat/releases/tag/v2.5.0 * https://github.com/paragonie/sodium_compat/releases/tag/v1.24.0 Further information: https://00f.net/2025/12/30/libsodium-vulnerability/

• Post #2926112

  RE: https://phpc.social/@paragon/116364892926842512 We were originally planning to publish this on April 15, the 11 year anniversary of our inaugural blog post. However, the accelerated timelines from Google and Cloudflare indicated that waiting another week is delaying it too much. So we pushed publish today instead.

• Post #2926111

  We managed to get our pqcrypto_compat unit tests (without the Rust extension) from 21 minutes down to about 30 seconds. These phpunit runs include the full Wycheproof algorithm suite for each algorithm. Before: https://github.com/paragonie/pqcrypto_compat/actions/runs/24433240208/job/71381920310 After: https://github.com/paragonie/pqcrypto_compat/actions/runs/24534025441/job/71724406568 Code optimization did a lot of the work, but the rest was opcache and enabling JIT.

• Post #1032346

  If you're confident you don't need our sodium polyfill in your project, by all means, use ext-sodium instead. But if you're writing a package other people use, tread carefully. https://old.reddit.com/r/PHP/comments/1sbceco/dependency_hygiene/oe38qpv/

• Post #1010531

  We're excited to finally make #postquantum #cryptography possible in the #PHP ecosystem https://paragonie.com/blog/2026/04/post-quantum-cryptography-for-php-community