README

A simple library that packages functional sodium_crypt_* into objects.

Inputs and outputs are binary data, don't be afraid to use the petrknap/binary.

Examples

Symmetric block encryption

use PetrKnap\CryptoSodium\SecretBox;

$secretBox = new SecretBox();
$message = 'Hello World!';
$key = $secretBox->generateKey();

$ciphertext = $secretBox->encrypt($message, $key);

echo $secretBox->decrypt($ciphertext, $key);

$secretBox->eraseData($key);

Asymmetric block encryption

use PetrKnap\CryptoSodium\Box;

$box = new Box();
$message = 'Hello World!';
$sendersKeyPair = $box->generateKeyPair();
$recipientsKeyPair = $box->generateKeyPair();

$encryptionKeyPair = $box->generateKeyPair(
    $box->extractSecretKey($sendersKeyPair),
    $box->extractPublicKey($recipientsKeyPair),
);
$ciphertext = $box->encrypt($message, $encryptionKeyPair);
$box->eraseData($encryptionKeyPair);

$decryptionKeyPair = $box->generateKeyPair(
    $box->extractSecretKey($recipientsKeyPair),
    $box->extractPublicKey($sendersKeyPair),
);
echo $box->decrypt($ciphertext, $decryptionKeyPair);
$box->eraseData($decryptionKeyPair);

$box->eraseData($sendersKeyPair);
$box->eraseData($recipientsKeyPair);

Symmetric stream encryption

use PetrKnap\CryptoSodium\SecretStream\XChaCha20Poly1305;

$xChaCha20Poly1305 = new XChaCha20Poly1305();
$messageChunk1 = 'Hello ';
$messageChunk2 = 'World!';
$key = $xChaCha20Poly1305->generateKey();

$pushStream = $xChaCha20Poly1305->initPush($key);
$ciphertextHeader = $pushStream->header;
$ciphertextChunk1 = $pushStream->push($messageChunk1);
$ciphertextChunk2 = $pushStream->push($messageChunk2, tag: XChaCha20Poly1305::TAG_FINAL);

$pullStream = $xChaCha20Poly1305->initPull($ciphertextHeader, $key);
echo $pullStream->pull($ciphertextChunk1);
echo $pullStream->pull($ciphertextChunk2);

$xChaCha20Poly1305->eraseData($key);

Symmetric block encryption with additional data

use PetrKnap\CryptoSodium\Aead\Aes256Gcm;

$aes256Gcm = new Aes256Gcm();
$message = 'Hello World!';
$purpose = 'example';
$key = $aes256Gcm->generateKey();

$ciphertext = $aes256Gcm->encrypt($message, $key, additionalData: $purpose);

echo $aes256Gcm->decrypt($ciphertext, $key, additionalData: $purpose);

$aes256Gcm->eraseData($key);

Data signing

use PetrKnap\CryptoSodium\Sign;

$signer = new Sign();
$message = 'Hello World!';
$keyPair = $signer->generateKeyPair();
$secretKey = $signer->extractSecretKey($keyPair);
$publicKey = $signer->extractPublicKey($keyPair);

$signedMessage = $signer->sign($message, $secretKey);

echo $signer->verified($signedMessage, $publicKey);

$signer->eraseData($secretKey);
$signer->eraseData($keyPair);

Run composer require petrknap/crypto-sodium to install it. You can support this project via donation. The project is licensed under the terms of the LGPL-3.0-or-later.