Digital signature: To generate a digital signature for a string, such as a message/file, Sodium uses an Elliptic Curve algorithm, Ed25519.Sending secret messages: To encrypt a message in an end-to-end scenario, such as when a user wants to send a secret message to another user, Sodium uses the algorithms XSalsa20 to encrypt, Poly1305 for MAC, and XS25519 for key exchange.Encrypt/Authenticate with a shared key: To encrypt and/or authenticate a string using a shared-key, such as symmetric encryption, Sodium uses the XSalsa20 algorithm to encrypt and HMAC-SHA512 for the authentication.Here are six examples for using the Sodium cryptography library: *information via comparison of cryptography libraries on wikipedia Libsodium Examples HMAC-MD5, HMAC-SHA1, HMAC-SHA2, Poly1305-AESĪES, Camellia, 3DES, Blowfish, CAST5, IDEA, GOST 28147-89/GOST R 34.12-2015 ARIAĮCB, CBC, OFB, CFB, CTR, CCM, GCM, OCB, XTS, AES-Wrap, Stream MD5, SHA-1, SHA-2, SHA-3, RIPEMD-160, Tiger, Whirlpool, GOST, BLAKE2 NIST, SECG, ECC Brainpool, ECDSA, ECDH, Curve25519, EdDSA, GOST R 34.10 OpenSSL with the chart below, you can see that there are many differences between the two cryptographic libraries. If you want to use Sodium with PHP 7.0 or 7.1, you need to install a PECL extension. ( Here is the extended article.) PHP Encryption With Libsodiumĭevelopers can use Sodium for PHP encryption and decryption with PHP 7.2 and newer without an extension. The attack was aimed to discover, in **65 milliseconds,** the secret key used in widely deployed software for hard-disk encryption. Just to give you an idea, one of the most successful side-channel attacks in history was performed by Adi Shamir, Eran Tromer, and Dag Arne Osvik in 2006. This is a very good point for security because the majority of attacks are based on issues in the implementations, rather than weaknesses in the algorithm itself.

Libsodium Is Designed to Prevent Side-Channel AttacksĪpart from the selection of the best algorithms available, Sodium, and NaCl, were designed to prevent side-channel attacks. If you need to use different algorithms - for instance, if you need to ensure compatibility with existing cryptosystems - you need to look for a different library, such as OpenSSL.

AES-GCM, authenticated encryption algorithm, based on the advanced encryption standard (AES).

Curve25519, Diffie–Hellman key-exchange function.

The library uses some of the most robust algorithms available, including: This means the algorithms in Sodium have been selected and cannot be changed. The Libsodium library is an “opinionated” cryptography library. If you need to enable PHP encryption/decryption, you can use Libsodium. It is a portable, cross-compilable, installable, and packageable fork of NaCl, a famous cryptographic tool designed by Prof. Libsodium, also known as Sodium, is a powerful cryptography library.

Zend guard 7.0 crack