paragonie/constant_time_encoding
Fast, secure constant-time encoding/decoding utilities for PHP. Provides Base32, Base64 (incl. URL-safe), and Hex implementations designed to reduce timing side-channel leaks. Ideal for cryptography, tokens, and security-sensitive data handling.
|
Package
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|
| chillerlan/php-authenticator | PHP 8.4+ library to generate and validate HOTP (RFC 4226) and TOTP (RFC 6238) one-time passwords—Google Authenticator compatible. Includes Steam Guard server time sync (cURL) and constant-time encoding/hex helpers (Sodium or fallback). | 56 | 58 | 2 | 4K | 0 | 21.9 | 29.1 | MIT | 2 months ago | |
| contao/contao | — | 426 | 428 | 172 | 31 | 358 | 27.3 | 26.6 | LGPL-3.0 | — | |
| contao/core-bundle | — | 123 | 130 | 56 | 19K | 0 | 2.3 | 30.3 | LGPL-3.0 | — | |
| dracoder/s4-2fa | — | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| harryes/laravel-sentinellog | All-in-one Laravel security and auth logging package: tracks login/logout/failed attempts with device + geo detection, alerts, TOTP 2FA, session management, brute-force protection, geo-fencing, SSO, and new-location verify/deny flows. | 7 | 8 | 1 | 0 | 0 | 0.1 | — | MIT | — | |
| laragear/two-factor | — | 339 | 341 | 24 | 50K | 0 | 23.1 | 34.0 | MIT | 3 months ago | |
| paragonie/certainty | Automate and manage cacert.pem for PHP projects to ensure reliable TLS certificate validation across diverse environments. Avoid disabling verification, reduce support burden, and keep HTTP clients secure. Requires PHP 8.3+. | 264 | 266 | 18 | 68K | 4 | 17.6 | 35.7 | NOASSERTION | 8 months ago | |
| paragonie/ciphersweet | CipherSweet is a PHP library for fast, secure field-level encryption with searchable encrypted indexes. Designed for applications that need to protect sensitive data at rest while still supporting equality and range queries, with strong cryptography and clean integrations. | 466 | 466 | 39 | 52K | 8 | 29.9 | 35.2 | NOASSERTION | 3 months ago | |
| paragonie/csp-builder | Build and send Content-Security-Policy headers in PHP from JSON files, JSON strings, or arrays. CSP Builder makes it easy to define directives programmatically and integrate CSP into web apps to improve security. | 541 | 545 | 39 | 80K | 7 | 13.6 | 31.7 | MIT | 1 year ago | |
| paragonie/easy-ecc | Easy-ECC is a hardened, easy-to-use PHP wrapper around paragonie/phpecc for elliptic-curve crypto. Generate keypairs, sign/verify messages, and perform ECDH key exchange with Curve25519 or ECDSA curves (K256, P256, P384, P521). | 47 | 47 | 2 | 25K | 0 | 12.6 | 40.2 | NOASSERTION | 7 months ago | |
| paragonie/halite | Halite is a high-level PHP cryptography library from Paragon Initiative Enterprises, built on libsodium. It provides safer, opinionated APIs for encryption, authentication, key management, and password hashing, helping you use modern crypto correctly with minimal foot-guns. | 1,155 | 1,162 | 90 | 385K | 21 | 30.0 | 43.3 | MPL-2.0 | 8 months ago | |
| paragonie/hidden-string | HiddenString provides a small PHP utility for handling sensitive strings more safely in memory. Extracted from ParagonIE Halite, it helps reduce accidental exposure via debugging/serialization by wrapping secret values in an object. Requires PHP 7+. | 74 | 74 | 5 | 450K | 2 | 1.9 | 52.4 | MPL-2.0 | 2 years ago | |
| paragonie/paseto | Reference PHP implementation of PASETO security tokens (v3/v4): safer alternative to JWT/JWE/JWS with modern crypto. Supports local and public tokens, includes PASERK integration for key serialization/wrapping, and works with Sodium (or sodium_compat). | 3,389 | 3,387 | 109 | 36K | 1 | 31.9 | 15.1 | NOASSERTION | 10 months ago | |
| phpseclib/phpseclib | Pure-PHP secure communications library: SSH-2 and SFTP plus crypto primitives and PKI tools (X.509, RSA, ECDSA/ECDH, Ed25519, DH/DSA) and ciphers like AES/ChaCha20 with GCM/Poly1305. MIT licensed and Composer-ready. | 5,573 | 5,687 | 908 | 9M | 197 | 89.9 | 77.6 | MIT | 1 month ago | |
| pragmarx/google2fa | Google2FA adds HOTP/TOTP two-factor authentication to PHP, compatible with Google Authenticator and RFC 4226/6238. Generate secrets and QR code data, verify one-time codes, and tune validation windows and time drift—ideal for Laravel or standalone apps. | 0 | 2,030 | — | 5M | — | 24.3 | 50.8 | — | — | |
| spomky-labs/otphp | — | 1,469 | 1,481 | 160 | 1M | 1 | 34.7 | 46.2 | MIT | 4 months ago | |
| web-auth/webauthn-lib | PHP WebAuthn library for adding passkeys/FIDO2 authentication to apps and APIs. Implements registration and login flows, credential validation, and related WebAuthn data structures, suitable for Laravel or custom frameworks. | 123 | 128 | 25 | 2M | 0 | 1.4 | 55.3 | MIT | — |
How can I help you explore Laravel packages today?