Easy Ecc Laravel Package

Fixed PHP 8.4+ deprecation warnings with X25519.

Full Changelog: https://github.com/paragonie/easy-ecc/compare/v1.3.0...v1.3.1

What's Changed

• PHP 8.4 support via paragonie/ecc v2.5.0
  • https://github.com/paragonie/phpecc/releases/tag/v2.5.0

Full Changelog: https://github.com/paragonie/easy-ecc/compare/v1.2.0...v1.3.0

• #10 / #11 - Use the corresponding hash function for hedged randomness, rather than relying on SHA384 everywhere.

Updated dependencies

• Increased minimum version for paragonie/ecc to 2.2.0.

• Updated minimum version of phpecc to v2.1.0

Replaced dependency on phpecc with PIE's fork. Recommended reading.

What's Changed

• Update sodium_compat dependency by @paragonie-security in https://github.com/paragonie/easy-ecc/pull/7

Full Changelog: https://github.com/paragonie/easy-ecc/compare/v1.0.0...v1.0.1

• Added support for NIST P-521 (secp521r1)
• #5 - Encryption enhancements
  • Added seal() / unseal() to the Defuse integration
  • Created interface ParagonIE\EasyECC\EncryptionInterface (which the Defuse integration now implements) for extensions
• Test on PHP 8.1
• Expanded unit test coverage

Provides constant-time algorithms for ECC key generation and signing. See #4 for more info.

• Throws an exception if you attempt to decode a compressed public key with the wrong curve.
• Re-enabled sodium tests.
• Moved EasyECC exceptions to a new base class.

• Added ECDSA-specific features.

• Fixed a bug with the libsodium integration causing out-of-memory errors.

Introducing Easy-ECC, a usability wrapper for phpecc/phpecc.

I should probably have a big asterisk on that statement: In its default configuration, it uses libsodium instead.

$ecc = new ParagonIE\EasyECC\EasyECC(); // libsodium
$ecc = new ParagonIE\EasyECC\EasyECC('K256'); // phpecc/phpecc with secp256k1 + SHA256
$ecc = new ParagonIE\EasyECC\EasyECC('P256'); // phpecc/phpecc with NIST P-256 + SHA256
$ecc = new ParagonIE\EasyECC\EasyECC('P384'); // phpecc/phpecc with NIST P-384 + SHA384

This isn't merely an easy-to-use interface, it also is secure-by-default. For example, if you're not using libsodium and want to sign a message, Easy-ECC opts for RFC 6979 (deterministic ECDSA) instead of risking k-value reuse/bias.

Furthermore, this includes an integration with defuse/php-encryption for public-key authenticated encryption.

$defuse = new ParagonIE\EasyECC\Integration\Defuse($ecc);
$ctxt = $defuse->asymmetricEncrypt($msg, $sk, $pk);