CICiPHPerCoder·Nov 6, 2016
You're fine, I just didn't understand your question on the first pass.
EDIT: https://github.com/paragonie/halite/compare/v3.1.1...3b95d85...
In “Sites like these give PHP a bad reputation”paragonie
halite
PHP2015–2019
paragonie / halite
halite
High-level cryptography interface powered by libsodium
2Distinct people
12Mentions
0Explicit recommenders
1.2KGitHub stars
What to know before exploring
What it is
High-level cryptography interface powered by libsodium
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- paragonie/airship · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 7:24:48 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year12 dated mentions
Observed mentions: 2015-11-15 20:24:57 UTC to 2019-07-08 17:34:32 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 8 | 2 | 6 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
8 sourcesModern PHP (which LastPass almost certainly isn't using or writing) isn't really worthy of disdain.
https://github.com/paragonie/halite/blob/master/src/Symmetri...
(Disclaimer: My project.)
In “Sites like these give PHP a bad reputation”I'm the person who published this advisory to oss-sec and a co-author of https://github.com/defuse/php-encryption
I also wrote https://github.com/paragonie/halite which is a PHP library aims to make libsodium incredibly easy for PHP developers to get right.
For systems that need asymmetric crypto and can't install libsodium, I also wrote https://github.com/paragonie/EasyRSA which side-steps a lot of the mistakes developers make. EasyRSA uses defuse for symmetric-key encryption, then encrypts the AES key with RSA.
Writing secure cryptography isn't trivial. Assuming the three projects I just linked to are secure enough to use (all indications point to: they are), there's literally no reason to reinvent the wheel solely for Magento.
Magento already uses Composer; they could just add them to their composer.json file and rewrite their routines
Read the rest
to use defuse + maybe EasyRSA if they have a use case for it.
Zend\Crypt is also an acceptable choice, as long as you don't install the version with an RSA implementation vulnerable to padding oracle attacks. https://framework.zend.com/security/advisory/ZF2015-10
Show HN: Halite – A simple libsodium wrapper for PHP projects
43 points · Open discussionHere's a high-level library: https://github.com/paragonie/halite
It uses libsodium, which only offers X25519/Ed25519 for public key crypto.
In Keylength – Cryptographic Key Length RecommendationIf you're wondering about our choice in primitives: https://github.com/paragonie/halite/blob/master/doc/Primitiv...
No user should ever need to know these details to use it successfully.
In Solve All Your Cryptography Problems in 3 Easy Steps [PHP]SEEKING WORK: Application Security, Cryptography, Web Development
REMOTE Only - (Located in Orlando, FL)
What do WordPress, Joomla, Symfony, CodeIgniter, the Facebook SDK, CakePHP, Yii Framework, several implementations of RNCryptor in various programming languages, and Zend Framework's Cryptography Library all have in common? They've all benefited from my open source security research.
Whether you're a startup looking to eliminate unnecessary risk while you focus on growth or a large business that needs to protect your assets, I can help.
A brief sample of software I've written:
* https://github.com/paragonie/halite - Halite: A PHP libsodium wrapper that emphasizes ease-of-use, secure defaults, and type-safety.
* https://github.com/paragonie/random_compat Random_compat: Use the new PHP 7 CSPRNG functions in PHP 5 projects.
* https://gith
Read the rest
ub.com/paragonie/constant_time_encoding - Constant-Time Encoding: A full implementation of RFC 4648 encoding/decoding functions that can be used to encode encryption keys for storage without leaking key material through cache-timing side-channels.
* https://github.com/paragonie/csp-builder - CSP Builder: Build a Content-Security-Policy header for your website.
Example config: https://github.com/paragonie/airship/blob/master/src/config/...
Live demo: https://securityheaders.io/?q=https%3A%2F%2Fcspr.ng%2F
* https://github.com/paragonie/airship - CMS Airship (beta software): A secure-by-default content management system and development framework that emphasizes secure package management and attempts to solve the Triangle of Secure Code Delivery: https://defuse.ca/triangle-of-secure-code-delivery.htm
Other Technologies:
* Excellent: PHP, Java, C#, Shell scripting
* Experienced: HTML5/CSS3/JS, Node.js, C, C++, Python (with Django), Webserver configuration (Apache/nginx)
* Currently learning: Ruby [on Rails]
Feel free to contact me at security@paragonie.com if you're interested in working together.
Show HN: Halite – A simple libsodium wrapper for PHP projects
2 points · Open discussion