Officially, Libsodium will be part of the core extension of PHP 7.2 after RFC vote last week with 37 Yes and 0 No ! Sodium is a new, easy-to-use software library for encryption, decryption, signatures, password hashing and more.
Why it is modern cryptography ?
- Uses fast primitives designed to resist side-channel cryptanalysis (e.g. timing leaks, padding oracles).
- Exposes a high-level API that is simple and secure-by-default.
What does this mean to you ?
If you develop in PHP and can upgrade to 7.2 when it comes out, you get to enjoy modern cryptography as a part of the language itself. It will now be possible to design software that uses Ed25519 digital signatures (e.g. for automatic security updates) without requiring users to install an optional PHP extension.
More details in this article written by Scott Arciszewski.