halite

• Allow larger Symmetric\EncryptionKeys, since we use HKDF anyway.
• Add version 2's getRawKeyMaterial() method to all Key classes. Please use this method instead of get() in new code.

• Make type checks stricter. String inputs must be stringy.
• Use correct type check logics on File parameters.
• Got rid of catch-rethrow hack, use finally instead. (This should make it easier to audit.)

(This time I used the correct branch.)

• Add an IDE stub file for libsodium. (Making this a release for composer users.)
• https://github.com/paragonie/halite/compare/1.3.1...1.3.2

• Asymmetric\EncryptionSecretKey now has a derivePublicKey() method which returns an EncryptionPublicKey
• Asymmetric\SignatureSecretKey now has a derivePublicKey() method which returns a SignaturePublicKey
• Added string length checks on key constructors
• Added string length checks to the Asymmetric\Crypto::verify() and Symmetric\Crypto::verify()

• Fixed a few non-security bugs.
• Improved test coverage.
• Made several classes final to discourage inheritance (this change is the only reason why I didn't call it 1.2.1 instead of 1.3.0.)
• Got rid of useless checks from pre-1.0 and dead code (i.e. unused "use" statements).
• Minor documentation warts have been corrected.

Adds four new methods to KeyFactory:

• loadEncryptionPublicKey()
• loadEncryptionSecretKey()
• loadSignaturePublicKey()
• loadSignatureSecretKey()

Also cleaned up some of the unit tests and added a bit to the documentation.

The lazy method, File::verify() was missing an argument. Since this is technically an API break, I'm increasing the minor version.

This is first stable release of Halite, a simplified libsodium wrapper developed by Paragon Initiative Enterprises.

Adds two more real-time test: sanity checks on the expected/actual values returned by fstat() and ftell().

Create objects to encapsulate streams; eliminate race conditions.

Discovered numerous issues with the quality of the key generation code, which has been refactored into a KeyFactory class.

This marks the 0.6.0 release of Halite! Outside documentation, we're entering a code freeze until we get a clean bill of health from @defuse.

Changes since 0.5.2:

• We now use stricter typing on the Key types, and have more Key types.
• Instead of a long ugly readme, now have some documentation underway.
• File now has a simpler API (i.e. File::encrypt()) that will invoke the necessary underlying API (encryptFile() or encryptResource()).
• Mitigated a string corruption issue with version 1.0.0 of the PHP extension for libsodium on PHP 7 (which is fixed in 1.0.1)

• Hardened the File wrapper against partial writes as well as partial reads
• Switched versioned settings to a Config object rather than an array
• Add a composer-free autoloader

Fixed #10 (thanks @CodyColeman)

Add a streaming checksum interface. Originally intended for 0.4.0 but I forgot.

This is still not production-ready. I removed our \Sodium\crypto_box_seal polyfill. Everyone should be on libsodium 1.0.3 proper (the PPAs seem borked) or 1.0.4 (if it's released) by the time Halite is stable.

Fix key derivation (did not return in derived Key classes), added unit tests.

Travis CI now works with PHP 7.

This patch mostly addresses unit tests, correct exception naming, and ensuring composer.json makes it clear that this requires PHP 5.6 or newer.

Better class organization, made the documentation a bit easier.

Basic functionality exposed. There are still a few things left to do (namely: documentation and more unit tests).