• Stars
    star
    3,183
  • Rank 13,374 (Top 0.3 %)
  • Language
    PHP
  • License
    Other
  • Created about 6 years ago
  • Updated 11 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Platform-Agnostic Security Tokens

PASETO: Platform-Agnostic Security Tokens

Build Status Latest Stable Version Latest Unstable Version License Downloads

Paseto (pɔːsΙ›tΙ™ΚŠ, paw-set-oh) is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.

This library is a reference implementation of PASETO in the PHP language. Please refer to the PASETO Specification for design considerations.

How to Use this Library

See the documentation.

The PASETO specification may also be useful for understanding why things are designed the way they are.

PASETO Extensions

PASERK

For key wrapping, serialization, and canonical identification, please see the PHP implementation of PASERK.

If you're not sure what that means, please refer to the PASERK specification.

Since PASERK is a PASETO extension, PASERK support is not automatically included with PASETO, but PASETO is bundled with PASERK.

Requirements

PHP PASETO Library Version 3

  • Requires PHP 8.1 or newer.
  • For v3 tokens, the GMP and OpenSSL extensions are required.
  • For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
  • PASETO Protocol versions: v3, v4

PHP PASETO Library Version 2

  • Requires PHP 7.1 or newer.
  • For v3 tokens, the GMP and OpenSSL extensions are required.
  • For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
  • PASETO Protocol versions: v1, v2, v3, v4

PHP PASETO Library Version 1

  • Requires PHP 7.0 or newer.
  • For v1 tokens, the OpenSSL extension is required.
  • For v2 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
  • PASETO Protocol versions: v1, v2

Support Contracts

If your company uses this library in their products or services, you may be interested in purchasing a support contract from Paragon Initiative Enterprises.

More Repositories

1

random_compat

PHP 5.x support for random_bytes() and random_int()
PHP
8,139
star
2

awesome-appsec

A curated list of resources for learning about application security
PHP
5,946
star
3

halite

High-level cryptography interface powered by libsodium
PHP
1,109
star
4

sodium_compat

Pure PHP polyfill for ext/sodium
PHP
855
star
5

constant_time_encoding

Constant-Time Character Encoding in PHP Projects
PHP
754
star
6

easydb

Easy-to-use PDO wrapper for PHP projects.
PHP
728
star
7

csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)
PHP
537
star
8

chronicle

Public append-only ledger microservice built with Slim Framework
PHP
468
star
9

airship

Secure Content Management for the Modern Web - "The sky is only the beginning"
PHP
419
star
10

ciphersweet

Fast, searchable field-level encryption for PHP projects
PHP
415
star
11

sapient

Secure API Toolkit
PHP
317
star
12

anti-csrf

Full-Featured Anti-CSRF Library
PHP
293
star
13

certainty

Automated cacert.pem management for PHP projects
PHP
262
star
14

EasyRSA

Simple and Secure Wrapper for phpseclib
PHP
194
star
15

password_lock

Wraps Bcrypt-SHA2 in Authenticated Encryption
PHP
190
star
16

sodium-plus

Developer-friendly libsodium interface
JavaScript
170
star
17

multi_factor

Vendor-Agnostic Two-Factor Authentication
PHP
142
star
18

gpg-mailer

GnuPG-encrypted emails made easy
PHP
95
star
19

pecl-libsodium-doc

Free Online Documentation for the Libsodium PHP Extension
88
star
20

corner

Exceptions and Errors made more user-friendly
PHP
61
star
21

hidden-string

The HiddenString class extracted from Halite.
PHP
58
star
22

ciphersweet-js

Searchable Encryption for Node.js projects
JavaScript
58
star
23

iaso

Powerful JSON Toolkit, includes a JSON parser immune to Hash-DoS attacks
PHP
51
star
24

paseto-io

Paseto Website
Twig
46
star
25

hpkp-builder

Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
PHP
41
star
26

seedspring

Seeded, Deterministic PRNG (based on AES-CTR instead of LCG)
PHP
40
star
27

easy-ecc

High-Level Usability Wrapper for PHPECC
PHP
39
star
28

passwdqc

Password/passphrase strength checking and enforcement (PHP port)
PHP
39
star
29

pharaoh

Utility to quickly and effectively diff two PHP Archives
PHP
37
star
30

libgossamer

Public Key Infrastructure without Certificate Authorities, for WordPress and Packagist
PHP
31
star
31

easydb-cache

EasyDB with Prepared Statement Caching
PHP
29
star
32

ionizer

Input Filter System for PHP Software
PHP
26
star
33

argon2-refiner

Generate Parameter Recommendations for Argon2id in PHP 7.3+
PHP
24
star
34

bsidesorl-2017

Supplementary Material for Building Defensible Solutions to Weird Problems
PHP
23
star
35

blakechain

Hash chains built with BLAKE2b
PHP
22
star
36

quill

Library for quickly and easily writing data to a Chronicle instance
PHP
21
star
37

stern

Stern lets you built type-safe PHP projects, even if your project's users aren't writing type-safe code
PHP
20
star
38

herd

Hash-Ensured Replicated Database
PHP
16
star
39

eloquent-ciphersweet

Bridge library between Eloquent ORM and CipherSweet
PHP
14
star
40

pco_prototype

PCO - PHP Crypto Objects
PHP
12
star
41

discretion

On-demand and reusable contact forms that only send GnuPG-encrypted messages to your inbox.
PHP
12
star
42

xchacha20-js

JavaScript implementation of ChaCha20, HChaCha20, and XChaCha20
JavaScript
11
star
43

slim-sapient

Slim Framework Adapter for Sapient
PHP
10
star
44

airship-docs

Documentation for CMS Airship
Nginx
10
star
45

paserk-php

PHP Implementation of PASERK
PHP
10
star
46

php-jwt-guard

Security Defense for Firebase's PHP-JWT Library
PHP
9
star
47

zend-diactoros-sapient

Zend Diactoros Adapter for Sapient
PHP
8
star
48

phone-to-pick

Whitelist Your Incoming Phone Calls (for Android)
Java
7
star
49

poly1305-js

JavaScript implementation of the Poly1305 one-time authenticator
JavaScript
5
star
50

gossamer-server

Standalone Gossamer server
PHP
4
star
51

paseto-browser.js

PASETO in the Web Browser
JavaScript
4
star
52

airship-barge

Build Gadgets for Airship projects (Command Line Interface)
PHP
3
star
53

monolog-quill

A Monolog Handler for writing to a Chronicle instance
PHP
3
star
54

sodium-jvm

Pure-Java implementation of the Sodium cryptography library.
3
star
55

blogpost-translations

Translations of Paragon Initiative Enterprise blog posts
2
star
56

ward-docs

Online Documentation for Ward (Web Application Realtime Defender)
2
star
57

php71_crypto

Pluggable Cryptography Interface for PHP 7.1
2
star
58

node-halite

High-level cryptography interface powered by node-sodium
1
star
59

ristretto-php

Implements a type-safe API for working with the Ristretto Group in PHP projects.
PHP
1
star
60

pie-hosted.com

Source code for the pie-hosted.com website
PHP
1
star
61

halite-legacy

Legacy versions of Halite to facilitate migrations from older ciphersuites to the latest supported version
PHP
1
star
62

certainty-js

Certainty-js: Automated CACert.pem Management for Node.js Software
JavaScript
1
star