Skip to content

Conversation

tscni
Copy link
Contributor

@tscni tscni commented Sep 27, 2025

Target branch: 4.1.x

  • It is a Bug fix
  • It is a New feature
  • It is related to dependencies

Includes:

  • Breaks BC
  • Deprecations

Base64UrlSafe has potential for significant performance improvements by using ext-sodium. This in turn improves JWT decoding performance.

These adjustments are only applying the changes made in paragonie/constant_time_encoding between 2.6.3 and 2.8.2. It's essentially a dependency update.
See: https://github.com/paragonie/constant_time_encoding/compare/v2.6.3..v2.8.2, paragonie/constant_time_encoding#61

Side effects from the direct application of all changes up to 2.8.2 include:

  • Adding #[SensitiveParameter]
  • Adding use function statements for existing PHP function usages
  • A logic change in decodeNoPadding()

@tscni tscni force-pushed the base64-performance branch from ce138fc to 5af2498 Compare September 27, 2025 14:23
These adjustments are only applying the changes made in paragonie/constant_time_encoding between 2.6.3 and 2.8.2
See: https://github.com/paragonie/constant_time_encoding/compare/v2.6.3..v2.8.2
@tscni tscni force-pushed the base64-performance branch from 5af2498 to 2d93c73 Compare September 27, 2025 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant