Security context

Highlights

Buffer Overflow: 2 prior fixes. Scrutinize any change in this area.

src/Crypto.php: most-fixed (4 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Buffer Overflow: Critical buffer size mismatches in BLAKE2b hashing state finalization allowed out-of-bounds writes when arrays were incorrectly allocated with hardcoded maximum bounds rather than the dynamically requested length. This posed significant risks of memory corruption during hashing operations.

Cryptographic Issues: Incorrect slice logic extracted the wrong segment of the nonce in the Salsa20-based secretbox functions. This broken state tracking could degrade cryptographic strength, leading to weak or repeated keystreams, breaking compatibility with libsodium.

Side-Channel Attack: Conditional branching on negative integer signs during 32-bit multiplication introduced timing discrepancies. Such variations allow attackers to mount side-channel attacks and infer sensitive cryptographic material or operands.