Libsodium Extension als Alternative für entfernte Mcrypt Extension installieren (ab PHP 7.2)

pecl install libsodium

extension=sodium.so

<?php
if (extension_loaded("sodium")) {  
    $constants = get_defined_constants(true);
    var_dump([
        SODIUM_LIBRARY_VERSION,
        get_extension_funcs('sodium'),  
        $constants["sodium"]  
    ]);
} else {
    // sodium not found
}

$ php version_check.php
array(3) {
  =>
  string(6) "1.0.15"  
  [1]=>
  array(82) {
    =>
    string(41) "sodium_crypto_aead_aes256gcm_is_available"  
    [1]=>
    string(36) "sodium_crypto_aead_aes256gcm_decrypt"  
    [2]=>
    string(36) "sodium_crypto_aead_aes256gcm_encrypt"  
    [3]=>
    string(43) "sodium_crypto_aead_chacha20poly1305_decrypt"  
    [4]=>
    string(43) "sodium_crypto_aead_chacha20poly1305_encrypt"  
    [5]=>
    usw.
}

// Password hashing:
$hash_str = sodium_crypto_pwhash_str(
    $password,
    SODIUM_CRYPTO_PWHASH_OPSLIMIT_INTERACTIVE,
    SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE
);
// Password verification:
if (sodium_crypto_pwhash_str_verify($hash_str, $password)) {
    // recommended: wipe the plaintext password from memory
    sodium_memzero($password);
    
    // Password was valid.
} else {
    // recommended: wipe the plaintext password from memory
    sodium_memzero($password);
    
    // Password was invalid.
}

$key = sodium_randombytes_buf(SODIUM_CRYPTO_SECRETBOX_KEYBYTES);

// Using your key to encrypt information
$nonce = sodium_randombytes_buf(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
$ciphertext = sodium_crypto_secretbox('test', $nonce, $key);  

$plaintext = sodium_crypto_secretbox_open($ciphertext, $nonce, $key);
if ($plaintext === false) {
    throw new Exception("Bad ciphertext");  
}

$key = sodium_randombytes_buf(SODIUM_CRYPTO_AEAD_AES256GCM_KEYBYTES);
if (sodium_crypto_aead_aes256gcm_is_available()) {
    $nonce = sodium_randombytes_buf(SODIUM_CRYPTO_AEAD_AES256GCM_NPUBBYTES);
    $ad = 'Additional (public) data';  
    $ciphertext = sodium_crypto_aead_aes256gcm_encrypt(
        $message,
        $ad,
        $nonce,
        $key
    );
}

if (sodium_crypto_aead_aes256gcm_is_available()) {
    $decrypted = sodium_crypto_aead_aes256gcm_decrypt(
        $ciphertext,
        $ad,
        $nonce,
        $key
    );
    if ($decrypted === false) {
        throw new Exception("Bad ciphertext");  
    }
}