Stdlib: sodium_crypto_sign* missing — Ed25519 sign/open/detached API (ext/sodium/libsodium.c)

[PurHur]

Category

stdlib · php-src-strict · missing ext/sodium Ed25519 signing builtins

Problem

The Ed25519 signing family (sodium_crypto_sign_keypair, sodium_crypto_sign, sodium_crypto_sign_open, sodium_crypto_sign_detached, sodium_crypto_sign_verify_detached, sodium_crypto_sign_publickey_from_secretkey, sodium_crypto_sign_secretkey, sodium_crypto_sign_publickey) is registered on reference Zend with ext/sodium but missing on the VM (function_exists false for all).

Verified 2026-07-03 on master.

php-src reference

• php/php-src ext/sodium/libsodium.c — Ed25519 sign/open/detached helpers
• php/php-src ext/sodium/libsodium.stub.php

PHP implementation target

• ext/sodium/sodium_crypto_sign*.php — libsodium FFI via existing VmSodium / JitSodium patterns
• Register in ext/sodium/Module.php; constants SODIUM_CRYPTO_SIGN_* if not already present
• PHP-in-PHP first; thin FFI only

Repro (verified 2026-07-03)

./script/docker-exec.sh -- php bin/vm.php test/repro/maintainer_gap_sodium_crypto_sign.php
# fail: sodium_crypto_sign_keypair not registered (exit 1)

Repro: test/repro/maintainer_gap_sodium_crypto_sign.php

Related: #3438 (umbrella ext/sodium), recent sodium box/scalarmult issues.

Done when

• All eight sign-family functions registered when ext/sodium loaded
• Detached verify rejects tampered message/signature like Zend
• sodium_crypto_sign_open() returns false on bad signature
• Repro exits 0; targeted compliance guard

[PurHur]

claim: PHP Compiler STD Lib Advanced — batch (issues #15542, #15541, #15462)

[PurHur]

Merged in #15577. VM repro + compliance green:

php bin/vm.php test/repro/maintainer_gap_sodium_aead_aes256gcm.php  # aead_aes256gcm_ok
php bin/vm.php test/repro/maintainer_gap_sodium_crypto_sign.php      # sign_ok
php bin/vm.php test/repro-maintainer/maintainer_gap_sodium_crypto_secretstream.php  # ok
vendor/bin/phpunit --filter 'sodium_aead_aes256gcm|sodium_crypto_sign|sodium_crypto_secretstream'  # OK (6 tests)