Stdlib: ext/sodium AES-GCM, Ed25519 sign, secretstream (#15542, #15541, #15462)

[PurHur]

Summary

• Register sodium_crypto_aead_aes256gcm_* + is_available() with constants and FFI fallback (Stdlib: sodium_crypto_aead_aes256gcm_encrypt/decrypt missing — AES-GCM AEAD (ext/sodium/libsodium.c) #15542)
• Register full Ed25519 sodium_crypto_sign* family (keypair, sign/open, detached verify) (Stdlib: sodium_crypto_sign* missing — Ed25519 sign/open/detached API (ext/sodium/libsodium.c) #15541)
• Register sodium_crypto_secretstream_xchacha20poly1305_* with by-ref state via BuiltinByRefParams + VmSodiumSecretstream (Stdlib: sodium_crypto_secretstream_xchacha20poly1305_* missing — secretstream API (ext/sodium/libsodium.c) #15462)

PHP-in-PHP: all semantics in ext/sodium/ + VmSodium.php FFI; no new C runtime.

php-src reference: ext/sodium/libsodium.c

Test plan

./script/docker-exec.sh -- php bin/vm.php test/repro/maintainer_gap_sodium_aead_aes256gcm.php
# aead_aes256gcm_ok

./script/docker-exec.sh -- php bin/vm.php test/repro/maintainer_gap_sodium_crypto_sign.php
# sign_ok

./script/docker-exec.sh -- php bin/vm.php test/repro-maintainer/maintainer_gap_sodium_crypto_secretstream.php
# ok

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter "sodium_aead_aes256gcm|sodium_crypto_sign|sodium_crypto_secretstream"'
# OK (6 tests, 6 assertions)

Closes #15542
Closes #15541
Closes #15462

Made with Cursor