Requirements

PHP 8.4+
Laravel 12 or 13
ext-openssl, ext-hash and ext-mbstring (required)
ext-sodium (suggested) — only for EdDSA / Ed25519 signing, verification and key generation; enabled by default on modern PHP
A usable OpenSSL configuration (openssl.cnf) — only for RsaKey::generate() and EcKey::generate()
Runtime dependencies: Laravel and Symfony only, plus roundly-consulting/package-toolkit-for-laravel (the service-provider toolkit) — no third-party crypto library

Parity with the specs is proven by committed test vectors — RFC 4226, RFC 6238, RFC 4231, RFC 7515, RFC 7638, RFC 4648 and RFC 8032, plus the GCM specification’s AES-256 cases and Wycheproof’s AES-256-GCM corpus — rather than by any external JOSE, JWT, TOTP, WebAuthn or CBOR library.

Show your open-source love

This package is free and MIT-licensed. If it saves you time, a one-off donation or a Patreon membership keeps it maintained, tested and documented.

More ways to support, including crypto

By donating, you agree to our donation terms.

Support our open source work Join us on Patreon

Want this built into your product?

We integrate our packages into custom Laravel and AI builds. Tell us what you're working on and we'll reply within 48 hours.

Get a quote in 48 hours Browse all packages