ParagonIE_Sodium_Compat::crypto_aead_aes256gcm_decrypt( string $ciphertext = '', string $assocData = '', string $nonce = '', string $key = '' ): string|bool

593    public static function crypto_aead_aes256gcm_decrypt(594        $ciphertext = '',595        $assocData = '',596        $nonce = '',597        #[\SensitiveParameter]598        $key = ''599    ) {600        if (!self::crypto_aead_aes256gcm_is_available()) {601            throw new SodiumException('AES-256-GCM is not available');602        }603        ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1);604        ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2);605        ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3);606        ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4);607 608        /* Input validation: */609        if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_AES256GCM_NPUBBYTES) {610            throw new SodiumException('Nonce must be CRYPTO_AEAD_AES256GCM_NPUBBYTES long');611        }612        if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_AES256GCM_KEYBYTES) {613            throw new SodiumException('Key must be CRYPTO_AEAD_AES256GCM_KEYBYTES long');614        }615        if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_AEAD_AES256GCM_ABYTES) {616            throw new SodiumException('Message must be at least CRYPTO_AEAD_AES256GCM_ABYTES long');617        }618        if (!is_callable('openssl_decrypt')) {619            throw new SodiumException('The OpenSSL extension is not installed, or openssl_decrypt() is not available');620        }621 622        /** @var string $ctext */623        $ctext = ParagonIE_Sodium_Core_Util::substr($ciphertext, 0, -self::CRYPTO_AEAD_AES256GCM_ABYTES);624        /** @var string $authTag */625        $authTag = ParagonIE_Sodium_Core_Util::substr($ciphertext, -self::CRYPTO_AEAD_AES256GCM_ABYTES, 16);626        return openssl_decrypt(627            $ctext,628            'aes-256-gcm',629            $key,630            OPENSSL_RAW_DATA,631            $nonce,632            $authTag,633            $assocData634        );635    }