ParagonIE_Sodium_File::verify_core32( string $sig, string $filePath, string $publicKey ): bool

Compatibility

Present in every tracked release (6.7.7 to 7.1.0), and compiles on PHP 7.4 through 8.6-dev.

Parameters

$sigstring

Ed25519 signature

$filePathstring

Absolute path to a file on the filesystem

$publicKeystring

Signing public key

Return value

bool

Performance profile

How much work a call to ParagonIE_Sodium_File::verify_core32() does, and what it touches: the algorithmic scaling, the Zend instruction count per call across PHP versions, the hooks it hands control to, and the core code that calls it. Measured from the compiled opcodes, not a stopwatch, so every number is identical on any machine running the same PHP version, and every function in core is ranked by cost.

Cost class

Heavy

Reads or writes the filesystem via filesize().

Scaling

Scales with input

The body loops, so the work grows with what you pass in.

Instructions

16–120

Executed per call on PHP 8.5, depending on the branch taken. The body compiles to 151.

Plugin surface

None

Nothing here hands control to plugin code.

Called by

1

1 place in core call this, so the cost is paid more often than your own code shows.

What it touches

• filesystemfilesystem accessfilesize()called directly

What one call costs · 6 distinct outcomes

One number would be a lie: the work depends on which branch runs. These are every distinct cost ParagonIE_Sodium_File::verify_core32() can have, taken from its control-flow graph on PHP 8.5.

Uses · 12

• ParagonIE_Sodium_Core32_Ed25519::check_S_lt_L()
• ParagonIE_Sodium_File::substr()
• SodiumException::__construct()
• ParagonIE_Sodium_Core32_Ed25519::small_order()
• ParagonIE_Sodium_File::chrToInt()
• ParagonIE_Sodium_Core32_Ed25519::ge_frombytes_negate_vartime()
• ParagonIE_Sodium_File::hash_update()
• ParagonIE_Sodium_File::updateHashWithFile()Update a hash context with the contents of a file, without loading the entire file into memory.
• ParagonIE_Sodium_Core32_Ed25519::sc_reduce()
• ParagonIE_Sodium_Core32_Ed25519::ge_double_scalarmult_vartime()
• ParagonIE_Sodium_Core32_Ed25519::ge_tobytes()
• ParagonIE_Sodium_File::verify_32()

Used by · 1

• ParagonIE_Sodium_File::verify()Verify a file (rather than a string). Uses less memory than ParagonIE_Sodium_Compat::crypto_sign_verify_detached(), but produces the same result.

Source code

View on Trac ↗View on GitHub ↗

1291    public static function verify_core32($sig, $filePath, $publicKey)1292    {1293        /* Security checks */1294        if (ParagonIE_Sodium_Core32_Ed25519::check_S_lt_L(self::substr($sig, 32, 32))) {1295            throw new SodiumException('S < L - Invalid signature');1296        }1297        if (ParagonIE_Sodium_Core32_Ed25519::small_order($sig)) {1298            throw new SodiumException('Signature is on too small of an order');1299        }1300 1301        if ((self::chrToInt($sig[63]) & 224) !== 0) {1302            throw new SodiumException('Invalid signature');1303        }1304        $d = 0;1305        for ($i = 0; $i < 32; ++$i) {1306            $d |= self::chrToInt($publicKey[$i]);1307        }1308        if ($d === 0) {1309            throw new SodiumException('All zero public key');1310        }1311 1312        /** @var int|bool $size */1313        $size = filesize($filePath);1314        if (!is_int($size)) {1315            throw new SodiumException('Could not obtain the file size');1316        }1317        /** @var int $size */1318 1319        /** @var resource|bool $fp */1320        $fp = fopen($filePath, 'rb');1321        if (!is_resource($fp)) {1322            throw new SodiumException('Could not open input file for reading');1323        }1324        /** @var resource $fp */1325 1326        /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */1327        $orig = ParagonIE_Sodium_Compat::$fastMult;1328 1329        // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification.1330        ParagonIE_Sodium_Compat::$fastMult = true;1331 1332        /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */1333        $A = ParagonIE_Sodium_Core32_Ed25519::ge_frombytes_negate_vartime($publicKey);1334 1335        $hs = hash_init('sha512');1336        self::hash_update($hs, self::substr($sig, 0, 32));1337        self::hash_update($hs, self::substr($publicKey, 0, 32));1338        /** @var resource $hs */1339        $hs = self::updateHashWithFile($hs, $fp, $size);1340        /** @var string $hDigest */1341        $hDigest = hash_final($hs, true);1342 1343        /** @var string $h */1344        $h = ParagonIE_Sodium_Core32_Ed25519::sc_reduce($hDigest) . self::substr($hDigest, 32);1345 1346        /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */1347        $R = ParagonIE_Sodium_Core32_Ed25519::ge_double_scalarmult_vartime(1348            $h,1349            $A,1350            self::substr($sig, 32)1351        );1352 1353        /** @var string $rcheck */1354        $rcheck = ParagonIE_Sodium_Core32_Ed25519::ge_tobytes($R);1355 1356        // Close the file handle1357        fclose($fp);1358 1359        // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before.1360        ParagonIE_Sodium_Compat::$fastMult = $orig;1361        return self::verify_32($rcheck, self::substr($sig, 0, 32));1362    }

Changelog

Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.1.0 tag, from src/wp-includes/sodium_compat/src/File.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.