paragonie/paseto
Platform-Agnostic Security Tokens
Maintainers
Requires
- php: ^8.1
- ext-gmp: *
- ext-json: *
- ext-openssl: *
- paragonie/constant_time_encoding: ^2.7|^3
- paragonie/corner: ^2
- paragonie/easy-ecc: ^1.3
- paragonie/sodium_compat: ^1|^2
- symfony/polyfill-php83: *
Requires (Dev)
- phpunit/phpunit: ^10
- vimeo/psalm: dev-master
Suggests
- ext-sodium: Better performance for PASETO v4, secure memory zeroing
- paragonie/paserk: Key serialization, key wrapping, canonical key identification
Provides
None
Conflicts
None
Replaces
None
ISC 872bf8446827dd4386844e16cd459966c9994749
- Paragon Initiative Enterprises <security.woop@paragonie.com>
This package is auto-updated.
Last update: 2026-06-19 06:54:54 UTC
README
👁 Build Status
👁 Latest Stable Version
👁 Latest Unstable Version
👁 License
👁 Downloads
Paseto (pɔːsɛtəʊ, paw-set-oh) is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.
This library is a reference implementation of PASETO in the PHP language. Please refer to the PASETO Specification for design considerations.
How to Use this Library
See the documentation.
The PASETO specification may also be useful for understanding why things are designed the way they are.
PASETO Extensions
PASERK
For key wrapping, serialization, and canonical identification, please see the PHP implementation of PASERK.
If you're not sure what that means, please refer to the PASERK specification.
Since PASERK is a PASETO extension, PASERK support is not automatically included with PASETO, but PASETO is bundled with PASERK.
Requirements
PHP PASETO Library Version 3
- Requires PHP 8.1 or newer.
- For v3 tokens, the GMP and OpenSSL extensions are required.
- For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
- PASETO Protocol versions:
v3,v4
PHP PASETO Library Version 2
- Requires PHP 7.1 or newer.
- For v3 tokens, the GMP and OpenSSL extensions are required.
- For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
- PASETO Protocol versions:
v1,v2,v3,v4
PHP PASETO Library Version 1
- Requires PHP 7.0 or newer.
- For v1 tokens, the OpenSSL extension is required.
- For v2 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
- PASETO Protocol versions:
v1,v2
Support Contracts
If your company uses this library in their products or services, you may be interested in purchasing a support contract from Paragon Initiative Enterprises.