noxlogic/oprf

Oblivious Pseudorandom Function (OPRF) library for PHP, based on RFC 9497

v0.9.0 2026-05-04 10:37 UTC

Requires

• php: >=8.2
• ext-sodium: *
• web-token/jwt-framework: ^4.1

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3.95
• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^11.0

MIT

• Joshua Thijssen

• cryptography
• oprf
• voprf
• rfc9497
• ristretto255
• pseudonym

README

PHP implementation of the Oblivious Pseudorandom Function (OPRF) protocol, base mode, as defined in RFC 9497 using the ristretto255-SHA-512 suite.

Compatible with liboprf.

Requirements

• PHP 8.2 or higher
• ext-sodium (libsodium ≥ 1.0.18)

Installation

composer require noxlogic/oprf

Usage

Client side

use Noxlogic\Oprf\OprfClient;

$client = new OprfClient();

// Step 1 - blind the input and send $result->blindedElement to the server
$result = $client->blind($input);

// Step 3 - unblind the server's response and compute the pseudonym
$pseudonym = $client->finalize($input, $result->blind, $evaluatedElement);

Server side

use Noxlogic\Oprf\OprfServer;

$server = new OprfServer();

// Generate and store a long-lived key
$key = $server->generateKey();

// Step 2 - evaluate the blinded element received from the client
$evaluatedElement = $server->evaluate($key, $blindedElement);

Full round-trip

$client = new OprfClient();
$server = new OprfServer();
$key    = $server->generateKey();

$blind     = $client->blind('my-input');
$evaluated = $server->evaluate($key, $blind->blindedElement);
$pseudonym = $client->finalize('my-input', $blind->blind, $evaluated);

The pseudonym is deterministic: the same input and server key always produce the same output, regardless of the random blind scalar chosen during blind().

Development

composer test      # run PHPUnit
composer cs        # check code style
composer cs:fix    # fix code style
composer stan      # run PHPStan (level 8)
composer ci        # run all of the above

License

MIT - see LICENSE.