# xmlseclibs 4.0

A new major version of xmlseclibs, a PHP library for XML Security, with safe defaults when it checks signatures.

Its cryptography now runs on phpseclib, with RSA-PSS support. A new verifyDocument() method pins the key and allows only listed algorithms. Several unsafe inputs are now rejected by default, and a legacy mode helps while peers migrate.

- Made by: [Rob Richards](https://github.com/robrichards)
- Shipped: 08/08/2026
- Date from: [release](https://github.com/robrichards/xmlseclibs/releases/tag/4.0.0)
- Source: [github.com/robrichards/xmlseclibs](https://github.com/robrichards/xmlseclibs)
- Install: `composer require robrichards/xmlseclibs`
- Licence: BSD-3-Clause
- Stack: plain PHP
- Topics: Security
- Checked: 28/10/2026
- Added: 28/10/2026

## Badge

Listed here? Add this badge to your README:

```markdown
[![Featured on phplives.dev](https://phplives.dev/badge.svg)](https://phplives.dev/entries/xmlseclibs-4-0/)
```

See more at [phplives.dev](https://phplives.dev)