PHPackages                             picodexter/parameter-encryption-bundle - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. picodexter/parameter-encryption-bundle

AbandonedArchivedSymfony-bundle[Security](/categories/security)

picodexter/parameter-encryption-bundle
======================================

Symfony PcdxParameterEncryptionBundle

v1.2.0(7y ago)14023MITPHPPHP ^7.1

Since Jun 21Pushed 5y ago1 watchersCompare

[ Source](https://github.com/picodexter/PcdxParameterEncryptionBundle)[ Packagist](https://packagist.org/packages/picodexter/parameter-encryption-bundle)[ Docs](https://picodexter.io/)[ RSS](/packages/picodexter-parameter-encryption-bundle/feed)WikiDiscussions master Synced 6d ago

READMEChangelog (6)Dependencies (5)Versions (8)Used By (3)

PcdxParameterEncryptionBundle
=============================

[](#pcdxparameterencryptionbundle)

DEPRECATION WARNING!
--------------------

[](#deprecation-warning)

### THIS BUNDLE IS NOW DEPRECATED / ABANDONED

[](#this-bundle-is-now-deprecated--abandoned)

The [Symfony Secrets management](https://symfony.com/doc/current/configuration/secrets.html)that was introduced with Symfony 4.4 offers an official solution for the original purpose of this bundle.

Please refer to it instead.

Active development on this project has therefore been stopped.

END OF DEPRECATION WARNING
--------------------------

[](#end-of-deprecation-warning)

This bundle lets you save Symfony parameters in an encrypted form and automatically decrypt them during runtime.

[![Latest Stable Version](https://camo.githubusercontent.com/a63c440101c7f5509dbb69e77663d4235f16f50eb890dc5980b5fc5b30687aac/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f7069636f6465787465722f706172616d657465722d656e6372797074696f6e2d62756e646c652e7376673f7374796c653d666c6174)](https://packagist.org/packages/picodexter/parameter-encryption-bundle)[![Build Status](https://camo.githubusercontent.com/052b1f9209318557298fa713f9f5bffb2ce63b4d8ecc8ad5e0c9602db38a4c99/68747470733a2f2f696d672e736869656c64732e696f2f7472617669732f7069636f6465787465722f50636478506172616d65746572456e6372797074696f6e42756e646c652f6d61737465722e7376673f7374796c653d666c6174)](https://travis-ci.org/picodexter/PcdxParameterEncryptionBundle)[![Code Coverage](https://camo.githubusercontent.com/69f165584c5f6e565313799f5bb4168eb8d6ca9bada6d629d4ed7fba7d607757/68747470733a2f2f696d672e736869656c64732e696f2f636f766572616c6c732f7069636f6465787465722f50636478506172616d65746572456e6372797074696f6e42756e646c652f6d61737465722e7376673f7374796c653d666c6174)](https://coveralls.io/github/picodexter/PcdxParameterEncryptionBundle)

Purpose
-------

[](#purpose)

### What It Does

[](#what-it-does)

This bundle allows developers to save sensitive information in Symfony parameters in an encrypted form so that it can be committed to a VCS. The only remaining sensitive information, the decryption key, could then be saved in an unversioned `parameters.yml` file or simply passed in an environment variable.

Through this approach you can easily keep all stage-specific configuration files in the VCS and use a switch mechanism to detect which one to load. This helps you keep the number of stage-specific (automatically) deployed but unversioned files to an absolute minimum.

### What It Does Not Do

[](#what-it-does-not-do)

The intention is **not** to provide security in a way that an attacker with access to the webspace file system wouldn't be able to decrypt the parameters.

The PHP process needs to read both the encrypted data as well as the decryption key(s), be it in the file system or in memory as an environment variable. Someone who manages to infiltrate the process therefore automatically gains relevant read access to both pieces of information as well.

Additionally, anyone who can read the Symfony application cache would be able to extract the dumped container including all decrypted parameters anyway.

Features
--------

[](#features)

- Provides encryption for Symfony parameters
- Does not impact overall application performance when container is cached
- Allows defining keys in base64 encoded format to support binary values
- Allows generating keys with PBKDF2
- Allows specifying multiple algorithm configurations to enable usage of different methods of encryption in the same application
- Modular approach to harness encryption ciphers from reputable third-party Composer packages
- Highly configurable
- Highly extensible (custom encrypters, decrypters, key transformers, ...)
- 100% code coverage

Furthermore, this bundle comes with the following ciphers out-of-the-box:

### Symmetric Ciphers

[](#symmetric-ciphers)

- Caesar

Documentation
-------------

[](#documentation)

The documentation source files are located in the `Resources/doc/` directory of this bundle.

Installation
------------

[](#installation)

Please refer to the [Getting Started guide](Resources/doc/getting-started.rst).

License
-------

[](#license)

This bundle is released under the [MIT license](LICENSE).

Authors
-------

[](#authors)

- picodexter | [GitHub](https://github.com/picodexter) | [picodexter.io](https://picodexter.io/)

See also the [list of contributors](https://github.com/picodexter/PcdxParameterEncryptionBundle/contributors).

Contributing
------------

[](#contributing)

The official project repository with the issue tracker can be found [on GitHub](https://github.com/picodexter/PcdxParameterEncryptionBundle).

Please refer to the [contributing document](CONTRIBUTING.md).

###  Health Score

30

—

LowBetter than 64% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity14

Limited adoption so far

Community12

Small or concentrated contributor base

Maturity63

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~114 days

Recently: every ~139 days

Total

6

Last Release

2680d ago

PHP version history (2 changes)v1.0.0PHP ^5.6 || ^7.0

v1.2.0PHP ^7.1

### Community

Maintainers

![](https://www.gravatar.com/avatar/38d9015cb09a132c68207e6dc0d9bfbb45f3603f65f079c2769f3864d216785b?d=identicon)[picodexter](/maintainers/picodexter)

---

Top Contributors

[![picodexter](https://avatars.githubusercontent.com/u/10298266?v=4)](https://github.com/picodexter "picodexter (429 commits)")

---

Tags

bundlecryptodecryptionencryptionparameterssymfonysymfony-bundlesymfony2symfony2-bundlesymfony3symfony3-bundleconfigencryptionparameter

###  Code Quality

TestsPHPUnit

Code StylePHP CS Fixer

### Embed Badge

![Health badge](/badges/picodexter-parameter-encryption-bundle/health.svg)

```
[![Health](https://phpackages.com/badges/picodexter-parameter-encryption-bundle/health.svg)](https://phpackages.com/packages/picodexter-parameter-encryption-bundle)
```

###  Alternatives

[phpseclib/phpseclib

PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.

5.6k434.8M1.3k](/packages/phpseclib-phpseclib)[defuse/php-encryption

Secure PHP Encryption Library

3.9k162.4M214](/packages/defuse-php-encryption)[nzo/url-encryptor-bundle

The NzoUrlEncryptorBundle is a Symfony Bundle used to Encrypt and Decrypt data and variables in the Web application or passed through URL

961.0M2](/packages/nzo-url-encryptor-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
