use spomky-labs/php-aes-gcm (thanks @Spomky-Labs)

instead of the bigger spomky-labs/jose

Author: Minishlink

README.md

@@ -9,8 +9,6 @@
 
 If you have a PHP version smaller than 5.5.9, you will not be able to send any payload.
 
-If you have a PHP version smaller than 7.1, you will have to `composer require spomky-labs/jose:2.0.x-dev`.
-
 ## Usage
 WebPush can be used to send notifications to endpoints which server delivers web push notifications as described in 
 the [Web Push protocol](https://tools.ietf.org/html/draft-thomson-webpush-protocol-00).
@@ -177,7 +175,7 @@ using the user public key and authentication secret that you can get by followin
 Internally, WebPush uses the [phpecc](https://github.com/phpecc/phpecc) Elliptic Curve Cryptography library to create 
 local public and private keys and compute the shared secret.
 Then, if you have a PHP >= 7.1, WebPush uses `openssl` in order to encrypt the payload with the encryption key.
-It uses [jose](https://github.com/Spomky-Labs/jose) if you have PHP < 7.1, which is slower.
+Otherwise, it uses [Spomky-Labs/php-aes-gcm](https://github.com/Spomky-Labs/php-aes-gcm) if you have PHP < 7.1, which is slower.
 
 ### How to solve "SSL certificate problem: unable to get local issuer certificate" ?
 Your installation lacks some certificates.

composer.json

@@ -17,14 +17,11 @@
     "kriswallsmith/buzz": ">=0.6",
     "mdanter/ecc": "^0.3.0",
     "lib-openssl": "*",
-    "spomky-labs/base64url": "^1.0"
+    "spomky-labs/base64url": "^1.0",
+    "spomky-labs/php-aes-gcm": "^1.0"
   },
   "require-dev": {
-    "phpunit/phpunit": "4.8.*",
-    "spomky-labs/jose": "2.0.x-dev"
-  },
-  "suggest": {
-    "spomky-labs/jose:2.0.x-dev": "Payload support if you have 5.5.9 <= PHP version < 7.1"
+    "phpunit/phpunit": "4.8.*"
   },
   "autoload": {
     "psr-4" : {

src/Encryption.php

@@ -84,7 +84,7 @@ public static function encrypt($payload, $userPublicKey, $userAuthToken, $native
         // encrypt
         // "The additional data passed to each invocation of AEAD_AES_128_GCM is a zero-length octet sequence."
         if (!$nativeEncryption) {
-            list($encryptedText, $tag) = \Jose\Util\GCM::encrypt($contentEncryptionKey, $nonce, $payload, "");
+            list($encryptedText, $tag) = \AESGCM\AESGCM::encrypt($contentEncryptionKey, $nonce, $payload, "");
         } else {
             $encryptedText = openssl_encrypt($payload, 'aes-128-gcm', $contentEncryptionKey, OPENSSL_RAW_DATA, $nonce, $tag); // base 64 encoded
         }