PHP Manual: Verifies that the tag is valid for the message

Description

bool sodium_crypto_auth_verify(string $mac, string $message, #[\SensitiveParameter]string $key)

Verify the authentication tag is valid for a given message and key.

Unlike with digital signatures (e.g. sodium_crypto_sign_verify_detached), any party capable of verifying a message is also capable of authenticating their own messages. (Hence, symmetric authentication.)

Parameters

mac: Authentication tag produced by sodium_crypto_auth
message: Message
key: Authentication key

Return Values

Returns true on success or false on failure.