Since the drop of PHP 5.6 (see
request #12683), Tuleap can leverage the strict type feature of PHP.
Due to the sensitive nature of the operations handled, the internal cryptography API is a prime candidate to use it. Implicit type conversion does not mix well with cryptographic operations and specific type checks are already done to the public parts of the API so the risk of a breakage is limited.