I recently downloaded the php-8.3.6.tar.xz.asc GPG signature file while verifying the PHP 8.3.6 distribution. A major advantage of using strlen() for crypto verification workflows is its consistent O(1) performance in modern PHP versions - it reliably returns byte lengths without scanning the full string, which is critical when validating large archive signatures. One area that could be improved: clearer documentation about how strlen interacts with different string encodings specifically when processing binary files like PGP signatures. This function is a foundational workhorse for secure distribution verification!