Skip to content

Instantly share code, notes, and snippets.

@joshhartman

joshhartman/crypt.class.php

Last active November 25, 2022 10:10
Show Gist options
  • Save joshhartman/10342187 to your computer and use it in GitHub Desktop.
Save joshhartman/10342187 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. joshhartman revised this gist Sep 26, 2014. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions crypt.class.php
    View file
    Original file line number Diff line number Diff line change
    @@ -12,7 +12,7 @@ public function encrypt($encrypt){
    $encrypt = serialize($encrypt);
    $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_CBC), MCRYPT_DEV_URANDOM);
    $key = pack('H*', $this->key);
    $mac = hash_hmac('sha256', $encrypt, substr(bin2hex($key), -32));
    $mac = hash_hmac('sha256', $encrypt, substr($this->key, -32));
    $passcrypt = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $encrypt . $mac, MCRYPT_MODE_CBC, $iv);
    $encoded = base64_encode($passcrypt) . '|' . base64_encode($iv);
    return $encoded;
    @@ -27,7 +27,7 @@ public function decrypt($decrypt){
    $decrypted = trim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $decoded, MCRYPT_MODE_CBC, $iv));
    $mac = substr($decrypted, -64);
    $decrypted = substr($decrypted, 0, -64);
    $calcmac = hash_hmac('sha256', $decrypted, substr(bin2hex($key), -32));
    $calcmac = hash_hmac('sha256', $decrypted, substr($this->key, -32));
    if($calcmac !== $mac){
    return false;
    }
  2. joshhartman revised this gist Sep 26, 2014. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion crypt.class.php
    View file
    Original file line number Diff line number Diff line change
    @@ -19,7 +19,7 @@ public function encrypt($encrypt){
    }

    public function decrypt($decrypt){
    $decrypt = explode('|', $decrypt);
    $decrypt = explode('|', $decrypt.'|');
    $decoded = base64_decode($decrypt[0]);
    $iv = base64_decode($decrypt[1]);
    if(strlen($iv)!==mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_CBC)){ return false; }
  3. joshhartman revised this gist Jun 16, 2014. 1 changed file with 1 addition and 5 deletions.
    6 changes: 1 addition & 5 deletions crypt.class.php
    View file
    Original file line number Diff line number Diff line change
    @@ -5,11 +5,7 @@ class Crypt {
    private $key;

    function __construct($key){
    if(ctype_xdigit($key) && strlen($key) === 64){
    $this->key = $key;
    }else{
    trigger_error('Invalid key. Key must be a 32-byte (64 character) hexadecimal string.', E_USER_ERROR);
    }
    $this->setKey($key);
    }

    public function encrypt($encrypt){
  4. joshhartman revised this gist Jun 16, 2014. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions crypt.class.php
    View file
    Original file line number Diff line number Diff line change
    @@ -26,6 +26,7 @@ public function decrypt($decrypt){
    $decrypt = explode('|', $decrypt);
    $decoded = base64_decode($decrypt[0]);
    $iv = base64_decode($decrypt[1]);
    if(strlen($iv)!==mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_CBC)){ return false; }
    $key = pack('H*', $this->key);
    $decrypted = trim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $decoded, MCRYPT_MODE_CBC, $iv));
    $mac = substr($decrypted, -64);
  5. joshhartman created this gist Apr 10, 2014.
    71 changes: 71 additions & 0 deletions crypt.class.php
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,71 @@
    <?php

    class Crypt {

    private $key;

    function __construct($key){
    if(ctype_xdigit($key) && strlen($key) === 64){
    $this->key = $key;
    }else{
    trigger_error('Invalid key. Key must be a 32-byte (64 character) hexadecimal string.', E_USER_ERROR);
    }
    }

    public function encrypt($encrypt){
    $encrypt = serialize($encrypt);
    $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_CBC), MCRYPT_DEV_URANDOM);
    $key = pack('H*', $this->key);
    $mac = hash_hmac('sha256', $encrypt, substr(bin2hex($key), -32));
    $passcrypt = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $encrypt . $mac, MCRYPT_MODE_CBC, $iv);
    $encoded = base64_encode($passcrypt) . '|' . base64_encode($iv);
    return $encoded;
    }

    public function decrypt($decrypt){
    $decrypt = explode('|', $decrypt);
    $decoded = base64_decode($decrypt[0]);
    $iv = base64_decode($decrypt[1]);
    $key = pack('H*', $this->key);
    $decrypted = trim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $decoded, MCRYPT_MODE_CBC, $iv));
    $mac = substr($decrypted, -64);
    $decrypted = substr($decrypted, 0, -64);
    $calcmac = hash_hmac('sha256', $decrypted, substr(bin2hex($key), -32));
    if($calcmac !== $mac){
    return false;
    }
    $decrypted = unserialize($decrypted);
    return $decrypted;
    }

    public function setKey($key){
    if(ctype_xdigit($key) && strlen($key) === 64){
    $this->key = $key;
    }else{
    trigger_error('Invalid key. Key must be a 32-byte (64 character) hexadecimal string.', E_USER_ERROR);
    }
    }

    }

    $crypt = new Crypt('d0a7e7997b6d5fcd55f4b5c32611b87cd923e88837b63bf2941ef819dc8ca282');

    echo '<h1>Rijndael 256-bit CBC Encryption Function</h1>';

    $data = 'Super secret confidential string data.';
    $encrypted_data = $crypt->encrypt($data);
    echo '<h2>Example #1: String Data</h2>';
    echo 'Data to be Encrypted: ' . $data . '<br/>';
    echo 'Encrypted Data: ' . $encrypted_data . '<br/>';
    echo 'Decrypted Data: ' . $crypt->decrypt($encrypted_data) . '</br>';

    $data = array(1, 5, 8, new DateTime(), 22, 10, 61, array('apple' => array('red', 'green')));
    $encrypted_data = $crypt->encrypt($data);
    echo '<h2>Example #2: Non-String Data</h2>';
    echo 'Data to be Encrypted: <pre>';
    print_r($data);
    echo '</pre><br/>';
    echo 'Encrypted Data: ' . $encrypted_data . '<br/>';
    echo 'Decrypted Data: <pre>';
    print_r($crypt->decrypt($encrypted_data));
    echo '</pre>';