ldap_servers.encryption.inc in Lightweight Directory Access Protocol (LDAP) 7

Provides functions for encryption/decryption. http://stackoverflow.com/questions/2448256/php-mcrypt-encrypting-decrypt...

File

ldap_servers/ldap_servers.encryption.inc

<?php

// $Id: ldap_servers.encryption.inc,v 1.3.2.1 2011/02/08 06:01:00 johnbarclay Exp $

/**
 * @file
 * Provides functions for encryption/decryption.
 * http://stackoverflow.com/questions/2448256/php-mcrypt-encrypting-decrypting-file
 */
define('LDAP_SERVERS_MODE', 'CTR');

/**
 * Return a random salt of a given length for crypt-style passwords
 *
 * @param int length
 *   The requested length.
 *
 * @return string
 *   A (fairly) random salt of the requested length.
 *
 */
function ldap_servers_random_salt($length) {
  $possible = '0123456789' . 'abcdefghijklmnopqrstuvwxyz' . 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' . './';
  $salt = "";
  mt_srand((double) microtime() * 1000000);
  while (strlen($salt) < $length) {
    $salt .= substr($possible, rand() % strlen($possible), 1);
  }
  return $salt;
}
function _ldap_servers_encrypt_types($type = 'all') {
  $hashes = array();
  $encrypts = array();
  if (extension_loaded('mcrypt')) {

    // only support with extension

    /**
      LDAP_SERVERS_ENC_TYPE_MD5C => 'MD5 Crypt',
      LDAP_SERVERS_ENC_TYPE_SALTED_MD5 => 'Salted MD5',
      LDAP_SERVERS_ENC_TYPE_SHA => 'SHA',
      LDAP_SERVERS_ENC_TYPE_SALTED_SHA => 'SHA Salted',
    );
    */

    /** $encrypts = array(
          LDAP_SERVERS_ENC_TYPE_EXTENDED_DES => 'Extended DES',
          LDAP_SERVERS_ENC_TYPE_BLOWFISH => 'Blowfish',
          LDAP_SERVERS_ENC_TYPE_SALTED_CRYPT => 'Salted Crypt',
        ); */
    $encrypts = array(
      LDAP_SERVERS_ENC_TYPE_CLEARTEXT => 'No Encyption',
      LDAP_SERVERS_ENC_TYPE_BLOWFISH => 'Blowfish',
    );
  }

  // $hashes[LDAP_SERVERS_ENC_TYPE_MD5] = 'MD5';
  //  $encrypts[LDAP_SERVERS_ENC_TYPE_CRYPT] = 'Crypt';
  if ($type == 'encrypt') {
    return $encrypts;
  }
  if ($type == 'hash') {
    return $hashes;
  }
  return array_merge($hashes, $encrypts);
}

/**
 * Encrypt Password Method
 *
 * @param string clear_txt
 *   Plaintext password.
 *
 * @return string
 *   Encrypted text, formatted for use as an LDAP password.
 *
 */
function _ldap_servers_encrypt($clear_txt, $enc_type = NULL) {
  if (!$enc_type) {
    $enc_type = variable_get('ldap_servers_encryption', LDAP_SERVERS_ENC_TYPE_CLEARTEXT);
  }
  if ($enc_type == LDAP_SERVERS_ENC_TYPE_CLEARTEXT) {
    return $clear_txt;
  }
  if (!($key = variable_get('ldap_servers_encrypt_key', NULL))) {
    $key = ldap_servers_random_salt(10);
    variable_set('ldap_servers_encrypt_key', $key);
  }
  switch ($enc_type) {
    case LDAP_SERVERS_ENC_TYPE_BLOWFISH:

      // Blowfish
      $td = mcrypt_module_open('blowfish', '', LDAP_SERVERS_CYPHER_MODE, '');
      $iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_RAND);
      mcrypt_generic_init($td, $key, $iv);
      $crypttext = mcrypt_generic($td, $clear_txt);
      mcrypt_generic_deinit($td);
      $cipher_txt = $iv . $crypttext;
      break;
    default:

      // Cleartext
      $cipher_txt = $clear_txt;
  }
  return base64_encode($cipher_txt);
}

/**
 * Encrypt Decrypt Method
 *
 * @param string $cipher_txt
 *   ciphered text.
 *
 * @return string
 *   clear text
 *
 * http://stackoverflow.com/questions/2448256/php-mcrypt-encrypting-decrypting-file
 */
function _ldap_servers_decrypt($cipher_txt, $enc_type = NULL) {
  $key = variable_get('ldap_servers_encrypt_key', NULL);
  if (!$enc_type) {
    $enc_type = variable_get('ldap_servers_encryption', LDAP_SERVERS_ENC_TYPE_CLEARTEXT);
  }
  if ($enc_type == LDAP_SERVERS_ENC_TYPE_CLEARTEXT) {
    return $cipher_txt;
  }
  $cipher_txt = base64_decode($cipher_txt);
  switch ($enc_type) {
    case LDAP_SERVERS_ENC_TYPE_BLOWFISH:

      // Blowfish
      $clear_txt = "";
      $td = mcrypt_module_open('blowfish', '', LDAP_SERVERS_CYPHER_MODE, '');
      $ivsize = mcrypt_enc_get_iv_size($td);
      $iv = substr($cipher_txt, 0, $ivsize);
      $cipher_txt = substr($cipher_txt, $ivsize);
      if ($iv) {
        mcrypt_generic_init($td, $key, $iv);
        $clear_txt = mdecrypt_generic($td, $cipher_txt);
      }
      break;
    default:

      // Cleartext
      $clear_txt = $cipher_txt;
  }
  return $clear_txt;
}

Functions

Name	Description
ldap_servers_random_salt	Return a random salt of a given length for crypt-style passwords
_ldap_servers_decrypt	Encrypt Decrypt Method
_ldap_servers_encrypt	Encrypt Password Method
_ldap_servers_encrypt_types

Constants

Name	Description
LDAP_SERVERS_MODE	@file Provides functions for encryption/decryption. http://stackoverflow.com/questions/2448256/php-mcrypt-encrypting-decrypt...