class LockrAesCbcKeyWrapper in Lockr 7.3

Hierarchy

• class \Lockr\KeyWrapper\LockrAesCbcKeyWrapper implements KeyWrapperInterface

1 file declares its use of LockrAesCbcKeyWrapper

LockrAesCbcKeyWrapperTest.php in vendor/lockr/lockr/tests/KeyWrapper/LockrAesCbcKeyWrapperTest.php

File

vendor/lockr/lockr/src/KeyWrapper/LockrAesCbcKeyWrapper.php, line 4

Namespace

Lockr\KeyWrapper

class LockrAesCbcKeyWrapper implements KeyWrapperInterface {
  const CIPHER = MCRYPT_RIJNDAEL_256;
  const MODE = MCRYPT_MODE_CBC;

  /**
   * {@inheritdoc}
   */
  public static function enabled() {
    return function_exists('mcrypt_encrypt') && function_exists('openssl_encrypt');
  }

  /**
   * {@inheritdoc}
   */
  public static function encrypt($plaintext, $key = null) {
    if (is_null($key)) {
      $key = openssl_random_pseudo_bytes(32);
    }
    $iv_len = mcrypt_get_iv_size(self::CIPHER, self::MODE);
    $iv = mcrypt_create_iv($iv_len);
    $ciphertext = mcrypt_encrypt(self::CIPHER, $key, $plaintext, self::MODE, $iv);
    $ciphertext = base64_encode($ciphertext);
    $wrapping_key = self::encode(self::CIPHER, self::MODE, $iv, $key);
    return [
      'ciphertext' => $ciphertext,
      'encoded' => $wrapping_key,
    ];
  }

  /**
   * {@inheritdoc}
   */
  public static function reencrypt($plaintext, $wrapping_key) {
    $parts = self::decode($wrapping_key);
    if (!$parts) {
      return false;
    }
    list($cipher, $mode, $iv, $key) = $parts;
    $ciphertext = mcrypt_encrypt($cipher, $key, $plaintext, $mode, $iv);
    $ciphertext = base64_encode($ciphertext);
    return [
      'ciphertext' => $ciphertext,
      'encoded' => $wrapping_key,
    ];
  }

  /**
   * {@inheritdoc}
   */
  public static function decrypt($ciphertext, $wrapping_key) {
    $parts = self::decode($wrapping_key);
    if (!$parts) {
      return false;
    }
    list($cipher, $mode, $iv, $key) = $parts;
    $ciphertext = base64_decode($ciphertext);
    $plaintext = mcrypt_decrypt($cipher, $key, $ciphertext, $mode, $iv);
    if ($plaintext === false) {
      return false;
    }
    return trim($plaintext);
  }
  private static function encode($cipher, $mode, $iv, $key) {
    $parts = [
      $cipher,
      $mode,
      base64_encode($iv),
      base64_encode($key),
    ];
    return implode('$', $parts);
  }
  private static function decode($wrapping_key) {
    $parts = explode('$', $wrapping_key, 4);
    if (!$parts || count($parts) != 4) {
      return false;
    }
    list($cipher, $mode, $iv, $key) = $parts;
    $iv = base64_decode($iv);
    $key = base64_decode($key);
    return [
      $cipher,
      $mode,
      $iv,
      $key,
    ];
  }

}

Members

Name	Modifiers	Type	Description	Overrides
LockrAesCbcKeyWrapper::CIPHER		constant
LockrAesCbcKeyWrapper::decode	private static	function
LockrAesCbcKeyWrapper::decrypt	public static	function	Decrypt the given ciphertext. Overrides KeyWrapperInterface::decrypt
LockrAesCbcKeyWrapper::enabled	public static	function	Overrides KeyWrapperInterface::enabled
LockrAesCbcKeyWrapper::encode	private static	function
LockrAesCbcKeyWrapper::encrypt	public static	function	Encrypt the given plaintext. Overrides KeyWrapperInterface::encrypt
LockrAesCbcKeyWrapper::MODE		constant
LockrAesCbcKeyWrapper::reencrypt	public static	function	Encrypt the given plaintext reusing state. Overrides KeyWrapperInterface::reencrypt