vendor/nzo/url-encryptor-bundle/Encryptor/Encryptor.php line 72

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the NzoUrlEncryptorBundle package.
  5.  *
  6.  * (c) Ala Eddine Khefifi <alakfpro@gmail.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Nzo\UrlEncryptorBundle\Encryptor;
  14. class Encryptor
  15. {
  16.     private const HASH_ALGORITHM = 'sha256';
  18.     private $secretKey;
  19.     private $cipherAlgorithm;
  20.     private $base64Encode;
  21.     private $formatBase64Output;
  22.     private $randomPseudoBytes;
  23.     private $iv;
  25.     public function __construct(
  26.         string $secretKey,
  27.         string $cipherAlgorithm,
  28.         bool $base64Encode,
  29.         bool $formatBase64Output,
  30.         bool $randomPseudoBytes
  31.     ) {
  32.         $this->secretKey = $secretKey;
  33.         $this->cipherAlgorithm = $cipherAlgorithm;
  34.         $this->base64Encode = $base64Encode;
  35.         $this->formatBase64Output = $formatBase64Output;
  36.         $this->randomPseudoBytes = $randomPseudoBytes;
  37.     }
  39.     /**
  40.      * @param string $secretIv
  41.      */
  42.     public function setSecretIv($secretIv)
  43.     {
  44.         $ivLength = openssl_cipher_iv_length($this->cipherAlgorithm);
  45.         $secretIv = $this->randomPseudoBytes ? openssl_random_pseudo_bytes($ivLength) : $secretIv;
  47.         $this->iv = substr(
  48.             hash_hmac(self::HASH_ALGORITHM, $secretIv, $this->secretKey, true),
  49.             0,
  50.             $ivLength
  51.         );
  52.     }
  54.     /**
  55.      * @param string $plainText
  56.      *
  57.      * @return string
  58.      */
  59.     public function encrypt($plainText)
  60.     {
  61.         $encrypted = openssl_encrypt($plainText, $this->cipherAlgorithm, $this->secretKey, OPENSSL_RAW_DATA, $this->iv);
  62.         $encrypted = $this->iv . $encrypted;
  64.         return $this->base64Encode ? $this->base64Encode($encrypted) : $encrypted;
  65.     }
  67.     /**
  68.      * @param string $encrypted
  69.      *
  70.      * @return string
  71.      */
  72.     public function decrypt($encrypted)
  73.     {
  74.         $ivLength = openssl_cipher_iv_length($this->cipherAlgorithm);
  75.         $encrypted = $this->base64Encode ? $this->base64Decode($encrypted) : $encrypted;
  76.         $iv = substr($encrypted, 0, $ivLength);
  77.         $raw = substr($encrypted, $ivLength);
  79.         $decrypted = openssl_decrypt(
  80.             $raw,
  81.             $this->cipherAlgorithm,
  82.             $this->secretKey,
  83.             OPENSSL_RAW_DATA,
  84.             $iv
  85.         );
  87.         return trim($decrypted);
  88.     }
  90.     /**
  91.      * @param string $data
  92.      *
  93.      * @return string
  94.      */
  95.     private function base64Encode($data)
  96.     {
  97.         if ($this->formatBase64Output) {
  98.             return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
  99.         }
  101.         return base64_encode($data);
  102.     }
  104.     /**
  105.      * @param string $data
  106.      *
  107.      * @return string
  108.      */
  109.     private function base64Decode($data)
  110.     {
  111.         if ($this->formatBase64Output) {
  112.             return base64_decode(str_pad(strtr($data, '-_', '+/'), strlen($data) % 4, '=', STR_PAD_RIGHT), true);
  113.         }
  115.         return base64_decode($data, true);
  116.     }
  117. }