Upgrading my encryption library from Mcrypt to OpenSSL

by

This code for your decryption routine works for me:

public function decrypt($data, $key) {
    $salt = substr($data, 0, 128);
    $enc = substr($data, 128, -64);
    $mac = substr($data, -64);

    list ($cipherKey, $macKey, $iv) = $this->getKeys($salt, $key);

    if ($mac !== hash_hmac('sha512', $enc, $macKey, true)) {
         return false;
    }

    $dec = openssl_decrypt($enc, $this->cipher, $cipherKey, OPENSSL_RAW_DATA, $iv);

    return $dec;
}

Test:

$keys = [
    'this is a secret key.',
    'G906m70p(IhzA5T&5x7(w0%a631)u)%D6E79cIYJQ!iP2U(xT13q6)tJ6gZ3D2wi&0")7cP5',
    chr(6) . chr(200) . chr(16) . 'my key ' . chr(3) . chr(4) . chr(192) . chr(254) . ' zyx0987!!',
    'and finally one more key to test with here:',
];


$data = [
    'A',
    'This is a test',
    'now test encrypting something a little bit longer with 1234567890.',
    '$length = mcrypt_get_block_size(MCRYPT_BLOWFISH, MCRYPT_MODE_CBC); $last = ord($data[strlen($data) - 1]);',
    'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sit amet pharetra urna. Vestibulum ante ipsum primis in faucibus orci luctus et ultrices posuere cubilia Curae; Ut fringilla, quam sed eleifend eleifend, justo turpis consectetur tellus, quis tristique eros erat at nibh. Nunc dictum neque vel diam molestie fermentum. Pellentesque dignissim dui quis tortor eleifend, ut maximus elit egestas. Donec posuere odio et auctor porta. Quisque placerat condimentum maximus. Curabitur luctus dolor eget sem luctus, in dignissim tortor venenatis. Mauris eget nulla nisl.',
];

$failures = 0;

foreach ($data as $datum) {
    foreach ($keys as $key) {
        $enc = new Encryption(MCRYPT_BLOWFISH, MCRYPT_MODE_CBC);

        $encrypted = $enc->encrypt($datum, $key);

        $dec = new EncryptionOpenSsl('bf-cbc');

        $decrypted = $dec->decrypt($encrypted, $key);

        if (strcmp($datum, $decrypted) !== 0) {
            echo "Encryption with key '$key' of '$datum' failed.  '$decrypted' != '$datum'<br><br>\n\n";
            $failures++;
        }
    }
}

if ($failures) {
    echo "$failures tests failed.<br>\n";
} else {
    echo "ALL OKAY<br>\n";
}

If you can confirm it works for you as well I can tidy up the answer and add final working code.

More Related Contents:

  1. Best way to use PHP to encrypt and decrypt passwords? [duplicate]
  2. mcrypt is deprecated, what is the alternative?
  3. How to add/remove PKCS7 padding from an AES encrypted string?
  4. Preparing for removal of Mcrypt in PHP 7.2
  5. Replace Mcrypt with OpenSSL
  6. mcrypt_encrypt to openssl_encrypt, and OPENSSL_ZERO_PADDING problems
  7. MCrypt rijndael-128 to OpenSSL aes-128-ecb conversion
  8. Decrypting strings in Python that were encrypted with MCRYPT_RIJNDAEL_256 in PHP
  9. Mcrypt js encryption value is different than that produced by PHP mcrypt / Mcrypt JS decrypt doesn’t work for UTF-8 chars
  10. How do you Encrypt and Decrypt a PHP String?
  11. Simplest two-way encryption using PHP
  12. Laravel requires the Mcrypt PHP extension
  13. Two-way encryption: I need to store passwords that can be retrieved
  14. PHP AES encrypt / decrypt
  15. Login without HTTPS, how to secure?
  16. Encryption in JavaScript and decryption with PHP
  17. Laravel certificate verification errors when sending TLS email
  18. OPENSSL file_get_contents(): Failed to enable crypto
  19. Two-way encryption in PHP
  20. TLS 1.2 not working in cURL
  21. SSL error SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
  22. Create an encrypted zip archive with PHP
  23. How can I decrypt a password hash in PHP?
  24. PHPMailer generates PHP Warning: stream_socket_enable_crypto(): Peer certificate did not match expected
  25. Switching between HTTP and HTTPS pages with secure session-cookie
  26. OpenSSL not working on Windows, errors 0x02001003 0x2006D080 0x0E064002
  27. Apple Sign In “invalid_client”, signing JWT for authentication using PHP and openSSL
  28. Can anyone get access to my PHP source code?
  29. AESCrypt decryption between iOS and PHP
  30. Fatal error: Call to undefined function openssl_random_pseudo_bytes()

Leave a Comment