github
/
phpservermon
mirror of https://github.com/phpservermon/phpservermon
1
0
Fork 0
Code Issues Releases Wiki Activity

Replaced mcrypt with openssl (#678) (#805) 

* Replaced mcrypt with openssl (#678)

* Removed TODO
pull/815/head
Travis Botello 2019-11-29 23:32:09 +01:00 committed by Tim
parent 627a93cc7c
commit 7e3cbc94a9
1 changed files with 24 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
src/includes/functions.inc.php
View File

@ -757,7 +757,6 @@ function psm_no_cache() {
* @return string
* @author Pavel Laupe Dvorak <pavel@pavel-dvorak.cz>
*/
// TODO change to working function
function psm_password_encrypt($key, $password)
{
if (empty($password)) {
@ -768,19 +767,17 @@ function psm_password_encrypt($key, $password)
throw new \InvalidArgumentException('invalid_encryption_key');
}
// TODO rewrite
$iv = mcrypt_create_iv(
mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC),
MCRYPT_DEV_URANDOM
);
// using open ssl
$cipher="AES-256-CBC";
$ivlen = openssl_cipher_iv_length($cipher);
$iv = openssl_random_pseudo_bytes( $ivlen );
$encrypted = base64_encode(
$iv.
mcrypt_encrypt(
MCRYPT_RIJNDAEL_128,
hash('sha256', $key, true),
$iv .
openssl_encrypt(
$password,
MCRYPT_MODE_CBC,
$cipher,
hash('sha256', $key, true),
OPENSSL_RAW_DATA, // OPENSSL_ZERO_PADDING OPENSSL_RAW_DATA
$iv
)
);
@ -806,17 +803,18 @@ function psm_password_decrypt($key, $encryptedString)
throw new \InvalidArgumentException('invalid_encryption_key');
}
// using open ssl
$data = base64_decode($encryptedString);
$iv = substr($data, 0, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC));
$cipher="AES-256-CBC";
$ivlen = openssl_cipher_iv_length($cipher);
$iv = substr($data, 0, $ivlen);
$decrypted = rtrim(
mcrypt_decrypt(
MCRYPT_RIJNDAEL_128,
openssl_decrypt(
base64_encode(substr($data, $ivlen)),
$cipher,
hash('sha256', $key, true),
substr($data, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC)),
MCRYPT_MODE_CBC,
$iv
),
OPENSSL_ZERO_PADDING,
$iv),
"\0"
);