OpenSSL: Encrypt Data with an RSA Key with PHP
{% render_partial _includes/series/encryption.md %}
Web application security is built upon a series of interconnected building blocks.
Last year, I wrote about how Generating an RSA Key from the Command Line in OpenSSL could support encrypting or validating data in an unattended manner (where the password is not required to encrypt). A few weeks before that, I posted about how to Encrypt a File with a Password from the Command Line using OpenSSL.
Knowing how to generate an encryption key is great, but knowing how to use it in your application is even better.
So here is an example PHP function that can encrypt arbitrary data, including strings and arrays, using an RSA public key generated with the example in the previous article.
The Code to Encrypt and Serialize
{% codeblock encrypt_data.php %}
base64_encode($sealed) , ‘enckey' => base64_encode( serialize($ekeys)) ); } // end encryptData // Say "Hello, World!" in an Encrypted Format echo serialize(encryptData("Hello, World!")); ?>{% endcodeblock %}
The Output from this Code
On my system, running this script returns a serialized array as a single line of text. In this example, newlines and tabs have been added for readability.
{% codeblock The resulting serialized array (newlines added for readability). lang:php %} a:2:{ s:7:“encdata”;s:28:“K5LPNyfUcd9TOoLgRGKhuncS8wBk”; s:6:“enckey”; s:368:“YToxOntpOjA7czoyN TY6Iq2QT1YZBFeLrn6bieV3O2gEYAD3vrAwoCNpsyBnmkUP1MW4YB0TiFS fygjnioTUllCC5vzCvru rk5v6p107Yf4RI/+xREKl9Qq1vwuaABTJ6tsBO01gNWRfNoCIdGOziJm64FAcM 7ULjaC0i+DnhgKmsX 9nUlhCv5K1f4ZWB8i3hiQ+q5PvTkbMa2djhRdJpNUNQokWceBR9/twwXOi3h+9xVz Dxe1wnBK4sEL My/nwlyNcdrPKo1YY/R+QLg0da61/Fo6nma308XPI9B4iWepnCCQAsJB/gSlj0iVWEEJOn dj/QY2+XIB JWDU1Y04vIzjGIoqT0JTBjD4PJF9/gqEiO30="; } {% endcodeblock %}
A good encryption scheme will generate different cipher text each time it is run. Therefore, running the script multiple times will result in different looking random data in the encdata and enckeys fields as a different random session key for each run.
Or, If You Want to Use JSON
The serialize function is a specific format to PHP. If you want to use JSON instead, you can do so with something like this at the end of the encryptData function.
{% codeblock lang:php %}
$value) { $ekeys_ascii[$key] = base64_encode($value); } return array( 'encdata'=>base64_encode($sealed) ,'enckey'=>json_encode($ekeys_ascii) ); } // end encryptData ?>{% endcodeblock %}
In Conclusion
OpenSSL is a cryptographic foundation upon which you can build some very powerful, flexible, and will help improve the security of your web applications.
{% render_partial _includes/callouts/_web_topics_post.md %}