egroupware/phpgwapi/inc/class.crypto.inc.php

300 lines
8.0 KiB
PHP
Raw Normal View History

<?php
/**************************************************************************\
2004-05-05 14:06:13 +02:00
* eGroupWare API - Crypto *
* This file written by Joseph Engo <jengo@phpgroupware.org> *
* Handles encrypting strings based on various encryption schemes *
* Copyright (C) 2000, 2001 Dan Kuykendall *
* -------------------------------------------------------------------------*
2004-05-05 14:06:13 +02:00
* This library is part of the eGroupWare API *
* http://www.egroupware.org/api *
* -------------------------------------------------------------------------*
* This library is free software; you can redistribute it and/or modify it *
* under the terms of the GNU Lesser General Public License as published by *
* the Free Software Foundation; either version 2.1 of the License, *
* or any later version. *
* This library is distributed in the hope that it will be useful, but *
* WITHOUT ANY WARRANTY; without even the implied warranty of *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. *
* See the GNU Lesser General Public License for more details. *
* You should have received a copy of the GNU Lesser General Public License *
* along with this library; if not, write to the Free Software Foundation, *
* Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
\**************************************************************************/
2001-12-28 06:57:18 +01:00
/* $Id$ */
2001-05-06 15:19:42 +02:00
class crypto
{
var $enabled = False;
var $debug = False;
var $mcrypt_version = '';
2003-10-17 09:31:23 +02:00
var $algo = MCRYPT_TRIPLEDES;
var $mode = MCRYPT_MODE_CBC;
var $td = False; /* Handle for mcrypt */
2001-05-06 15:19:42 +02:00
var $iv = '';
var $key = '';
function crypto($vars='')
2001-05-06 15:19:42 +02:00
{
if($GLOBALS['egw_info']['flags']['currentapp'] == 'login' ||
$GLOBALS['egw_info']['flags']['currentapp'] == 'logout' ||
$GLOBALS['egw_info']['flags']['currentapp'] == 'home'
)
{
$this->debug = False;
}
if(is_array($vars))
{
$this->init($vars);
}
}
2001-12-25 21:16:26 +01:00
function init($vars)
{
/* _debug_array(mcrypt_list_algorithms()); */
2001-05-06 15:19:42 +02:00
$key = $vars[0];
2001-10-17 20:15:04 +02:00
$iv = $vars[1];
if($GLOBALS['egw_info']['server']['mcrypt_enabled'] && extension_loaded('mcrypt'))
2001-05-06 15:19:42 +02:00
{
if($GLOBALS['egw_info']['server']['mcrypt_algo'])
{
$this->algo = $GLOBALS['egw_info']['server']['mcrypt_algo'];
}
if($GLOBALS['egw_info']['server']['mcrypt_mode'])
{
$this->mode = $GLOBALS['egw_info']['server']['mcrypt_mode'];
}
if($this->debug)
{
echo '<br>crypto: algorithm=' . $this->algo;
echo '<br>crypto: mode =' . $this->mode;
}
$this->enabled = True;
$this->mcrypt_version = $GLOBALS['egw_info']['server']['versions']['mcrypt'];
if($this->mcrypt_version == 'old')
2001-05-06 15:19:42 +02:00
{
$this->td = False;
if(phpversion() > '4.0.2pl1')
2001-05-06 15:19:42 +02:00
{
$keysize = mcrypt_get_key_size($this->algo);
$ivsize = mcrypt_get_iv_size($this->algo,$this->mode);
2001-05-06 15:19:42 +02:00
}
else
{
$keysize = 8;
2001-10-17 20:15:04 +02:00
$ivsize = 8;
2001-05-06 15:19:42 +02:00
}
}
else
{
/* Start up mcrypt */
$this->td = mcrypt_module_open($this->algo, '', $this->mode, '');
2001-05-06 15:19:42 +02:00
$ivsize = mcrypt_enc_get_iv_size($this->td);
$keysize = mcrypt_enc_get_key_size($this->td);
}
/* Hack IV to be the correct size */
2001-05-06 15:19:42 +02:00
$x = strlen($iv);
2004-08-07 02:51:29 +02:00
$this->iv = '';
for($i = 0; $i < $ivsize; $i++)
2001-05-06 15:19:42 +02:00
{
$this->iv .= $iv[$i % $x];
}
/* Hack Key to be the correct size */
2001-05-06 15:19:42 +02:00
$x = strlen($key);
2004-08-07 02:51:29 +02:00
$this->key = '';
for($i = 0; $i < $keysize; $i++)
2001-05-06 15:19:42 +02:00
{
$this->key .= $key[$i % $x];
}
}
else
{
/* If mcrypt isn't loaded, key and iv are not needed. */
if($this->debug)
{
echo '<br>crypto: mycrypt unavailable or disabled';
}
}
2001-05-06 15:19:42 +02:00
}
function cleanup()
{
if($this->enabled)
2001-05-06 15:19:42 +02:00
{
if($this->mcrypt_version != 'old')
2001-05-06 15:19:42 +02:00
{
if(function_exists('mcrypt_generic_deinit'))
{
mcrypt_generic_deinit($this->td);
}
else
{
mcrypt_generic_end($this->td);
}
2001-05-06 15:19:42 +02:00
}
}
}
function hex2bin($data)
{
$len = strlen($data);
return pack('H'.$len, $data);
2001-05-06 15:19:42 +02:00
}
function encrypt($data)
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() unencrypted data: ---->>>>' . $data . "\n";
}
if(@is_array($data) || @is_object($data))
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() found an "' . gettype($data) . '". Serializing...' . "\n";
}
$data = serialize($data);
$_obj = True;
}
else
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() found "' . gettype($data) . '". No serialization...' . "\n";
}
}
/* Disable all encryption if the admin didn't set it up */
if($this->enabled)
{
if($_obj)
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() adding slashes' . "\n";
}
$data = addslashes($data);
}
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() data: ---->>>>' . $data;
}
2001-12-28 06:57:18 +01:00
switch($this->mcrypt_version)
{
case 'old':
/* The old code, only works with mcrypt <= 2.2.x */
$encrypteddata = mcrypt_cbc($this->algo, $this->key, $data, MCRYPT_ENCRYPT);
break;
default:
/* Handle 2.4 and newer API */
mcrypt_generic_init($this->td, $this->key, $this->iv);
$encrypteddata = mcrypt_generic($this->td, $data);
break;
}
$encrypteddata = bin2hex($encrypteddata);
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() crypted data: ---->>>>' . $encrypteddata;
}
return $encrypteddata;
}
else
{
/* No mcrypt == insecure ! */
if($this->debug)
{
echo '<br>' . time() . ' crypto->encrypt() crypted data: ---->>>>' . $data;
}
return $data;
}
}
function decrypt($encrypteddata)
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() crypted data: ---->>>>' . $encrypteddata;
}
/* Disable all encryption if the admin didn't set it up */
if($this->enabled)
{
$data = $this->hex2bin($encrypteddata);
switch($this->mcrypt_version)
{
case 'old':
/* The old code, only works with mcrypt <= 2.2.x */
$data = mcrypt_cbc($this->algo, $this->key, $data, MCRYPT_DECRYPT);
break;
default:
/* Handle 2.4 and newer API */
mcrypt_generic_init($this->td, $this->key, $this->iv);
$data = mdecrypt_generic($this->td, $data);
break;
}
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() decrypted data: ---->>>>' . $data;
}
2001-12-25 21:16:26 +01:00
$test = stripslashes($data);
if(@unserialize($test))
{
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() stripping slashes' . "\n";
}
2001-12-25 21:16:26 +01:00
$data = $test;
}
unset($test);
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() data: ---->>>>' . $data . "\n";
}
}
else
{
/* No mcrypt == insecure ! */
$data = $encrypteddata;
}
// Fix strange bug
// Without this, somes ^@^@^@^@ appears in data
$data = chop($data);
2001-12-25 21:16:26 +01:00
$newdata = @unserialize($data);
/* Check whether an array or object exists, even if empty. These should be the only ones originally serialized. */
if(@is_array($newdata) || @is_object($newdata))
{
/* array or object */
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() found serialized "' . gettype($newdata) . '". Unserializing...' . "\n";
echo '<br>' . time() . ' crypto->decrypt() returning: '; _debug_array($newdata);
}
return $newdata;
}
else
{
/* Other types */
if($this->debug)
{
echo '<br>' . time() . ' crypto->decrypt() found UNserialized "' . gettype($data) . '". No unserialization...' . "\n";
echo '<br>' . time() . ' crypto->decrypt() returning: ' . $data;
}
return $data;
}
}
2001-10-17 20:15:04 +02:00
} // class crypto
2001-05-06 15:19:42 +02:00
?>