egroupware_official/phpgwapi/inc/class.crypto.inc.php

168 lines
4.7 KiB
PHP
Raw Normal View History

<?php
/**************************************************************************\
2001-01-13 11:18:50 +01:00
* phpGroupWare API - Crypto *
* This file written by Joseph Engo <jengo@phpgroupware.org> *
* Handles encrypting strings based on various encryption schemes *
* Copyright (C) 2000, 2001 Dan Kuykendall *
* -------------------------------------------------------------------------*
* This library is part of the phpGroupWare API *
* http://www.phpgroupware.org/api *
* ------------------------------------------------------------------------ *
2001-01-13 11:18:50 +01:00
* This library is free software; you can redistribute it and/or modify it *
* under the terms of the GNU Lesser General Public License as published by *
* the Free Software Foundation; either version 2.1 of the License, *
* or any later version. *
* This library is distributed in the hope that it will be useful, but *
* WITHOUT ANY WARRANTY; without even the implied warranty of *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. *
* See the GNU Lesser General Public License for more details. *
* You should have received a copy of the GNU Lesser General Public License *
* along with this library; if not, write to the Free Software Foundation, *
* Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
\**************************************************************************/
/* $Id$ */
2001-05-06 15:19:42 +02:00
class crypto
{
var $enabled = False;
var $mcrypt_version = '';
2001-10-17 20:15:04 +02:00
var $td = False; // Handle for mcrypt
2001-05-06 15:19:42 +02:00
var $iv = '';
var $key = '';
function crypto($vars)
{
$key = $vars[0];
2001-10-17 20:15:04 +02:00
$iv = $vars[1];
if ($GLOBALS['phpgw_info']['server']['mcrypt_enabled'] && extension_loaded('mcrypt'))
2001-05-06 15:19:42 +02:00
{
$this->enabled = True;
2001-10-17 20:15:04 +02:00
$this->mcrypt_version = $GLOBALS['phpgw_info']['server']['versions']['mcrypt'];
if ($this->mcrypt_version == 'old')
2001-05-06 15:19:42 +02:00
{
$this->td = false;
if (phpversion() > '4.0.2pl1')
{
$keysize = mcrypt_get_key_size(MCRYPT_TRIPLEDES);
$ivsize = mcrypt_get_iv_size(MCRYPT_TRIPLEDES,MCRYPT_MODE_CBC);
}
else
{
$keysize = 8;
2001-10-17 20:15:04 +02:00
$ivsize = 8;
2001-05-06 15:19:42 +02:00
}
}
else
{
// Start up mcrypt
$this->td = mcrypt_module_open (MCRYPT_TRIPLEDES, '', MCRYPT_MODE_CBC, '');
$ivsize = mcrypt_enc_get_iv_size($this->td);
$keysize = mcrypt_enc_get_key_size($this->td);
}
// Hack IV to be the correct size
$x = strlen($iv);
for ($i = 0; $i < $ivsize; $i++)
{
$this->iv .= $iv[$i % $x];
}
// Hack Key to be the correct size
$x = strlen($key);
for ($i = 0; $i < $keysize; $i++)
{
$this->key .= $key[$i % $x];
}
}
// If mcrypt isn't loaded key and iv are not needed
}
function cleanup()
{
if ($this->enabled)
2001-05-06 15:19:42 +02:00
{
if ($this->mcrypt_version != 'old')
2001-05-06 15:19:42 +02:00
{
mcrypt_generic_end ($this->td);
}
}
}
function hex2bin($data)
{
$len = strlen($data);
return pack('H'.$len, $data);
2001-05-06 15:19:42 +02:00
}
function encrypt($data)
{
$data = serialize($data);
$data = addslashes($data);
2001-05-06 15:19:42 +02:00
// Disable all encryption if the admin didn't set it up
if ($this->enabled)
2001-05-06 15:19:42 +02:00
{
switch ($this->mcrypt_version)
2001-05-06 15:19:42 +02:00
{
// The old code, only works with mcrypt <= 2.2.x
case 'old':
{
$encrypteddata = mcrypt_cbc(MCRYPT_TripleDES, $this->key, $data, MCRYPT_ENCRYPT);
break;
}
default:
{ // Handle 2.4 and newer API
mcrypt_generic_init ($this->td, $this->key, $this->iv);
2001-05-06 15:19:42 +02:00
$encrypteddata = mcrypt_generic($this->td, $data);
break;
2001-05-06 15:19:42 +02:00
}
}
$encrypteddata = bin2hex($encrypteddata);
return $encrypteddata;
}
else
2001-10-17 20:15:04 +02:00
{ // No mcrypt == insecure !
2001-05-06 15:19:42 +02:00
return $data;
}
}
function decrypt($encrypteddata)
{
// Disable all encryption if the admin didn't set it up
if ($this->enabled)
2001-05-06 15:19:42 +02:00
{
$data = $this->hex2bin($encrypteddata);
switch ($this->mcrypt_version)
2001-05-06 15:19:42 +02:00
{
// The old code, only works with mcrypt <= 2.2.x
case 'old':
$data = mcrypt_cbc(MCRYPT_TripleDES, $this->key, $data, MCRYPT_DECRYPT);
break;
// Handle 2.4 and newer API
2001-05-06 15:19:42 +02:00
default:
mcrypt_generic_init ($this->td, $this->key, $this->iv);
2001-05-06 15:19:42 +02:00
$data = mdecrypt_generic($this->td, $data);
break;
2001-05-06 15:19:42 +02:00
}
}
else
{
$data = $encrypteddata;
}
if(!strpos(' '.$data,'O:8:"stdClass"'))
{
2001-05-06 15:19:42 +02:00
return unserialize($data);
}
else
{
2001-09-21 07:47:32 +02:00
$data = stripslashes($data);
return $data;
2001-05-06 15:19:42 +02:00
}
}
2001-10-17 20:15:04 +02:00
} // class crypto
2001-05-06 15:19:42 +02:00
?>