![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/old/vendor/laminas/laminas-crypt/src/PublicKey/Rsa/ |
<?php namespace Laminas\Crypt\PublicKey\Rsa; use function file_get_contents; use function is_readable; use function is_string; use function openssl_error_string; use function openssl_pkey_get_details; use function openssl_pkey_get_public; use function openssl_public_decrypt; use function openssl_public_encrypt; use function strpos; use const OPENSSL_PKCS1_OAEP_PADDING; use const OPENSSL_PKCS1_PADDING; /** * RSA public key */ class PublicKey extends AbstractKey { public const CERT_START = '-----BEGIN CERTIFICATE-----'; /** @var string */ protected $certificateString; /** * Create public key instance public key from PEM formatted key file * or X.509 certificate file * * @param string $pemOrCertificateFile * @return PublicKey * @throws Exception\InvalidArgumentException */ public static function fromFile($pemOrCertificateFile) { if (! is_readable($pemOrCertificateFile)) { throw new Exception\InvalidArgumentException( "File '{$pemOrCertificateFile}' is not readable" ); } return new static(file_get_contents($pemOrCertificateFile)); } /** * Construct public key with PEM formatted string or X.509 certificate * * @param string $pemStringOrCertificate * @throws Exception\RuntimeException */ public function __construct($pemStringOrCertificate) { $result = openssl_pkey_get_public($pemStringOrCertificate); if (false === $result) { throw new Exception\RuntimeException( 'Unable to load public key; openssl ' . openssl_error_string() ); } if (strpos($pemStringOrCertificate, self::CERT_START) !== false) { $this->certificateString = $pemStringOrCertificate; } else { $this->pemString = $pemStringOrCertificate; } $this->opensslKeyResource = $result; $this->details = openssl_pkey_get_details($this->opensslKeyResource); } /** * Encrypt using this key * * Starting in 2.4.9/2.5.2, we changed the default padding to * OPENSSL_PKCS1_OAEP_PADDING to prevent Bleichenbacher's chosen-ciphertext * attack. * * @see http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf * * @param string $data * @param string $padding * @throws Exception\InvalidArgumentException * @throws Exception\RuntimeException * @return string */ public function encrypt($data, $padding = OPENSSL_PKCS1_OAEP_PADDING) { if (empty($data)) { throw new Exception\InvalidArgumentException('The data to encrypt cannot be empty'); } $encrypted = ''; $result = openssl_public_encrypt($data, $encrypted, $this->getOpensslKeyResource(), $padding); if (false === $result) { throw new Exception\RuntimeException( 'Can not encrypt; openssl ' . openssl_error_string() ); } return $encrypted; } /** * Decrypt using this key * * @param string $data * @param string $padding * @throws Exception\InvalidArgumentException * @throws Exception\RuntimeException * @return string */ public function decrypt($data, $padding = OPENSSL_PKCS1_PADDING) { if (! is_string($data)) { throw new Exception\InvalidArgumentException('The data to decrypt must be a string'); } if ('' === $data) { throw new Exception\InvalidArgumentException('The data to decrypt cannot be empty'); } $decrypted = ''; $result = openssl_public_decrypt($data, $decrypted, $this->getOpensslKeyResource(), $padding); if (false === $result) { throw new Exception\RuntimeException( 'Can not decrypt; openssl ' . openssl_error_string() ); } return $decrypted; } /** * Get certificate string * * @return string */ public function getCertificate() { return $this->certificateString; } /** * To string * * @return string * @throws Exception\RuntimeException */ public function toString() { if (! empty($this->certificateString)) { return $this->certificateString; } elseif (! empty($this->pemString)) { return $this->pemString; } throw new Exception\RuntimeException('No public key string representation is available'); } }