php RSA和AES加密算法

一、RSA加密

RSA只說PHP中的應用，詳細的算法原理解釋，請自行百度，或者參考（RSA加密算法-詳細解釋以及公鑰加密為什么每次都不一樣）

總結：公鑰加密、私鑰解密、私鑰簽名、公鑰驗簽。

注意：

1、加密方式：公鑰加密、私鑰解密、私鑰簽名、公鑰驗簽。

2、明文超出長度，請分段加密，解密也一樣

<?php

class Rsa
{
    const CHAR_SET = "UTF-8";
    const BASE_64_FORMAT = "UrlSafeNoPadding";
    const RSA_ALGORITHM_KEY_TYPE = OPENSSL_KEYTYPE_RSA;
    const RSA_ALGORITHM_SIGN = OPENSSL_ALGO_SHA256;
 
    protected $public_key;
    protected $private_key;
    protected $key_len;
 
    public function __construct($pub_key, $pri_key = null)
    {
        $this->public_key  = $pub_key;
        $this->private_key = $pri_key;
 
        $pub_id = openssl_get_publickey($this->public_key);
        $this->key_len = openssl_pkey_get_details($pub_id)['bits'];
    }
 
    /*
     * 創建密鑰對
     */
    public static function createKeys($key_size = 2048)
    {
        $config = array(
            "private_key_bits" => $key_size,
            "private_key_type" => self::RSA_ALGORITHM_KEY_TYPE,
        );
        $res = openssl_pkey_new($config);
        openssl_pkey_export($res, $private_key);
        $public_key_detail = openssl_pkey_get_details($res);
        $public_key = $public_key_detail["key"];
 
        return [
            "public_key" => $public_key,
            "private_key" => $private_key,
        ];
    }
 
    /*
     * 公鑰加密
     */
    public function publicEncrypt($data)
    {
        $encrypted = '';
        $part_len = $this->key_len / 8 - 11;
        $parts = str_split($data, $part_len);
 
        foreach ($parts as $part) {
            $encrypted_temp = '';
            openssl_public_encrypt($part, $encrypted_temp, $this->public_key);
            $encrypted .= $encrypted_temp;
        }
 
        return $this->url_safe_base64_encode($encrypted);
    }
 
    /*
     * 私鑰解密
     */
    public function privateDecrypt($encrypted)
    {
        $decrypted = "";
        $part_len = $this->key_len / 8;
        $base64_decoded = url_safe_base64_decode($encrypted);
        $parts = str_split($base64_decoded, $part_len);
 
        foreach ($parts as $part) {
            $decrypted_temp = '';
            openssl_private_decrypt($part, $decrypted_temp,$this->private_key);
            $decrypted .= $decrypted_temp;
        }
        return $decrypted;
    }
 
    /*
     * 私鑰加密
     */
    public function privateEncrypt($data)
    {
        $encrypted = '';
        $part_len = $this->key_len / 8 - 11;
        $parts = str_split($data, $part_len);
 
        foreach ($parts as $part) {
            $encrypted_temp = '';
            openssl_private_encrypt($part, $encrypted_temp, $this->private_key);
            $encrypted .= $encrypted_temp;
        }
 
        return $this->url_safe_base64_encode($encrypted);
    }
 
    /*
     * 公鑰解密
     */
    public function publicDecrypt($encrypted)
    {
        $decrypted = "";
        $part_len = $this->key_len / 8;
        $base64_decoded = url_safe_base64_decode($encrypted);
        $parts = str_split($base64_decoded, $part_len);
 
        foreach ($parts as $part) {
            $decrypted_temp = '';
            openssl_public_decrypt($part, $decrypted_temp,$this->public_key);
            $decrypted .= $decrypted_temp;
        }
        return $decrypted;
    }
 
    /*
     * 數據簽名
     */
    public function sign($data)
    {
        openssl_sign($data, $sign, $this->private_key, self::RSA_ALGORITHM_SIGN);
 
        return $this->url_safe_base64_encode($sign);
    }
 
    /*
     * 數據簽名驗證
     */
    public function verify($data, $sign)
    {
        $pub_id = openssl_get_publickey($this->public_key);
　　     //如果$data沒有進行base64,請進行 base64后再驗證
        $res = openssl_verify($data, $this->url_safe_base64_decode($sign), $pub_id, self::RSA_ALGORITHM_SIGN);
        return $res;
    }
    
    /*
     * base64_encode處理特殊字符（也有可能不需要替換，直接base64）
     */
    public function url_safe_base64_encode ($data) {
        return str_replace(array('+','/', '='),array('-','_', ''), base64_encode($data));
    }
    
    /*
     * base64_decode處理特殊字符(也有可能不需要，直接base64)
     */
    public function url_safe_base64_decode ($data) {
        $base_64 = str_replace(array('-','_'),array('+','/'), $data);
        return base64_decode($base_64);
    }

}



?>

 

二、AES加密

AES加密算法原理自行百度或者：參考鏈接

mcrypt模塊也可以實現：參考鏈接 

php的openssl模塊實現aes加密，比較簡單

 

<?php

/* 
 * AES加密 */ class Aes { /** *var string $method 加解密方法，可通過openssl_get_cipher_methods()獲得
　　 */
 private $method; /** * var string $secret_key 加解密的密鑰 */ private $secret_key; /** * var string $iv 密初始化向量,加解密的向量，有些方法需要設置 */ private $iv; /** * var string $options false-原始數據；true-base64后的數據 */ private $options; /** * 構造函數 * * @param string $key 密鑰 * @param string $method 加密方式 * @param string $iv iv向量 * @param mixed $options false-原始數據；true-base64后的數據 * */ public function __construct() { $this->secret_key = 'xxxxxxxxxx'; //自己的秘鑰 $this->method = 'AES-128-CBC'; $this->iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length($this->method)); $this->options = false; } /** * 加密方法，對數據進行加密，返回加密后的數據 * * @param string $data 要加密的數據 * * @return string * */ public function encrypt($data) { $encrypted = openssl_encrypt($data, $this->method, $this->secret_key, $this->options, $this->iv); return base64_encode($encrypted . '::' . $this->iv); } /** * 解密方法，對數據進行解密，返回解密后的數據 * * @param string $data 要解密的數據 * * @return string * */ public function decrypt($data) { $arr = explode('::', base64_decode($data)); $encrypted_data = $arr[0]; $iv = $arr[1]; return openssl_decrypt($encrypted_data, $this->method, $this->secret_key, $this->options, $iv); } }