《PHP安全之對(duì)稱密鑰ACE加密解密類》要點(diǎn):
本文介紹了PHP安全之對(duì)稱密鑰ACE加密解密類,希望對(duì)您有用。如果有疑問,可以聯(lián)系我們。
高級(jí)加密標(biāo)準(zhǔn)(英語:Advanced Encryption Standard,縮寫:AES),是目前對(duì)稱密鑰加密中比較通用的一種加密方式。
支付寶開放平臺(tái)所有OpenAPI均支持對(duì)接口的請(qǐng)求內(nèi)容和響應(yīng)內(nèi)容進(jìn)行AES加密。加密后,在網(wǎng)絡(luò)上傳輸?shù)慕涌趫?bào)文內(nèi)容將會(huì)由明文內(nèi)容變?yōu)槊芪膬?nèi)容,可以大大提升接口內(nèi)容傳輸?shù)陌踩浴?/p>
AES密鑰是對(duì)接口請(qǐng)求和響應(yīng)內(nèi)容進(jìn)行加密,密文無法被第三方識(shí)別,從而防止接口傳輸數(shù)據(jù)泄露。
RSA密鑰是對(duì)接口請(qǐng)求和響應(yīng)內(nèi)容進(jìn)行簽名,開發(fā)者和支付寶開放平臺(tái)分別加簽驗(yàn)簽,以確認(rèn)接口傳輸?shù)膬?nèi)容沒有被篡改。不論接口內(nèi)容是明文還是密文,RSA均可正常簽名。
開發(fā)者可對(duì)請(qǐng)求參數(shù)先做AES加密,然后對(duì)密文進(jìn)行RSA簽名。
//php aes加密類 class AESMcrypt { public $iv = null; public $key = null; public $bit = 128; private $cipher; public function __construct($bit, $key, $iv, $mode) { if(empty($bit) || empty($key) || empty($iv) || empty($mode)) return NULL; $this->bit = $bit; $this->key = $key; $this->iv = $iv; $this->mode = $mode; switch($this->bit) { case 192:$this->cipher = MCRYPT_RIJNDAEL_192; break; case 256:$this->cipher = MCRYPT_RIJNDAEL_256; break; default: $this->cipher = MCRYPT_RIJNDAEL_128; } // www.jbxue.com switch($this->mode) { case 'ecb':$this->mode = MCRYPT_MODE_ECB; break; case 'cfb':$this->mode = MCRYPT_MODE_CFB; break; case 'ofb':$this->mode = MCRYPT_MODE_OFB; break; case 'nofb':$this->mode = MCRYPT_MODE_NOFB; break; default: $this->mode = MCRYPT_MODE_CBC; } } public function encrypt($data) { $data = base64_encode(mcrypt_encrypt( $this->cipher, $this->key, $data, $this->mode, $this->iv)); return $data; } public function decrypt($data) { $data = mcrypt_decrypt( $this->cipher, $this->key, base64_decode($data), $this->mode, $this->iv); $data = rtrim(rtrim($data), "\x00..\x1F"); return $data; } }
//使用方法 $aes = new AESMcrypt($bit = 128, $key = 'vephp', $iv = 'vephp.com', $mode = 'cbc'); $c = $aes->encrypt('www.fzlkiss.com'); var_dump($aes->decrypt($c)); echo '<br />'; echo $c;
轉(zhuǎn)載請(qǐng)注明本頁網(wǎng)址:
http://www.fzlkiss.com/jiaocheng/99.html