本文實例講述了PHP封裝的非對稱加密RSA算法。分享給大家供大家參考,具體如下:
將php的openssl擴展中的非對稱加密函數封裝成一個Rsa類。
需要注意的是,在windows上,需要打開openssl的配置文件,請參照官方的openssl擴展安裝文檔。
在windows上安裝openssl擴展
1、將php路徑下的兩個庫文件libeay32.dll和ssleay32.dll復制到操作system32下
2、配置openssl配置文件的位置,在php的路徑下,有文件extras/openssl/openssl.cnf,添加環境變量OPENSSL_CONF指向這個文件的全路徑。如何添加環境變量請google搜索之。
3、在php.ini里添加一行extension=php_openssl.dll
使用的demo:
//====================demo======================= //以下是一個簡單的測試demo,如果不需要請刪除 $rsa = new Rsa('sslkey'); //sslkey為存放密鑰的路徑,將已有的密鑰文件復制到該路徑下,公鑰名稱為pub.key,私鑰名稱為priv.key $rsa->createKey(); //創建一對密鑰,如果密鑰對已經存在,不需調用 //私鑰加密,公鑰解密 echo 'source:服務器之家<br />'; $pre = $rsa->privEncrypt('服務器之家'); echo 'private encrypted:<br />' . $pre . '<br />'; $pud = $rsa->pubDecrypt($pre); echo 'public decrypted:' . $pud . '<br />'; //公鑰加密,私鑰解密 echo 'source:干IT的<br />'; $pue = $rsa->pubEncrypt('干IT的'); echo 'public encrypt:<br />' . $pue . '<br />'; $prd = $rsa->privDecrypt($pue); echo 'private decrypt:' . $prd; //========================demo======================
本示例在windows7、php 5.2.14、openssl 0.98下開發
<?php /** * 使用openssl實現非對稱加密 * */ class Rsa { /** * private key */ private $_privKey; /** * public key */ private $_pubKey; /** * the keys saving path */ private $_keyPath; /** * the construtor,the param $path is the keys saving path */ public function __construct($path) { if(empty($path) || !is_dir($path)){ throw new Exception('Must set the keys save path'); } $this->_keyPath = $path; } /** * create the key pair,save the key to $this->_keyPath */ public function createKey() { $r = openssl_pkey_new(); openssl_pkey_export($r, $privKey); file_put_contents($this->_keyPath . DIRECTORY_SEPARATOR . 'priv.key', $privKey); $this->_privKey = openssl_pkey_get_private($privKey); $rp = openssl_pkey_get_details($r); $pubKey = $rp['key']; file_put_contents($this->_keyPath . DIRECTORY_SEPARATOR . 'pub.key', $pubKey); $this->_pubKey = openssl_pkey_get_public($pubKey); } /** * setup the private key */ public function setupPrivKey() { if(is_resource($this->_privKey)){ return true; } $file = $this->_keyPath . DIRECTORY_SEPARATOR . 'priv.key'; $prk = file_get_contents($file); $this->_privKey = openssl_pkey_get_private($prk); return true; } /** * setup the public key */ public function setupPubKey() { if(is_resource($this->_pubKey)){ return true; } $file = $this->_keyPath . DIRECTORY_SEPARATOR . 'pub.key'; $puk = file_get_contents($file); $this->_pubKey = openssl_pkey_get_public($puk); return true; } /** * encrypt with the private key */ public function privEncrypt($data) { if(!is_string($data)){ return null; } $this->setupPrivKey(); $r = openssl_private_encrypt($data, $encrypted, $this->_privKey); if($r){ return base64_encode($encrypted); } return null; } /** * decrypt with the private key */ public function privDecrypt($encrypted) { if(!is_string($encrypted)){ return null; } $this->setupPrivKey(); $encrypted = base64_decode($encrypted); $r = openssl_private_decrypt($encrypted, $decrypted, $this->_privKey); if($r){ return $decrypted; } return null; } /** * encrypt with public key */ public function pubEncrypt($data) { if(!is_string($data)){ return null; } $this->setupPubKey(); $r = openssl_public_encrypt($data, $encrypted, $this->_pubKey); if($r){ return base64_encode($encrypted); } return null; } /** * decrypt with the public key */ public function pubDecrypt($crypted) { if(!is_string($crypted)){ return null; } $this->setupPubKey(); $crypted = base64_decode($crypted); $r = openssl_public_decrypt($crypted, $decrypted, $this->_pubKey); if($r){ return $decrypted; } return null; } public function __destruct() { @ fclose($this->_privKey); @ fclose($this->_pubKey); } }
希望本文所述對大家PHP程序設計有所幫助。