【PHP】Mcrypt 擴充套件模組安裝及使用

wayneli發表於2019-02-16
PHP套件

Mcrypt 簡介

Mcrypt 庫提供了對多種塊演算法的支援， 包括：DES，TripleDES，Blowfish （預設）， 3-WAY，SAFER-SK64，SAFER-SK128，TWOFISH，TEA，RC2 以及 GOST，並且支援 CBC，OFB，CFB 和 ECB 密碼模式

安裝過程 (Linux)

PHP7 要想使用 Mcrypt, 需要安裝相應依賴包以及擴充套件模組

libmcrpyt 下載安裝

libmcrypt-2.5.8.tar.gz 下載地址

# 注意：如果不需要代理伺服器 可以去掉 -e 引數
wget --no-check-certificate -e "https_proxy=$http_proxy" -c "https://downloads.sourceforge.net/project/mcrypt/Libmcrypt/2.5.8/libmcrypt-2.5.8.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fmcrypt%2Ffiles%2FLibmcrypt%2F2.5.8%2Flibmcrypt-2.5.8.tar.gz%2Fdownload&ts=1524883417&use_mirror=autoselect" -O libmcrypt-2.5.8.tar.gz

tar -xvzf libmcrpyt-2.5.8.tar.gz

cd libmcrypt-2.5.8

./configure

make

sudo make install

mcrypt 下載安裝

mcrypt-2.6.8.tar.gz 下載地址

# 注意：如果不需要代理伺服器 可以去掉 -e 引數
wget --no-check-certificate -e "https_proxy=${http_proxy}" -c "https://downloads.sourceforge.net/project/mcrypt/MCrypt/2.6.8/mcrypt-2.6.8.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fmcrypt%2Ffiles%2FMCrypt%2F2.6.8%2Fmcrypt-2.6.8.tar.gz%2Fdownload&ts=1524884655&use_mirror=autoselect" -O mcrypt-2.6.8.tar.gz

tar -xvzf mcrypt-2.6.8.tar.gz 

LD_LIBRARY_PATH=/usr/local/lib ./configure

make

sudo make install

mhash 下載安裝

mhash-0.9.9.9.tar.gz 下載地址

# 注意：如果不需要代理伺服器 可以去掉 -e 引數

wget --no-check-certificate -e "https_proxy=${http_proxy}" -c "https://downloads.sourceforge.net/project/mhash/mhash/0.9.9.9/mhash-0.9.9.9.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fmhash%2Ffiles%2Fmhash%2F0.9.9.9%2Fmhash-0.9.9.9.tar.gz%2Fdownload&ts=1524885158&use_mirror=autoselect" -O mhash-0.9.9.9.tar.gz

tar -xvzf mhash-0.9.9.9.tar.gz

./configure

make

sudo make install

PHP原始碼下載

php-7.0.2 下載地址

# 注意：如果不需要代理伺服器 可以去掉 -e 引數
wget -e "http_proxy=${http_proxy}" -c "http://cn2.php.net/get/php-7.0.2.tar.gz/from/this/mirror" -O php-7.0.2.tar.gz

tar -xvzf php-7.0.2.tar.gz

cd ./php-7.0.2/ext/mcrpyt

# phpize是一個shell指令碼,用於生成PECL擴充套件的configure檔案
# 預設在/path/to/php/bin
phpize

./configure

make

sudo make install

# 結果
Installing shared extensions:     /usr/local/php/lib/php/extensions/no-debug-non-zts-20151012/

修改 php.ini

# 尋找 php.ini 檔案在哪裡 `php -i | grep php.ini`

vi php.ini
extension=mcrypt.so

# 檢查是否安裝成功 
php -m | grep mcrypt
mcrypt

使用

使用案例

<?php
    # --- ENCRYPTION ---

    # the key should be random binary, use scrypt, bcrypt or PBKDF2 to
    # convert a string into a key
    # key is specified using hexadecimal
    $key = pack(`H*`, "bcb04b7e103a0cd8b54763051cef08bc55abe029fdebae5e1d417e2ffb2a00a3");
    
    # show key size use either 16, 24 or 32 byte keys for AES-128, 192
    # and 256 respectively
    $key_size =  strlen($key);
    echo "Key size: " . $key_size . "
";
    
    $plaintext = "This string was AES-256 / CBC / ZeroBytePadding encrypted.";

    # create a random IV to use with CBC encoding
    $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
    $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
    
    # creates a cipher text compatible with AES (Rijndael block size = 128)
    # to keep the text confidential 
    # only suitable for encoded input that never ends with value 00h
    # (because of default zero padding)
    $ciphertext = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key,
                                 $plaintext, MCRYPT_MODE_CBC, $iv);

    # prepend the IV for it to be available for decryption
    $ciphertext = $iv . $ciphertext;
    
    # encode the resulting cipher text so it can be represented by a string
    $ciphertext_base64 = base64_encode($ciphertext);

    echo  $ciphertext_base64 . "
";

    # === WARNING ===

    # Resulting cipher text has no integrity or authenticity added
    # and is not protected against padding oracle attacks.
    
    # --- DECRYPTION ---
    
    $ciphertext_dec = base64_decode($ciphertext_base64);
    
    # retrieves the IV, iv_size should be created using mcrypt_get_iv_size()
    $iv_dec = substr($ciphertext_dec, 0, $iv_size);
    
    # retrieves the cipher text (everything except the $iv_size in the front)
    $ciphertext_dec = substr($ciphertext_dec, $iv_size);

    # may remove 00h valued characters from end of plain text
    $plaintext_dec = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key,
                                    $ciphertext_dec, MCRYPT_MODE_CBC, $iv_dec);
    
    echo  $plaintext_dec . "
";
?>

注意: Mcrpyt 擴充套件從 PHP 7.1.0 開始廢棄；自 PHP 7.2.0 起，會移到 PECL

相關文章