我正在服务器上创建公钥/私钥,将公钥发送到JavaScript客户端,使用cryptico.js库加密用户密码: https://github.com/wwwtyro/cryptico/blob/master/cryptico.js
$res = openssl_pkey_new(array(
'private_key_bits' => 2048,
'private_key_type' => OPENSSL_KEYTYPE_RSA,
'digest_alg' => 'sha256'
));
根据旧版Encrypt with Cryptico.js, Decrypt with OpenSSL
中的一些建议//Made Public key compatible with cryptico.js
$detail = openssl_pkey_get_details($res);
$n = base64_encode($detail['rsa']['n']);
$e = bin2hex($detail['rsa']['e']);
$publicKey = "$n|$e";
openssl_pkey_export($res, $privateKey);
file_put_contents("public_key",$publicKey);
file_put_contents("private_key",$privateKey);
在cryptico.js中进行了两次修改,如同一篇文章所述
my.publicKeyFromString = function(string)
{
var tokens = string.split("|");
var N = my.b64to16(tokens[0]);
var E = tokens.length > 1 ? tokens[1] : "03";
var rsa = new RSAKey();
rsa.setPublic(N, E);
return rsa
}
my.encrypt = function(plaintext, publickeystring, signingkey)
{
var cipherblock = "";
try
{
var publickey = my.publicKeyFromString(publickeystring);
cipherblock += my.b16to64(publickey.encrypt(plaintext));
}
catch(err)
{
return {status: "Invalid public key"};
}
return {status: "success", cipher: cipherblock};
}
现在在客户端js:
var publicKey = '<php echo file_get_contents("public_key")?>';
var encrypted = cryptico.encrypt("plain text", publicKey);
var data = 'encrypted_post_var='+encrypted.chiper;
然后我通过AJAX POST发送数据,我可以验证它是否已成功收到$ _POST [“encrypted_post_var”]
在php中:
$private = openssl_pkey_get_private(file_get_contents("private_key"));
//!!! THAT is the problem because here openssl_private_decrypt() return FALSE !!!
openssl_private_decrypt(base64_decode($_POST["encrypted_post_var"]), $decrypted, $privateKey);
答案 0 :(得分:0)
已解决
最后我找到了一种方法让它运转起来:)
在my.encrypt()函数中,我更改了这一行:
XPersistence.commit()
到
cipherblock += my.b16to64(publickey.encrypt(plaintext));
在php中我改变了:
cipherblock = publickey.encrypt(plaintext);
//that return the cipherblock (ciphertext) in hex format instead base64
为:
openssl_private_decrypt(base64_decode($_POST["encrypted_post_var"]), $decrypted, $privateKey);
现在工作得很好!