123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344 |
- <?php
- /**
- * Pure-PHP implementation of RC4.
- *
- * Uses mcrypt, if available, and an internal implementation, otherwise.
- *
- * PHP version 5
- *
- * Useful resources are as follows:
- *
- * - {@link http://www.mozilla.org/projects/security/pki/nss/draft-kaukonen-cipher-arcfour-03.txt ARCFOUR Algorithm}
- * - {@link http://en.wikipedia.org/wiki/RC4 - Wikipedia: RC4}
- *
- * RC4 is also known as ARCFOUR or ARC4. The reason is elaborated upon at Wikipedia. This class is named RC4 and not
- * ARCFOUR or ARC4 because RC4 is how it is referred to in the SSH1 specification.
- *
- * Here's a short example of how to use this library:
- * <code>
- * <?php
- * include 'vendor/autoload.php';
- *
- * $rc4 = new \phpseclib\Crypt\RC4();
- *
- * $rc4->setKey('abcdefgh');
- *
- * $size = 10 * 1024;
- * $plaintext = '';
- * for ($i = 0; $i < $size; $i++) {
- * $plaintext.= 'a';
- * }
- *
- * echo $rc4->decrypt($rc4->encrypt($plaintext));
- * ?>
- * </code>
- *
- * @category Crypt
- * @package RC4
- * @author Jim Wigginton <terrafrost@php.net>
- * @copyright 2007 Jim Wigginton
- * @license http://www.opensource.org/licenses/mit-license.html MIT License
- * @link http://phpseclib.sourceforge.net
- */
- namespace phpseclib\Crypt;
- /**
- * Pure-PHP implementation of RC4.
- *
- * @package RC4
- * @author Jim Wigginton <terrafrost@php.net>
- * @access public
- */
- class RC4 extends Base
- {
- /**#@+
- * @access private
- * @see \phpseclib\Crypt\RC4::_crypt()
- */
- const ENCRYPT = 0;
- const DECRYPT = 1;
- /**#@-*/
- /**
- * Block Length of the cipher
- *
- * RC4 is a stream cipher
- * so we the block_size to 0
- *
- * @see \phpseclib\Crypt\Base::block_size
- * @var int
- * @access private
- */
- var $block_size = 0;
- /**
- * Key Length (in bytes)
- *
- * @see \phpseclib\Crypt\RC4::setKeyLength()
- * @var int
- * @access private
- */
- var $key_length = 128; // = 1024 bits
- /**
- * The mcrypt specific name of the cipher
- *
- * @see \phpseclib\Crypt\Base::cipher_name_mcrypt
- * @var string
- * @access private
- */
- var $cipher_name_mcrypt = 'arcfour';
- /**
- * Holds whether performance-optimized $inline_crypt() can/should be used.
- *
- * @see \phpseclib\Crypt\Base::inline_crypt
- * @var mixed
- * @access private
- */
- var $use_inline_crypt = false; // currently not available
- /**
- * The Key
- *
- * @see self::setKey()
- * @var string
- * @access private
- */
- var $key = "\0";
- /**
- * The Key Stream for decryption and encryption
- *
- * @see self::setKey()
- * @var array
- * @access private
- */
- var $stream;
- /**
- * Default Constructor.
- *
- * @see \phpseclib\Crypt\Base::__construct()
- * @return \phpseclib\Crypt\RC4
- * @access public
- */
- function __construct()
- {
- parent::__construct(Base::MODE_STREAM);
- }
- /**
- * Test for engine validity
- *
- * This is mainly just a wrapper to set things up for \phpseclib\Crypt\Base::isValidEngine()
- *
- * @see \phpseclib\Crypt\Base::__construct()
- * @param int $engine
- * @access public
- * @return bool
- */
- function isValidEngine($engine)
- {
- switch ($engine) {
- case Base::ENGINE_OPENSSL:
- switch (strlen($this->key)) {
- case 5:
- $this->cipher_name_openssl = 'rc4-40';
- break;
- case 8:
- $this->cipher_name_openssl = 'rc4-64';
- break;
- case 16:
- $this->cipher_name_openssl = 'rc4';
- break;
- default:
- return false;
- }
- }
- return parent::isValidEngine($engine);
- }
- /**
- * RC4 does not use an IV
- *
- * @access public
- * @return bool
- */
- function usesIV()
- {
- return false;
- }
- /**
- * Sets the key length
- *
- * Keys can be between 1 and 256 bytes long.
- *
- * @access public
- * @param int $length
- * @throws \LengthException if the key length is invalid
- */
- function setKeyLength($length)
- {
- if ($length < 8 || $length > 2048) {
- throw new \LengthException('Key size of ' . $length . ' bits is not supported by this algorithm. Only keys between 1 and 256 bytes are supported');
- }
- $this->key_length = $length >> 3;
- parent::setKeyLength($length);
- }
- /**
- * Sets the key length
- *
- * Keys can be between 1 and 256 bytes long.
- *
- * @access public
- * @param int $length
- * @throws \LengthException if the key length is invalid
- */
- function setKey($key)
- {
- $length = strlen($key);
- if ($length < 1 || $length > 256) {
- throw new \LengthException('Key size of ' . $length . ' bytes is not supported by RC4. Keys must be between 1 and 256 bytes long');
- }
- parent::setKey($key);
- }
- /**
- * Encrypts a message.
- *
- * @see \phpseclib\Crypt\Base::decrypt()
- * @see self::_crypt()
- * @access public
- * @param string $plaintext
- * @return string $ciphertext
- */
- function encrypt($plaintext)
- {
- if ($this->engine != Base::ENGINE_INTERNAL) {
- return parent::encrypt($plaintext);
- }
- return $this->_crypt($plaintext, self::ENCRYPT);
- }
- /**
- * Decrypts a message.
- *
- * $this->decrypt($this->encrypt($plaintext)) == $this->encrypt($this->encrypt($plaintext)).
- * At least if the continuous buffer is disabled.
- *
- * @see \phpseclib\Crypt\Base::encrypt()
- * @see self::_crypt()
- * @access public
- * @param string $ciphertext
- * @return string $plaintext
- */
- function decrypt($ciphertext)
- {
- if ($this->engine != Base::ENGINE_INTERNAL) {
- return parent::decrypt($ciphertext);
- }
- return $this->_crypt($ciphertext, self::DECRYPT);
- }
- /**
- * Encrypts a block
- *
- * @access private
- * @param string $in
- */
- function _encryptBlock($in)
- {
- // RC4 does not utilize this method
- }
- /**
- * Decrypts a block
- *
- * @access private
- * @param string $in
- */
- function _decryptBlock($in)
- {
- // RC4 does not utilize this method
- }
- /**
- * Setup the key (expansion)
- *
- * @see \phpseclib\Crypt\Base::_setupKey()
- * @access private
- */
- function _setupKey()
- {
- $key = $this->key;
- $keyLength = strlen($key);
- $keyStream = range(0, 255);
- $j = 0;
- for ($i = 0; $i < 256; $i++) {
- $j = ($j + $keyStream[$i] + ord($key[$i % $keyLength])) & 255;
- $temp = $keyStream[$i];
- $keyStream[$i] = $keyStream[$j];
- $keyStream[$j] = $temp;
- }
- $this->stream = array();
- $this->stream[self::DECRYPT] = $this->stream[self::ENCRYPT] = array(
- 0, // index $i
- 0, // index $j
- $keyStream
- );
- }
- /**
- * Encrypts or decrypts a message.
- *
- * @see self::encrypt()
- * @see self::decrypt()
- * @access private
- * @param string $text
- * @param int $mode
- * @return string $text
- */
- function _crypt($text, $mode)
- {
- if ($this->changed) {
- $this->_setup();
- $this->changed = false;
- }
- $stream = &$this->stream[$mode];
- if ($this->continuousBuffer) {
- $i = &$stream[0];
- $j = &$stream[1];
- $keyStream = &$stream[2];
- } else {
- $i = $stream[0];
- $j = $stream[1];
- $keyStream = $stream[2];
- }
- $len = strlen($text);
- for ($k = 0; $k < $len; ++$k) {
- $i = ($i + 1) & 255;
- $ksi = $keyStream[$i];
- $j = ($j + $ksi) & 255;
- $ksj = $keyStream[$j];
- $keyStream[$i] = $ksj;
- $keyStream[$j] = $ksi;
- $text[$k] = $text[$k] ^ chr($keyStream[($ksj + $ksi) & 255]);
- }
- return $text;
- }
- }
|