EncryptedPassword.php

Go to the documentation of this file.

<?php
class EncryptedPassword extends ParameterizedPassword {
    protected function getDelimiter() {
        return ':';
    }
 
    protected function getDefaultParams() {
        return [
            'cipher' => $this->config['cipher'],
            'secret' => count( $this->config['secrets'] ) - 1
        ];
    }
 
    public function crypt( $password ) {
        $secret = $this->config['secrets'][$this->params['secret']];
 
        // Clear error string
        while ( openssl_error_string() !== false );
 
        if ( $this->hash ) {
            $decrypted = openssl_decrypt(
                    $this->hash, $this->params['cipher'],
                    $secret, 0, base64_decode( $this->args[0] ) );
            if ( $decrypted === false ) {
                throw new PasswordError( 'Error decrypting password: ' . openssl_error_string() );
            }
            $underlyingPassword = $this->factory->newFromCiphertext( $decrypted );
        } else {
            $underlyingPassword = $this->factory->newFromType( $this->config['underlying'] );
        }
 
        $underlyingPassword->crypt( $password );
        if ( count( $this->args ) ) {
            $iv = base64_decode( $this->args[0] );
        } else {
            $iv = random_bytes( openssl_cipher_iv_length( $this->params['cipher'] ) );
        }
 
        $this->hash = openssl_encrypt(
            $underlyingPassword->toString(), $this->params['cipher'], $secret, 0, $iv );
        if ( $this->hash === false ) {
            throw new PasswordError( 'Error encrypting password: ' . openssl_error_string() );
        }
        $this->args = [ base64_encode( $iv ) ];
    }
 
    public function update() {
        if ( count( $this->args ) != 1 || $this->params == $this->getDefaultParams() ) {
            // Hash does not need updating
            return false;
        }
 
        // Clear error string
        while ( openssl_error_string() !== false );
 
        // Decrypt the underlying hash
        $underlyingHash = openssl_decrypt(
            $this->hash,
            $this->params['cipher'],
            $this->config['secrets'][$this->params['secret']],
            0,
            base64_decode( $this->args[0] )
        );
        if ( $underlyingHash === false ) {
            throw new PasswordError( 'Error decrypting password: ' . openssl_error_string() );
        }
 
        // Reset the params
        $this->params = $this->getDefaultParams();
 
        // Check the key size with the new params
        $iv = random_bytes( openssl_cipher_iv_length( $this->params['cipher'] ) );
        $this->hash = openssl_encrypt(
                $underlyingHash,
                $this->params['cipher'],
                $this->config['secrets'][$this->params['secret']],
                0,
                $iv
            );
        if ( $this->hash === false ) {
            throw new PasswordError( 'Error encrypting password: ' . openssl_error_string() );
        }
 
        $this->args = [ base64_encode( $iv ) ];
 
        return true;
    }
}