128 lines
3.5 KiB
PHP
128 lines
3.5 KiB
PHP
<?php
|
|
|
|
/**
|
|
* PKCS#8 Formatted RSA Key Handler
|
|
*
|
|
* PHP version 5
|
|
*
|
|
* Used by PHP's openssl_public_encrypt() and openssl's rsautl (when -pubin is set)
|
|
*
|
|
* Processes keys with the following headers:
|
|
*
|
|
* -----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
* -----BEGIN PRIVATE KEY-----
|
|
* -----BEGIN PUBLIC KEY-----
|
|
*
|
|
* Analogous to ssh-keygen's pkcs8 format (as specified by -m). Although PKCS8
|
|
* is specific to private keys it's basically creating a DER-encoded wrapper
|
|
* for keys. This just extends that same concept to public keys (much like ssh-keygen)
|
|
*
|
|
* @author Jim Wigginton <terrafrost@php.net>
|
|
* @copyright 2015 Jim Wigginton
|
|
* @license http://www.opensource.org/licenses/mit-license.html MIT License
|
|
* @link http://phpseclib.sourceforge.net
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace phpseclib3\Crypt\RSA\Formats\Keys;
|
|
|
|
use phpseclib3\Common\Functions\Strings;
|
|
use phpseclib3\Crypt\Common\Formats\Keys\PKCS8 as Progenitor;
|
|
use phpseclib3\Exception\UnexpectedValueException;
|
|
use phpseclib3\File\ASN1;
|
|
use phpseclib3\Math\BigInteger;
|
|
|
|
/**
|
|
* PKCS#8 Formatted RSA Key Handler
|
|
*
|
|
* @author Jim Wigginton <terrafrost@php.net>
|
|
*/
|
|
abstract class PKCS8 extends Progenitor
|
|
{
|
|
/**
|
|
* OID Name
|
|
*
|
|
* @var string
|
|
*/
|
|
public const OID_NAME = 'rsaEncryption';
|
|
|
|
/**
|
|
* OID Value
|
|
*
|
|
* @var string
|
|
*/
|
|
public const OID_VALUE = '1.2.840.113549.1.1.1';
|
|
|
|
/**
|
|
* Child OIDs loaded
|
|
*
|
|
* @var bool
|
|
*/
|
|
protected static $childOIDsLoaded = false;
|
|
|
|
/**
|
|
* Break a public or private key down into its constituent components
|
|
*
|
|
* @param string|array $key
|
|
*/
|
|
public static function load($key, ?string $password = null): array
|
|
{
|
|
if (!Strings::is_stringable($key)) {
|
|
throw new UnexpectedValueException('Key should be a string - not a ' . gettype($key));
|
|
}
|
|
|
|
if (str_contains($key, 'PUBLIC')) {
|
|
$components = ['isPublicKey' => true];
|
|
} elseif (str_contains($key, 'PRIVATE')) {
|
|
$components = ['isPublicKey' => false];
|
|
} else {
|
|
$components = [];
|
|
}
|
|
|
|
$key = parent::load($key, $password);
|
|
|
|
if (isset($key['privateKey'])) {
|
|
if (!isset($components['isPublicKey'])) {
|
|
$components['isPublicKey'] = false;
|
|
}
|
|
$type = 'private';
|
|
} else {
|
|
if (!isset($components['isPublicKey'])) {
|
|
$components['isPublicKey'] = true;
|
|
}
|
|
$type = 'public';
|
|
}
|
|
|
|
$result = $components + PKCS1::load($key[$type . 'Key']);
|
|
|
|
if (isset($key['meta'])) {
|
|
$result['meta'] = $key['meta'];
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Convert a private key to the appropriate format.
|
|
*/
|
|
public static function savePrivateKey(BigInteger $n, BigInteger $e, BigInteger $d, array $primes, array $exponents, array $coefficients, ?string $password = null, array $options = []): string
|
|
{
|
|
$key = PKCS1::savePrivateKey($n, $e, $d, $primes, $exponents, $coefficients);
|
|
$key = ASN1::extractBER($key);
|
|
return self::wrapPrivateKey($key, [], null, $password, null, '', $options);
|
|
}
|
|
|
|
/**
|
|
* Convert a public key to the appropriate format
|
|
*
|
|
* @param array $options optional
|
|
*/
|
|
public static function savePublicKey(BigInteger $n, BigInteger $e, array $options = []): string
|
|
{
|
|
$key = PKCS1::savePublicKey($n, $e);
|
|
$key = ASN1::extractBER($key);
|
|
return self::wrapPublicKey($key, null);
|
|
}
|
|
}
|