Issues decoding with PHP OpenSSL generated private key #37

markharding · 2014-12-16T10:51:08Z

Encryption works fine, and I can decrypt again in PHP using the private key. However, using a PHP5.5 private key, I'm unable to decrypt with JSEncrypt. PHP 5.4 generated private keys on my mac is able to decrypt with JSEncrypt however.

I do notice that the key no longer included RSA on the failing private keys (http://php.net/manual/en/function.openssl-pkey-export.php#101839)

Example Public Key:

Example Private Key:

Example of 'testing' encrypted:

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

I've attempted multiple key lengths etc but that makes no difference.

SSL VERSIONS:

WORKS WITH: OpenSSL 0.9.8za 5 Jun 2014
FAILS WITH: OpenSSL 1.0.1f 6 Jan 2014

The text was updated successfully, but these errors were encountered:

resolves issue with OpenSSL private keys #37

gramo44 · 2017-10-26T21:56:01Z

Maybe my solution clarifies this issue

The only problem I have is when I send a long text.

i.e.
If I use private_key_bits of 1024 I can send
"José compró en Perú una vieja zampoña. Excusándose, Sofía tiró su whisky al desagüe de la banqueta."
nothing longer, after that jsencrypt returns false.

If I use private_key_bits of 512 I can send
"José compró en Perú una vieja zampoña. Excusánd"
nothing longer, after that jsencrypt returns false.

I don't know why is that. It seems that the size of the data jsencrypt can send depends on the size of the key.

On long strings JavaScript console reports: "Message too long for RSA"

If someone find how to fix I'll appreciate a lot that information

My working code is as follows:

<?php
    //------------------------------------------------------------
    // Global Settings.
    //------------------------------------------------------------
    ini_set('display_errors', 1);
    error_reporting(E_ALL);
    $directorio = "/path/to/key/directory/apache/writable/";
    $nombre_base = "llaves_php";

    //------------------------------------------------------------
    // Initialization.
    //------------------------------------------------------------
    $encabezado_html = "";
    $cuerpo_html = "";

    //------------------------------------------------------------
    // Loading keys
    //------------------------------------------------------------
    list($privateKey, $pubKey) =
        cargar_llaves_RSA($directorio, $nombre_base);

    //------------------------------------------------------------
    // Form that uses javascript to encrypt data.
    // (it uses only the public key)
    //------------------------------------------------------------
    $librerias_html = "
        <script type='text/javascript'
                src='https://ajax.googleapis.com/ajax/libs/".
                    "jquery/3.2.1/jquery.min.js'></script>
        <script type='text/javascript'
                src='lib/jsencrypt.js'></script>
        ";

    $pubKey_html = htmlentities($pubKey);
    $datos_html = "
        <h2>Cifrando con Javascript</h2>
        <input type='text' id='mensaje' />
        <br />
        <button id='ENVIAR'>Enviar</button>
        <br />
        <textarea id='pubkey' style='display: none;'>".
        $pubKey_html.
        "</textarea>
        <script type='text/javascript'>
            $('#ENVIAR').click(function () {
                var codificador = new JSEncrypt();
                codificador.setKey($('#pubkey').val());
                var cifrado = codificador.encrypt($('#mensaje').val());
                window.open('?mensaje=' + encodeURIComponent(cifrado)
                           , '_top');
            });
        </script>
        ";

    //------------------------------------------------------------
    // Decrypting using php (it uses only the privateKey)
    //------------------------------------------------------------
    if (isset($_REQUEST['mensaje'])) {
        openssl_private_decrypt( base64_decode($_REQUEST['mensaje'])
                               , $descifrado
                               , $privateKey);
        $datos_html.= "
            <h2>Descifrando con PHP</h2>
            ".$descifrado."
            ";
    }

    //------------------------------------------------------------
    // HTML DISPLAY
    //------------------------------------------------------------
    $encabezado_html.= "<title>Receptor de mensaje cifrado</title>"
                     . $librerias_html;

    $cuerpo_html.= $datos_html;

    $contenido = "<head>$encabezado_html</head><body>$cuerpo_html</body>";
    $contenido = "<html>$contenido</html>";
    print $contenido;
    
//============================================================
//============================================================
// Functions
//============================================================
//============================================================

    //------------------------------------------------------------
    function cargar_llaves_RSA($directorio, $nombre_base) {
    //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    // PROPÓSITO: Genera o carga desde archivos las llaves RSA
    // ENTRADAS:
    // $directorio: Directorio donde se encuentran los archivos.
    // $nombre_base: Nombre, sin extensión, de los archivos con
    //               las llaves.
    // SALIDAS:
    //------------------------------------------------------------
        if (  !file_exists($directorio.$nombre_base.".crt")
           || !file_exists($directorio.$nombre_base.".pub")) {
            list($privateKey, $pubKey) =
                crear_llaves_RSA($directorio.$nombre_base);
        } else {
            //------------------------------------------------------------
            // CARGA DE LLAVES RSA ARCHIVADAS
            //------------------------------------------------------------
            $privateKey = file_get_contents($directorio.$nombre_base.".crt");
            if (!$privKey = openssl_pkey_get_private($privateKey))
                die('Loading Private Key failed');
            $pubKey  = file_get_contents($directorio.$nombre_base.".pub");
        }

        return array($privateKey, $pubKey);
    }

    //------------------------------------------------------------
    function crear_llaves_RSA($ruta_base) {
    //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    // PROPÓSITO:
    // generacion de llaves RSA en php
    // ENTRADAS:
    // $ruta_base: Ruta de los archivos a generar sin extensión.
    // SALIDAS:
    // Se generarán dos archivos, uno con la llave privada con
    // extensión .crt, el otro con llave pública con extensión
    // .pub; la función retorna tanto la llave pública como la
    // privada en un arreglo.
    //------------------------------------------------------------
        $config = array(
            "private_key_bits" => 1024,
            "private_key_type" => OPENSSL_KEYTYPE_RSA,
        );

        $llavePrivadaCruda = openssl_pkey_new($config);
        openssl_pkey_export_to_file($llavePrivadaCruda, $ruta_base.".crt");
        $privateKey = file_get_contents($ruta_base.".crt");
        openssl_pkey_export($llavePrivadaCruda, $privKey);

        $pubKeyData = openssl_pkey_get_details($llavePrivadaCruda);
        $pubKey = $pubKeyData["key"];
        file_put_contents($ruta_base.".pub", $pubKey);
        openssl_free_key($llavePrivadaCruda);

        return array($privateKey, $pubKey);
    }

    //------------------------------------------------------------
    function Mostrar($valor) {
    //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    // PROPÓSITO: Genera el código HTML para presentar una
    // variable embebida en la página.
    // ENTRADAS:
    // $valor: el valor a presentar.
    // SALIDAS: código html que permite visualizar la variable.
    //------------------------------------------------------------
        $retorno = htmlentities(stripslashes(var_export($valor, true)));
        $retorno = "<pre>$retorno</pre>";
        return $retorno;
    }

?>

This was referenced Dec 16, 2014

resolves issue with OpenSSL private keys #37 #38

Merged

Conversations Minds/mobile#3

Closed

zoloft added a commit that referenced this issue Jan 26, 2015

Merge pull request #38 from markharding/master

f583fc6

resolves issue with OpenSSL private keys #37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Issues decoding with PHP OpenSSL generated private key #37

Issues decoding with PHP OpenSSL generated private key #37

markharding commented Dec 16, 2014

gramo44 commented Oct 26, 2017 •

edited

Loading

Issues decoding with PHP OpenSSL generated private key #37

Issues decoding with PHP OpenSSL generated private key #37

Comments

markharding commented Dec 16, 2014

gramo44 commented Oct 26, 2017 • edited Loading

gramo44 commented Oct 26, 2017 •

edited

Loading