|
|
<?php
|
|
|
|
|
|
namespace lib;
|
|
|
|
|
|
class WXBizDataCrypt
|
|
|
{
|
|
|
|
|
|
private $appid;
|
|
|
private $sessionKey;
|
|
|
|
...
|
...
|
@@ -11,8 +13,9 @@ class WXBizDataCrypt |
|
|
* @param $sessionKey string 用户在小程序登录后获取的会话密钥
|
|
|
* @param $appid string 小程序的appid
|
|
|
*/
|
|
|
public function __construct( $appid, $sessionKey)
|
|
|
public function __construct($appid, $sessionKey)
|
|
|
{
|
|
|
|
|
|
$this->sessionKey = $sessionKey;
|
|
|
$this->appid = $appid;
|
|
|
}
|
...
|
...
|
@@ -26,42 +29,142 @@ class WXBizDataCrypt |
|
|
*
|
|
|
* @return int 成功0,失败返回对应的错误码
|
|
|
*/
|
|
|
public function decryptData( $encryptedData, $iv, &$data )
|
|
|
public function decryptData($encryptedData, $iv, &$data)
|
|
|
{
|
|
|
if (strlen($this->sessionKey) != 24) {
|
|
|
return ErrorCode::$IllegalAesKey;
|
|
|
}
|
|
|
$aesKey=base64_decode($this->sessionKey);
|
|
|
$aesKey = base64_decode($this->sessionKey);
|
|
|
|
|
|
|
|
|
if (strlen($iv) != 24) {
|
|
|
return ErrorCode::$IllegalIv;
|
|
|
}
|
|
|
$aesIV=base64_decode($iv);
|
|
|
$aesIV = base64_decode($iv);
|
|
|
|
|
|
$aesCipher=base64_decode($encryptedData);
|
|
|
$aesCipher = base64_decode($encryptedData);
|
|
|
|
|
|
$result=openssl_decrypt($aesCipher, "AES-128-CBC", $aesKey, 1, $aesIV);
|
|
|
$pc = new Prpcrypt($aesKey);
|
|
|
$result = $pc->decrypt($aesCipher, $aesIV);
|
|
|
|
|
|
$dataObj=json_decode($result);
|
|
|
print_r($aesCipher);
|
|
|
print_r("=======");
|
|
|
print_r($this->appid);
|
|
|
return;
|
|
|
if( $dataObj == NULL )
|
|
|
{
|
|
|
return ErrorCode::$IllegalBuffer;
|
|
|
if ($result[0] != 0) {
|
|
|
return $result[0];
|
|
|
}
|
|
|
if( $dataObj->watermark->appid != $this->appid )
|
|
|
{
|
|
|
|
|
|
$dataObj = json_decode($result[1]);
|
|
|
if ($dataObj == NULL) {
|
|
|
return ErrorCode::$IllegalBuffer;
|
|
|
}
|
|
|
if ($dataObj->watermark->appid != $this->appid) {
|
|
|
return ErrorCode::$IllegalBuffer;
|
|
|
}
|
|
|
$data = $result;
|
|
|
return ErrorCode::$OK;
|
|
|
$data = $result[1];
|
|
|
return ErrorCode::$OK;
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* PKCS7Encoder class
|
|
|
*
|
|
|
* 提供基于PKCS7算法的加解密接口.
|
|
|
*/
|
|
|
class PKCS7Encoder
|
|
|
{
|
|
|
public static $block_size = 16;
|
|
|
|
|
|
/**
|
|
|
* 对需要加密的明文进行填充补位
|
|
|
* @param $text 需要进行填充补位操作的明文
|
|
|
* @return 补齐明文字符串
|
|
|
*/
|
|
|
function encode($text)
|
|
|
{
|
|
|
$block_size = PKCS7Encoder::$block_size;
|
|
|
$text_length = strlen($text);
|
|
|
//计算需要填充的位数
|
|
|
$amount_to_pad = PKCS7Encoder::$block_size - ($text_length % PKCS7Encoder::$block_size);
|
|
|
if ($amount_to_pad == 0) {
|
|
|
$amount_to_pad = PKCS7Encoder::block_size;
|
|
|
}
|
|
|
//获得补位所用的字符
|
|
|
$pad_chr = chr($amount_to_pad);
|
|
|
$tmp = "";
|
|
|
for ($index = 0; $index < $amount_to_pad; $index++) {
|
|
|
$tmp .= $pad_chr;
|
|
|
}
|
|
|
return $text . $tmp;
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 对解密后的明文进行补位删除
|
|
|
* @param decrypted 解密后的明文
|
|
|
* @return 删除填充补位后的明文
|
|
|
*/
|
|
|
function decode($text)
|
|
|
{
|
|
|
|
|
|
$pad = ord(substr($text, -1));
|
|
|
if ($pad < 1 || $pad > 32) {
|
|
|
$pad = 0;
|
|
|
}
|
|
|
return substr($text, 0, (strlen($text) - $pad));
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* Prpcrypt class
|
|
|
*
|
|
|
*
|
|
|
*/
|
|
|
class Prpcrypt
|
|
|
{
|
|
|
public $key;
|
|
|
|
|
|
function __construct($k)
|
|
|
{
|
|
|
$this->key = $k;
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 对密文进行解密
|
|
|
* @param string $aesCipher 需要解密的密文
|
|
|
* @param string $aesIV 解密的初始向量
|
|
|
* @return string 解密得到的明文
|
|
|
*/
|
|
|
public function decrypt($aesCipher, $aesIV)
|
|
|
{
|
|
|
|
|
|
|
|
|
try {
|
|
|
|
|
|
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
|
|
|
print_r($module);return;
|
|
|
mcrypt_generic_init($module, $this->key, $aesIV);
|
|
|
|
|
|
//解密
|
|
|
$decrypted = mdecrypt_generic($module, $aesCipher);
|
|
|
mcrypt_generic_deinit($module);
|
|
|
mcrypt_module_close($module);
|
|
|
} catch (Exception $e) {
|
|
|
return array(ErrorCode::$IllegalBuffer, null);
|
|
|
}
|
|
|
|
|
|
|
|
|
try {
|
|
|
//去除补位字符
|
|
|
$pkc_encoder = new PKCS7Encoder;
|
|
|
$result = $pkc_encoder->decode($decrypted);
|
|
|
|
|
|
} catch (Exception $e) {
|
|
|
//print $e;
|
|
|
return array(ErrorCode::$IllegalBuffer, null);
|
|
|
}
|
|
|
return array(0, $result);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
class ErrorCode
|
|
|
{
|
|
|
public static $OK = 0;
|
...
|
...
|
|