Personal/drupal-civicrm
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

First commit

Browse source
This commit is contained in:
Theodotos Andreou 2018-01-14 13:10:16 +00:00
commit c6e2478c40
13918 changed files with 2303184 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

112
sites/all/modules/civicrm/CRM/Utils/Crypt.php Normal file
View file

@ -0,0 +1,112 @@
<?php
/*
+--------------------------------------------------------------------+
| CiviCRM version 4.7 |
+--------------------------------------------------------------------+
| Copyright CiviCRM LLC (c) 2004-2017 |
+--------------------------------------------------------------------+
| This file is a part of CiviCRM. |
| |
| CiviCRM is free software; you can copy, modify, and distribute it |
| under the terms of the GNU Affero General Public License |
| Version 3, 19 November 2007 and the CiviCRM Licensing Exception. |
| |
| CiviCRM is distributed in the hope that it will be useful, but |
| WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
| See the GNU Affero General Public License for more details. |
| |
| You should have received a copy of the GNU Affero General Public |
| License and the CiviCRM Licensing Exception along |
| with this program; if not, contact CiviCRM LLC |
| at info[AT]civicrm[DOT]org. If you have questions about the |
| GNU Affero General Public License or the licensing of CiviCRM, |
| see the CiviCRM license FAQ at http://civicrm.org/licensing |
+--------------------------------------------------------------------+
*/
/**
*
* @package CRM
* @copyright CiviCRM LLC (c) 2004-2017
*/
class CRM_Utils_Crypt {
/**
* Encrypts a string using AES256 in ECB mode, if encryption is enabled.
*
* After encrypting the string, it is base64 encoded.
*
* If encryption is not enabled, either due to CIVICRM_SITE_KEY being
* undefined or due to unavailability of the mcrypt module, the string is
* merely base64 encoded and is not encrypted at all.
*
* @param string $string
* Plaintext to be encrypted.
* @return string
* Base64-encoded ciphertext, or base64-encoded plaintext if encryption is
* disabled or unavailable.
*/
public static function encrypt($string) {
if (empty($string)) {
return $string;
}
if (function_exists('mcrypt_module_open') &&
defined('CIVICRM_SITE_KEY')
) {
$td = mcrypt_module_open(MCRYPT_RIJNDAEL_256, '', MCRYPT_MODE_ECB, '');
// ECB mode - iv not needed - CRM-8198
$iv = '00000000000000000000000000000000';
$ks = mcrypt_enc_get_key_size($td);
$key = substr(sha1(CIVICRM_SITE_KEY), 0, $ks);
mcrypt_generic_init($td, $key, $iv);
$string = mcrypt_generic($td, $string);
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
}
return base64_encode($string);
}
/**
* Decrypts ciphertext encrypted with AES256 in ECB mode, if possible.
*
* If the mcrypt module is not available or if CIVICRM_SITE_KEY is not set,
* the provided ciphertext is only base64-decoded, not decrypted.
*
* @param string $string
* Ciphertext to be decrypted.
* @return string
* Plaintext, or base64-decoded ciphertext if encryption is disabled or
* unavailable.
*/
public static function decrypt($string) {
if (empty($string)) {
return $string;
}
$string = base64_decode($string);
if (empty($string)) {
return $string;
}
if (function_exists('mcrypt_module_open') &&
defined('CIVICRM_SITE_KEY')
) {
$td = mcrypt_module_open(MCRYPT_RIJNDAEL_256, '', MCRYPT_MODE_ECB, '');
// ECB mode - iv not needed - CRM-8198
$iv = '00000000000000000000000000000000';
$ks = mcrypt_enc_get_key_size($td);
$key = substr(sha1(CIVICRM_SITE_KEY), 0, $ks);
mcrypt_generic_init($td, $key, $iv);
$string = rtrim(mdecrypt_generic($td, $string));
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
}
return $string;
}
}