Edit Report a Bug

    openssl_private_decrypt

    (PHP 4 >= 4.0.6, PHP 5, PHP 7, PHP 8)

    openssl_private_decrypt — 使用私钥解密数据

    说明

    openssl_private_decrypt(
        string $data,
        string &$decrypted_data,
        OpenSSLAsymmetricKey|OpenSSLCertificate|array|string $private_key,
        int $padding = OPENSSL_PKCS1_PADDING
    ): bool

    openssl_private_decrypt() 解密之前通过 openssl_public_encrypt() 加密的 data，并将结果保存至 decrypted_data 中。

    可以使用该函数来解密只对个人有效的数据。

    参数

    data

    decrypted_data

    private_key

    private_key 必须是跟数据加密相对应的私钥。

    padding

    padding 可以是如下值：OPENSSL_PKCS1_PADDING、OPENSSL_SSLV23_PADDING、OPENSSL_PKCS1_OAEP_PADDING、OPENSSL_NO_PADDING。

    更新日志

    版本 说明
    8.0.0 private_key 现在接受 OpenSSLAsymmetricKey 或 OpenSSLCertificate 实例。之前接受 OpenSSL key 类型或 OpenSSL X.509 类型的 resource。

    参见

    add a note add a note

    User Contributed Notes 3 notes

    up
    12
    wfredkNOSPAM at L5DevelopmentNOSPAM dot com
    22 years ago
    Encrypt using public key, decrypt using private key.

    Use this to store stuff in your database: Unless someone
    has your private key, the database contents are useless.

    Also, use this for sending to a specific individual:  Get
    their public key, encrypt the message, only they can use
    their private key to decode it.

    <?php
    echo "Source: $source";
    $fp=fopen("/path/to/certificate.crt","r");
    $pub_key=fread($fp,8192);
    fclose($fp);
    openssl_get_publickey($pub_key);
    /*
    * NOTE:  Here you use the $pub_key value (converted, I guess)
    */
    openssl_public_encrypt($source,$crypttext,$pub_key);
    echo     "String crypted: $crypttext";

    $fp=fopen("/path/to/private.key","r");
    $priv_key=fread($fp,8192);
    fclose($fp);
    // $passphrase is required if your key is encoded (suggested)
    $res = openssl_get_privatekey($priv_key,$passphrase);
    /*
    * NOTE:  Here you use the returned resource value
    */
    openssl_private_decrypt($crypttext,$newsource,$res);
    echo     "String decrypt : $newsource";
    ?>
    up
    -8
    Anonymous
    3 years ago
    <?php

    // Generate keys in console:
    // $ openssl genrsa -out private_key 8192
    // $ openssl rsa -in private_key -out public_key.pem -pubout -outform PEM

    // Test data
    $data = 'Hello world';

    // Encrypt data with public key
    $publicKey = file_get_contents('public_key.pem');
    $encrypted = null;

    openssl_public_encrypt($data, $encrypted, $publicKey);

    echo     'Encrypted data', PHP_EOL;
    echo     base64_encode($encrypted), PHP_EOL;

    echo     PHP_EOL;

    // Decrypt data with private key
    $privateKey = file_get_contents('private_key');
    $decrypted = null;

    openssl_private_decrypt($encrypted, $decrypted, $privateKey);

    echo     'Decrypted data', PHP_EOL;
    echo     $decrypted, PHP_EOL;
    up
    -51
    tjusongchao at gmail dot com
    9 years ago
    of course you have to add the openssl extension to you php environment.
    add a note add a note
    To Top