2017 © Pedro Peláez
 

library elocryptfive

Automatically encrypt and decrypt Eloquent attributes with ease.

image

involix/elocryptfive

Automatically encrypt and decrypt Eloquent attributes with ease.

  • Thursday, April 19, 2018
  • by eugenecooper
  • Repository
  • 1 Watchers
  • 0 Stars
  • 137 Installations
  • PHP
  • 0 Dependents
  • 0 Suggesters
  • 22 Forks
  • 0 Open issues
  • 19 Versions
  • 85 % Grown

The README.md

Eloquent Encryption/Decryption for Laravel 5/6/7/8

Automatically encrypt and decrypt Laravel Eloquent values., (*1)

READ THIS FIRST

Encrypted values are usually longer than plain text values. Sometimes much longer. You may find that the column widths in your database tables need to be extended to store the encrypted values., (*2)

If you are encrypting long strings such as JSON blobs then the encrypted values may be longer than a VARCHAR field can support, and you may need to extend your column types to TEXT or LONGTEXT., (*3)

What Does This Do?

This encrypts and decrypts columns stored in database tables in Laravel applications transparently, by encrypting data as it is stored in the model attributes and decrypting data as it is recalled from the model attributes., (*4)

All data that is encrypted is prefixed with a tag (default __ELOCRYPT__:) so that encrypted data can be easily identified., (*5)

This supports columns that store either encrypted or non-encrypted data to make migration easier. Data can be read from columns correctly regardless of whether it is encrypted or not but will be automatically encrypted when it is saved back into those columns., (*6)

Requirements and Recommendations

  • Laravel 5+
  • PHP > 7
  • PHP openssl extension.
  • A working OpenSSL implementation on your OS. OpenSSL comes pre-built with most Linux distributions and other forms of Unix such as *BSD. There may or may not be a working OpenSSL implementation on a Windows system depending on how your LA?P stack was built. I cannot offer support for installing or using ElocryptFive on systems that do not have an OpenSSL library.

Contributors

This is Darren Taylor's Laravel 4 "elocrypt" package, ported to Laravel 6/7/8 by Eugene Cooper., (*7)

Thanks to Brandon Surowiec for some extensive refactoring of the internal methods., (*8)

Installation

This package can be installed via Composer by adding the following to your composer.json file:, (*9)

    "require": {
        "involix/elocrypt": "^1.8"
    }

You must then run the following command:, (*10)

    composer update

Once composer update has finished, then add the service provider to the providers array in your application's config/app.php file:, (*11)

    'providers' => [
        ...
        Involix\Elocrypt\ElocryptServiceProvider::class,
    ],

Configuration

Publish the config file with:, (*12)

    php artisan vendor:publish --provider='Involix\Elocrypt\ElocryptServiceProvider'

You may then change the default prefix tag string in your .env config file:, (*13)

    ELOCRYPT_PREFIX=__encrypted__

or alternatively you can change the default right in the config/elocrypt.php file:, (*14)

    return [
        'prefix' => env('ELOCRYPT_PREFIX', '__encrypted__')
    ]

Usage

Simply reference the Elocrypt trait in any Eloquent Model you wish to apply encryption to and define an $encrypts array containing a list of the attributes to encrypt., (*15)

For example:, (*16)

    use Involix\Elocrypt\Elocrypt;

    class User extends Eloquent {

        use Elocrypt;

        /**
         * The attributes that should be encrypted on save.
         *
         * @var array
         */
        protected $encrypts = [
            'address_line_1', 'first_name', 'last_name', 'postcode'
        ];
    }

You can combine $casts and $encrypts to store encrypted arrays. An array will first be converted to JSON and then encrypted., (*17)

For example:, (*18)

    use Involix\Elocrypt\Elocrypt;

    class User extends Eloquent {

        use Elocrypt;

        protected $casts = ['extended_data' => 'array'];

        protected $encrypts = ['extended_data'];
    }

How it Works?

By including the Elocrypt trait, the setAttribute() and getAttributeFromArray() methods provided by Eloquent are overridden to include an additional step. This additional step simply checks whether the attribute being set or get is included in the $encrypts array on the model, and either encrypts/decrypts it accordingly., (*19)

Summary of Methods in Illuminate\Database\Eloquent\Model

This surveys the major methods in the Laravel Model class as of Laravel and checks to see how those models set attributes and hence how they are affected by this trait., (*20)

  • constructor -- calls fill()
  • fill() -- calls setAttribute() which has been extended to encrypt the data.
  • hydrate() -- TBD
  • create() -- calls constructor and hence fill()
  • firstOrCreate -- calls constructor
  • firstOrNew -- calls constructor
  • updateOrCreate -- calls fill()
  • update() -- calls fill()
  • toArray() -- calls attributesToArray()
  • jsonSerialize() -- calls toArray()
  • toJson() -- calls toArray()
  • attributesToArray() -- calls getArrayableAttributes().
  • getAttribute -- calls getAttributeValue()
  • getAttributeValue -- calls getAttributeFromArray()
  • getAttributeFromArray -- calls getArrayableAttributes()
  • getArrayableAttributes -- has been extended here to decrypt the data.
  • setAttribute -- has been extended here to encrypt the data.
  • getAttributes -- has been extended here to decrypt the data.

Keys and IVs

The key and encryption algorithm used are as per the Laravel Encrypter service, and defined in config/app.php as follows:, (*21)

    'key' => env('APP_KEY', 'SomeRandomString'),

    'cipher' => 'AES-256-CBC',

I recommend generating a random 32 character string for the encryption key, and using AES-256-CBC as the cipher for encrypting data. If you are encrypting long data strings then AES-256-CBC-HMAC-SHA1 will be better., (*22)

The IV for encryption is randomly generated., (*23)

FAQ

Manually Encrypting Data

You can manually encrypt or decrypt data using the encryptedAttribute() and decryptedAttribute() functions. An example is as follows:, (*24)

    $user = new User();
    $encryptedEmail = $user->encryptedAttribute(Input::get("email"));

Encryption and Searching

You will not be able to search on encrypted data, because it is encrypted. Comparing encrypted values would require a fixed IV which introduces security issues., (*25)

If you need to search on data then either:, (*26)

  • Leave it unencrypted, or
  • Hash the data and search on the hash instead of the encrypted value. Use a well known hash algorithm such as SHA256.

You could store both a hashed and an encrypted value, use the hashed value for searching and retrieve the encrypted value for other uses., (*27)

Encryption and Authentication

The same problem with searching applies for authentication because authentication requires a user search., (*28)

If you have an authentication table where you encrypt the user data including the login data (for example the email), this will prevent Auth::attempt from working. For example this code will not work:, (*29)

    $auth = Auth::attempt(array(
                "email"     =>  Input::get("email"),
                "password"  =>  Input::get("password"),
    ), $remember);

As for searching, comparing the encrypted email will not work, because it would require a fixed IV which introduces security issues., (*30)

What you will need to do instead is to hash the email address using a well known hash function (e.g. SHA256 or RIPE-MD160) rather than encrypt it, and then in the Auth::attempt function you can compare the hashes., (*31)

If you need access to the email address then you could store both a hashed and an encrypted email address, use the hashed value for authentication and retrieve the encrypted value for other uses (e.g. sending emails)., (*32)

The Versions

19/04 2018

dev-master

9999999-dev

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

19/04 2018

1.6.1

1.6.1.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

19/04 2018

1.6.0

1.6.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

18/04 2018

v1.5.9

1.5.9.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

18/04 2018

v1.5.8

1.5.8.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

18/04 2018

1.5.7

1.5.7.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

22/09 2016

v1.5.6

1.5.6.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

27/08 2016

v1.5.5

1.5.5.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

27/08 2016

v1.5.4

1.5.4.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

26/08 2016

v1.5.3

1.5.3.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

26/08 2016

dev-analysis-8bDPy4

dev-analysis-8bDPy4

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

17/05 2016

v1.5.2

1.5.2.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

17/05 2016

v1.5.1

1.5.1.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

22/04 2016

v1.5

1.5.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

06/12 2015

v1.4

1.4.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

MIT

The Requires

 

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

06/12 2015

v1.3

1.3.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

The Requires

 

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

03/12 2015

v1.2

1.2.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

The Requires

 

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

22/10 2015

v1.1

1.1.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

The Requires

 

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes

25/09 2015

v1.0

1.0.0.0

Automatically encrypt and decrypt Eloquent attributes with ease.

  Sources   Download

The Requires

 

by Del
by Darren Taylor

laravel eloquent encrypt encryption l5 laravel5 eloquent encryption eloquent aes elocrypt laravel5 encryption laravel5 aes