peterurk/cipher

Cipher, an easy method to encrypt and decrypt

Cipher

A simple PHP library to encrypt and decrypt strings. The library supports AES-256-CBC and AES-256-GCM and requires PHP 8.1 or higher., _(*1)

Installation

Install the package through Composer:, _(*2)

composer require peterurk/cipher

Usage

use peterurk\Cipher\Cipher;

$cipher = new Cipher('YourSecretKey');

$encrypted = $cipher->encrypt('message');
$decrypted = $cipher->decrypt($encrypted);

Using environment variables

You can provide the key and cipher method through environment variables:, _(*3)

export CIPHER_KEY=mysecret
export CIPHER_METHOD=AES-256-GCM
export CIPHER_SALT=mysalt

$cipher = new Cipher();

The defaults for the cipher method, tag length and salt are configurable via constants in Cipher., _(*4)

Security considerations

AES-256-CBC is vulnerable to tampering if you do not verify integrity. Enable the --hmac option or pass true as the third constructor argument to automatically append and validate an HMAC. AES-256-GCM already provides authentication and does not need HMAC., _(*5)

CLI

This repository ships with a small CLI tool. Show the help message:, _(*6)

bin/cipher --help

Encrypt a string:, _(*7)

bin/cipher --encrypt "hello" --key mysecret

Decrypt a string:, _(*8)

bin/cipher --decrypt "<ciphertext>" --key mysecret

File encryption

$cipher->encryptFile('input.txt', 'output.enc');
$cipher->decryptFile('output.enc', 'plain.txt');

Encrypt a file from the CLI:, _(*9)

bin/cipher --encrypt-file input.txt --key mysecret > output.enc

Decrypt a file from the CLI:, _(*10)

bin/cipher --decrypt-file output.enc --key mysecret > plain.txt

Large files are processed in chunks so they won't consume excessive memory., _(*11)

Running Tests

composer install
composer test

License

Released under the MIT License., _(*12)