Mcrypt

安装／配置
预定义常量
Mcrypt 密码
Mcrypt 函数
- mcrypt_create_iv — 从随机源创建初始向量
- mcrypt_decrypt — 使用给定参数解密密文
- mcrypt_enc_get_algorithms_name — 返回打开的算法名称
- mcrypt_enc_get_block_size — 返回打开的算法的分组大小
- mcrypt_enc_get_iv_size — 返回打开的算法的初始向量大小
- mcrypt_enc_get_key_size — 返回打开的模式所能支持的最长密钥
- mcrypt_enc_get_modes_name — 返回打开的模式的名称
- mcrypt_enc_get_supported_key_sizes — 以数组方式返回打开的算法所支持的密钥长度
- mcrypt_enc_is_block_algorithm_mode — 检测打开的模式是否支持分组加密
- mcrypt_enc_is_block_algorithm — 检测打开模式的算法是否为分组算法
- mcrypt_enc_is_block_mode — 检测打开的模式是否以分组方式输出
- mcrypt_enc_self_test — 在打开的模块上进行自检
- mcrypt_encrypt — 使用给定参数加密明文
- mcrypt_generic_deinit — 对加密模块进行清理工作
- mcrypt_generic_init — 初始化加密所需的缓冲区
- mcrypt_generic — 加密数据
- mcrypt_get_block_size — 获得加密算法的分组大小
- mcrypt_get_cipher_name — 获取加密算法名称
- mcrypt_get_iv_size — 返回指定算法/模式组合的初始向量大小
- mcrypt_get_key_size — 获取指定加密算法的密钥大小
- mcrypt_list_algorithms — 获取支持的加密算法
- mcrypt_list_modes — 获取所支持的模式
- mcrypt_module_close — 关闭加密模块
- mcrypt_module_get_algo_block_size — 返回指定算法的分组大小
- mcrypt_module_get_algo_key_size — 获取打开模式所支持的最大密钥大小
- mcrypt_module_get_supported_key_sizes — 以数组形式返回打开的算法所支持的密钥大小
- mcrypt_module_is_block_algorithm_mode — 返回指定模块是否是分组加密模式
- mcrypt_module_is_block_algorithm — 检测指定算法是否为分组加密算法
- mcrypt_module_is_block_mode — 检测指定模式是否以分组方式输出
- mcrypt_module_open — 打开算法和模式对应的模块
- mcrypt_module_self_test — 在指定模块上执行自检
- mdecrypt_generic — 解密数据

add a note

User Contributed Notes 8 notes

down

nishanth at sintheetaa dot in ¶

4 years ago


Issue Solved when installing php7.2-mcrypt

I was also facing the same issue. Check this link https://stackoverflow.com/q/48275494/7713811 to get the right solution for installing it in PHP

down

zelnaga at gmail dot com ¶

2 years ago


If you're wanting to use mcrypt on a newer version of PHP where it's been deprecated try the shim for it instead:

https://github.com/phpseclib/mcrypt_compat

down

Kyle T ¶

4 years ago


This was posted before by another user but has been downvoted. I just wanted to confirm that we suffered massive performance issues related to mcrypt on CentOS (PHP 5.6.32) that are not present in other flavors of Linux. 

A sampling of 25,000 encrypts/decrypts takes 4-5x longer when running mcrypt on Centos 7 as compared to Ubuntu. Switching out mcrypt for OpenSSL on Centos will result in a massive increase in performance. 

For lower traffic website it can be negligible, but when you start seeing significant traffic/load it will quickly bring down a server.

down

Maarten Malaise ¶

12 years ago


people using phpmyadmin are redirected to this manual if they don't have mcrypt installed. If you want to install mcrypt on debian, first check your php version:

yourserver# php --version

Then install the appropriate version of mcrypt (php5-mcrypt if your php version is 5.x)

yourserver# apt-get install php4-mcrypt
...or...
yourserver# apt-get install php5-mcrypt

down

simonhf at gmail dot com ¶

6 years ago


Note that there are severe performance problems with PHP mcrypt on many CentOS versions. Please see this CentOS bug:
http://bugs.centos.org/view.php?id=8954

down

Anonymous ¶

10 years ago


These are two simple functions I built for 256-bit encryption/decryption with mcrypt.  I've decided to use MCRYPT_RIJNDAEL_128 because it's AES-compliant, and MCRYPT_MODE_CBC.  (ECB mode is inadequate for many purposes because it does not use an IV.)

This function stores a hash of the data to verify that the data was decrypted successfully, but this could be easily removed if necessary.

<?php
function encrypt($decrypted, $password, $salt='!kQm*fF3pXe1Kbm%9') { 
// Build a 256-bit $key which is a SHA256 hash of $salt and $password.
$key = hash('SHA256', $salt . $password, true);
// Build $iv and $iv_base64.  We use a block size of 128 bits (AES compliant) and CBC mode.  (Note: ECB mode is inadequate as IV is not used.)
srand(); $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC), MCRYPT_RAND);
 if (strlen($iv_base64 = rtrim(base64_encode($iv), '=')) != 22) return false;
// Encrypt $decrypted and an MD5 of $decrypted using $key.  MD5 is fine to use here because it's just to verify successful decryption.
$encrypted = base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, $decrypted . md5($decrypted), MCRYPT_MODE_CBC, $iv));
// We're done!
return $iv_base64 . $encrypted;
 } 

function decrypt($encrypted, $password, $salt='!kQm*fF3pXe1Kbm%9') {
// Build a 256-bit $key which is a SHA256 hash of $salt and $password.
$key = hash('SHA256', $salt . $password, true);
// Retrieve $iv which is the first 22 characters plus ==, base64_decoded.
$iv = base64_decode(substr($encrypted, 0, 22) . '==');
// Remove $iv from $encrypted.
$encrypted = substr($encrypted, 22);
// Decrypt the data.  rtrim won't corrupt the data because the last 32 characters are the md5 hash; thus any \0 character has to be padding.
$decrypted = rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, base64_decode($encrypted), MCRYPT_MODE_CBC, $iv), "\0\4");
// Retrieve $hash which is the last 32 characters of $decrypted.
$hash = substr($decrypted, -32);
// Remove the last 32 characters from $decrypted.
$decrypted = substr($decrypted, 0, -32);
// Integrity check.  If this fails, either the data is corrupted, or the password/salt was incorrect.
if (md5($decrypted) != $hash) return false;
// Yay!
return $decrypted;
 }
?>

down

ghoffman at salientdigital dot com ¶

11 years ago


If you want a quick way to see what ciphers, modes, key, block and iv sizes are supported on your server, try something like the following. 

Note: I used this simple bash: `locate libmcrypt` from terminal on Mac OS X to determine the install paths to the algorithms and modes directories. Lots of function calls generate warnings for certain ciphers, hence the use of error suppression.

<?php

$modes = mcrypt_list_modes();
$algorithms = mcrypt_list_algorithms();
foreach($algorithms as $cipher)
{
    echo "<h1 style=\"border-top:1px solid black;\">".$cipher."</h1>\n";
    foreach($modes as $mode)
    {
        echo "<h3>".$mode."</h3>\n";
        @$td = mcrypt_module_open(
            $cipher,
            '/usr/local/libmcrypt-2.5.8/modules/algorithms/',
            $mode,
            '/usr/local/libmcrypt-2.5.8/modules/modes/');
        @$key_size = mcrypt_enc_get_key_size($td);
        @$block_size = mcrypt_get_block_size($cipher,$mode);
        @$iv_size = mcrypt_get_iv_size($cipher, $mode);
        @mcrypt_module_close($td);
        echo "
        <pre>  
            key_size: ". ($key_size?$key_size:'n/a') 
      ."    block_size: ". ($block_size?$block_size:'n/a') 
      ."    iv_size: ". ($iv_size?$iv_size:'n/a') 
      ."  </pre>\n";
        $td=NULL;
        $key_size=NULL;
        $block_size=NULL;
        $iv_size=NULL;
    }
}

?>

down

-3

Daniel Esteve ¶

5 years ago


The Mcrypt library has been declared DEPRECATED since PHP 7.1, to use in its OpenSSL

add a note

官方地址：https://www.php.net/manual/en/book.mcrypt.php

有任何技术问题请点击这里网站运营推广招聘

IT PHP 编程语言 Linux 开发编程科技 Elasticsearch HTML/CSS/XML 网络数据库 JAVA 面试 NoSQL C/C++ Golang Git 算法操作系统正则表达式 Redis 互联网 MySql JavaScript 运维软件国际架构设计 Mac OS TCP/IP Excel Vim Windows Socket Oracle VR MongoDB Python 运营 MemCache 商业硬件电子娱乐设计 nginx 摄影游戏 WordPress HTTP 团建数码电器

php7 安装fileinfo扩展 preg_split — 通过一个正则表达式分隔字符串 php位值,解决 PHP 中 usort 在值相同时改变原始位置的问题 [PHP] inet_pton/inet_ntop IP地址转换函数 [鸟哥]PHP_INT_MIN 和 -9223372036854775808 PHP 8.1 adodb手册 ADORecordSet对象 opcache预加载 Composer的Packagist资源 array_multisort() 多字段排序 PHPMailer设置utf8 PHPMailer字符集CharSet PHP json解析（json_decode）页面工具 mysql面试题纯php实现DES以及TripleDES加密算法 php 修改图片大小两千行PHP学习笔记支持php7的性能采集扩展 [原创]诡异的php-fpm超时问题 Packagist / Composer 中国全量镜像

略微加速

PHP官方手册 - 互联网笔记

Mcrypt

User Contributed Notes 8 notes