我们可以使用 angular 中的私钥加密数据并使用 RSA 加密使用 PHP 中的公钥解密数据吗？

Question

i'm trying to Encrypt data in using RSA Public Key in angular and Decrypt data with public key In php. i'm trying to Encrypt with JsEncrypt library in angular and Decrypt in Php Using

:openssl_public_decrypt($signature, $decrypted, $publicKey, OPENSSL_PKCS1_PADDING);

I need to resolve encryption and Decryption between Angular and Php.

Please see:

ANGULAR CODE

enc(data: any){  this.$encrypt.setPrivateKey(`dummyprivakey`);
        let ndata = this.$encrypt.encrypt(data);
    console.log("encrypt data ", ndata)
       return ndata
}

PHP CODE:

    openssl_public_decrypt ($encrypted, $decrypted , $publickey); 
       var_dump($decrypted);

I'm unable decode the data.

Answer 1

Actually this is possible - of course -. The question is: Why would you?

You - and you should always - send your request via HTTPS which means it's secured and encrypted.

So it's unnecessary work for the browser and the PHP code.

Answer 2

Look into https://github.com/phpseclib/phpseclib for PHP.

And https://www.npmjs.com/package/encrypt-rsa for angular.

SSL and SSL pinning is great, but there's always a workaround using MITM attacks, and root certificates to bypass SSL pinning.

When encrypting , you use a public key , and when decrypting you use a private key , if your front-end does not need to decrypt then make sure to not include the private key in your app as there's always ways to inspect variables in runtime and that would invalidate your entire implementation.

You can always generate more public keys using the private key, so the other way will also invalidate your entire implementation.

If you are looking to transmit data securely, I recommend looking at solutions such as JWE+JWS.

Below are examples using phpseclib for php and encrypt-rsa for angular

For Encrypting in Angular:

const encryptedText = encryptRsa.encryptStringWithRsaPublicKey({ 
  text: 'hello world',   
  publicKey,
});
console.log(encryptedText);

For decrypting in PHP:

$rsa = new Crypt_RSA();
$rsa->loadKey(file_get_contents('private.key')); // private key

echo $rsa->decrypt($encryptedText);