無法解密數據 - openssl_private_decrypt(): key 參數不是有效的私鑰

Question

<?php
    ini_set('display_errors', 1);

    $config = array(
        "config" => "C:\wamp\bin\apache\Apache2.4.4\conf\openssl.cnf",
        "private_key_bits" => 2048,
        "private_key_type" => OPENSSL_KEYTYPE_RSA,
    );

    // Create the private and public key
    $res = openssl_pkey_new($config);

    if ($res === false) die('Failed to generate key pair.'."\n"); 

    if (!openssl_pkey_export($res, $privKey, "phrase", $config)) die('Failed to retrieve private key.'."\n"); 

    // Extract the private key from $res to $privKey
    openssl_pkey_export($res, $privKey, "phrase", $config);

    echo "<br/>";
    echo "Private Key = ".$privKey;
    echo "<br/>";

    // Extract the public key from $res to $pubKey
    $pubKey = openssl_pkey_get_details($res);
    $pubKey = $pubKey["key"];

    echo "<br/>";
    echo "Public Key = ".$pubKey;
    echo "<br/>";

    $data = 'plaintext data goes here';

    // Encrypt the data to $encrypted using the public key
    openssl_public_encrypt($data, $encrypted, $pubKey);
    echo "<br/>";
    echo "Encrypted Data = ".$encrypted;
    echo "<br/>";

    // Decrypt the data using the private key and store the results in $decrypted
    openssl_private_decrypt($encrypted, $decrypted, $privKey);

    echo "<br/>";
    echo "Decrypted Data = ".$decrypted;
    echo "<br/>";
?>

日志

私鑰= ----- BEGIN加密的私有密鑰----- MIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIr2acPfh8YYQCAggA MBQGCCqGSIb3DQMHBAiCvohdiWAZ4QSCBMjKJUXF5ShKfW3TazpKYTxEV8JmGYLf AJWXzxdi0GrDuddz4aW1FeGwvUm2t / 41CTxFsWtgoQJrzCgAQETn54majdrDeF4u zCmvFMKSoVP4xsZKke15e1K1LPmFNNuKKyCqMwL + tpQJ7zquvDTKHapUnNzfNXpZ D2K1r2qZWeDN1d36DA9wkN5GbpZYAjuHqHUNzorhxIbHGp2WOg8YKdemoTuKIqYC DUKncWtxRUOx6IIZuey + uTBzH7Bn9K9a71QTjUdeWgQZFzy9yVpetB + XrJA92IWt vMeKXCXNhOgkOvkUPNXSuMOVrECNcbKDAKxmK3EQWqb + 8zlYFqjmaL / sCep8ihio 1ZWpRaOd5HxnG5rpmz / BYzcF354mM8B4wAIk7MmFq / pHSKLjpr + 2Ef1BpMmXfRpG Pj1jYDClSIQF6ovKOqhevFwfYrtl2jEOISyAggm / sbD750VBkwhbVAyQcarckAiI GlNcQPOC + JYZOV7o / 90 + Tg24zwtAQ8y3hNvYyHjqYI5naVS9yuXEqB6zYoGivs / K bIblqTFebLEFtihjsa9wpXkyNzKD2NvdSa2oNC7IkCNi8TRNjy7MLylSmCIdhWAV YgL1hxShMgbnfiGjFQyYnKzZto9RqRlQBIoBOCfwP1EFnZjCJm02CCeGR + GHKXf7 rJ0n6lIUEvVnENirAPtOuiE2ccbzmyjWQ9f2vwBSUea5nPTMG4uTVHrQjrgNYIyU + vLV6tL + MDKF4JGQGgzBUeqTMobmrOK + V20QIasYaAWHJrL8itBwZ ++ C8lo7kySa SImMXakI4rjgEmj + HmUJygT1EZWz5yQqOiwAYL hQZg + M6 + 32Pvt6mIrAXbznrdHP JxHb / 9HV88mQdRKPBTkSTl71Ics + 3oybYPbhSQByXOdtsw6VLYNo4ikgj3tXCz01 DwVQqeQ5tLD4LY8 / QaAHkOUq9K24yfkcN + aQh7cvR / HX53Ls6LsdUwkwSOWVj2na Wl4xn + j3ZaPhpgdzcMgknU7BAI2kZP83MxyKnNcnneyX4hTaM5PRZJXKd + onvhff nQ3zHDSYmRDKmTXBjCob3Vjg91LcMjg9dEH7aIFWit5dHK4ll / v1IiOFx8d4d /毫伏Oll0c0ujJuPjtyqesM2Bz3Ah5YkIT2Z7kxvRy7rTyytQG7hLNENAki9wW79fcEo7 LN / OvEpjdWZngkL / UrMOX8DBrs0PLEH9jyDoCQx / LSqxMAXOwVXILfsfsUFu0M0o 21YbeC33jOlocJ4Q6pwfRVz8lCQOuIVs1jEpvSmvHgvmHmXUI4Y6nZD4Roi0jIjS VvI73eULzc3j0jIptWxzrHWM6iHx1zRxkLMJSZOx0A27ngtSo7g6 + aJnMO5FDfdR 90vnr + bX4ki + X / N4wVF7eppyapLe / tQ54vAxsyIBrCXPjwBMehiFjOMhzSLW7xQj Qg2KcilfW6oKFzDQQ5nKPEXvQYMhQ1MeWKyNv6BMoc4EEpIGhtziUXWhgT4sN1ES 5sxVcGVoIe1viO /kk3Zq55hETlZbNWs3V511BcEZCiQNrntnbYv6pwKpoB21ZV2E slVhYcslEGliIQKQsWSl5cfc+pqjLteiPrwk14WKJGXl9zX3YH6H7KKB--IVqC-PR-----PR----P--IVqS EN

公共密鑰= ----- BEGIN PUBLIC KEY ----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriS8qflAjYSYhH2qgC5T yf98X1qoLMXIW9mMkhV8LcApBKOfNjUMc9xjD3a8CR / LYwa4MYhevoKcVfPG8XoE sDGyHh + H / vtYP0rORB1T3RULVUzDLjX558e2KqPrSN + RV + Jl1NB0SO5Of3JA + AKA 0Q3botcjOM3WuFa / S + RzsiCrMMhzOZSTBj + GTP / VcDipF5PM7 + / + LXR edjRXccT2 WQjsq0sUrtsmpzBE8Niph361RjfIisxKoksQGs7hC / Iv4yhBzZZIpRaZuvDj4ImP + 4sUQgbdVVCso122kg34UtY5qchuSCcJfsGbD2zMw + 8ZftIsJ7dfX1FxujgggDyn 0wIDAQAB -----結束公鑰-----

Encrypted Data = Uš6/ùÅËæÝmL4²G¾'gr¨Ñ­Ä‰ï‚zêbÀ)[îR0s‹yÝ`t™õ°Þe­Ïd>×o¯rß9ÌÔÅAü!-†D·¨ÎVZ¼?¶éžäýöaØT~=‚Fan¢ºq{M”ƒ¹Cû5N3¹.Ð(·#*ÏRƹñß÷õƒ_ò9c-Ÿ% ×óè2Ꙃõ“ÂÐgNÈ-ˆd«…ºt§¼Ô}yŠ"7èPš(¶R¤ßJÚ_h¶ðÞK(Cj“7‘Y ÀŠþrôZƒ4)JU•˜„üˆ k0â§Êë^ÚºGÚªúVKø†ë8ÏLÚó  „Ÿ¦¿¤

( ! ) Warning: openssl_private_decrypt(): key parameter is not a valid private key in C:\wamp\www\android\pki_example.php on line 41
Call Stack
#   Time    Memory  Function    Location
1   0.0020  252696  {main}( )   ..\pki_example.php:0
2   0.2043  258032  openssl_private_decrypt ( ) ..\pki_example.php:41

Decrypted Data = 

Answer 1

// Decrypt the data using the private key and store the results in $decrypted
openssl_private_decrypt($encrypted, $decrypted, openssl_pkey_get_private($privKey, "phrase"));

echo "<br/>";
echo "Decrypted Data = ".$decrypted;
echo "<br/>";

openssl_private_decrypt函數能夠使用PEM格式的私鑰，但您的密鑰是加密的，並且此函數沒有密碼參數。 你必須使用openssl_pkey_get_private 。

Answer 2

不知道是什么原因。 我認為有人可以准確地編輯這個。

當我在一行中使用私鑰時，它會給出此問題中提到的上述錯誤。 但是當我通過將它分成幾行（每行64個字符）使用相同的私鑰時，它可以工作。 這樣就不需要使用openssl_pkey_get_private($privKey, "phrase")函數。 實際上我的私鑰沒有密碼短語。

Answer 3

請使用如下代碼

  // Create the keypair
    $privatefile = "data/privatekey.pem";
    $publicfile = "data/publickey.pem";
    $cleartextfile = "data/cleartext";
    $res = openssl_pkey_new();
    if (!$res) {
        echo "\nopenssl_pkey_new: " . openssl_error_string();
    }

    // Get private key
    openssl_pkey_export($res, $privatekey);
    if (!$privatekey) {
        echo "\nopenssl_pkey_export: " . openssl_error_string();
    }
    file_put_contents($privatefile, $privatekey);

    // Get public key
    $pkeydetails = openssl_pkey_get_details($res);
    if (!$pkeydetails) {
        echo "\nopenssl_pkey_get_details: " . openssl_error_string();
    }
    $publickey = $pkeydetails["key"];
    file_put_contents($publicfile, $publickey);
  // For getting Decrypted password
   $postedPassord= $_POST['password'];
    openssl_private_decrypt(base64_decode($postedPassord), 
     $decryptPassword, $privatekey);