Cryptographic -> Encrypt with password: Technical details

Server Side Components General
#1

Hi @patrick, can you please advise on the current implementation of the Mcrypt algorithm in Wappler?
Are we using AES250? What is the maximum length of the password? What is the best way to store the output in a mySQL database, is it varbinary?
What will be the equivalent under mySQL, is it AES_ENCRYPT?

#2

@patrick, any update on the above please? Just want to make sure i have all the technical details to be able to decrypt/encrypt the data between a wappler application and a 3rd party

#3

I suspect what you need to know will be contained in this post

#4

Thank you @Hyperbytes, i checked it but could not find: the algorithm used (aes?) The length (128?) The recommended type (hex or string?) and maximum length of the password. I also could not find the recommended mySQL type to store the encrypted column (varbinary?)
Thank you

#5

In crypto.php mentioned in the thread there is reference to AES-256-CBC

function formatter_encrypt($val, $password) {
    $key = hash('sha256', $password, TRUE);
    $iv = openssl_random_pseudo_bytes(16);
    if (($l = (strlen($val) & 15)) > 0) { $val .= str_repeat(chr(0), 16 - $l); }
    return base64_encode($iv . openssl_encrypt($val, 'AES-256-CBC', $key, OPENSSL_RAW_DATA|OPENSSL_ZERO_PADDING, $iv));
}

function formatter_decrypt($val, $password) {
    $key = hash('sha256', $password, TRUE);
    $val = base64_decode($val);
    return rtrim(openssl_decrypt(substr($val, 16), 'AES-256-CBC', $key, OPENSSL_RAW_DATA|OPENSSL_ZERO_PADDING, substr($val, 0, 16)), "\0");
1 Like
#6

Exactly what i needed, i hadnt open the zip file indeed.
Thanks loads @Hyperbytes

1 Like
#7

I suggest to add some of this info here:
image
It could be replaced with: Encrypt the input with password using the secured AES-256-CBC algorithm

1 Like
#8

The encrypt used mcrypt with the cipler MCRYPT_RIJNDAEL_128 and mode MCRYPT_MODE_CBC. Mcrypt is deprecated as of PHP 7.1.0, so we updated it to use openssl. It uses the AES-256-CBC method and generates exactly the same encrypted data as the mcrypt method. I think it is the best algorithm to use at this moment.

1 Like
#9

Thanks @patrick I would just suggest to update the description below accordingly in wappler for other users, as when seeing it we feel an obsolete and deprecated algorithm is being used whereas the actual algorithm used (AES-256-CBC) is strong and even contains an initialisation vector to avoid repetition in data encryption
image

2 Likes
#10