Your IP : 216.73.216.33
<?php
class Brizy_Editor_Multipass {
private $signature_key;
private $encryption_key;
private $init_vector;
public function __construct($secret_key)
{
$key_material = hash("SHA256", $secret_key, true);
$this->encryption_key = substr($key_material, 0, 16);
$this->signature_key = substr($key_material, 16, 16);
$iv_material = hash("SHA256", $this->encryption_key, true);
$this->init_vector = substr($iv_material, 0, 16);
}
/**
* Converts and signs a PHP object or array into a JWT string.
*
* @param object|array $payload PHP object or array
*
* @return string A signed JWT
*
* @uses jsonEncode
* @uses urlsafeB64Encode
*/
public function encode($payload)
{
$segments = array();
$segments[] = $this->urlsafeB64Encode($this->encrypt(json_encode($payload), $this->encryption_key, $this->init_vector));
$signing_input = implode('.', $segments);
$signature = $this->sign($signing_input, $this->signature_key);
$segments[] = $this->urlsafeB64Encode($signature);
return implode('.', $segments);
}
/**
* Sign a string with a given key and algorithm.
*
* @param string $msg The message to sign
* @param string|resource $key The secret key
*
* @return string An encrypted message
*
*/
private function sign($msg, $key)
{
return hash_hmac('SHA256', $msg, $key, true);
}
/**
* Encode a string with URL-safe Base64.
*
* @param string $input The string you want encoded
*
* @return string The base64 encode of what you passed in
*/
private function urlsafeB64Encode($input)
{
return str_replace('=', '', strtr(base64_encode($input), '+/', '-_'));
}
/**
* Encrypt a string with AES-128-CBC
*
* @param string $json_payload The data
* @param string $encryption_key The secret encryption key
* @param string $init_vector A non-NULL Initialization Vector
*
* @return string An encrypted data
*/
private function encrypt($json_payload, $encryption_key, $init_vector)
{
return openssl_encrypt($json_payload, 'AES-128-CBC' , $encryption_key, OPENSSL_RAW_DATA, $init_vector);
}
}