search

travist / jsencrypt

A zero-dependency Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
http://www.travistidwell.com/jsencrypt
Other
6.7k stars 2.02k forks source link

Expand encrypt/decrypt logic #90

Open MonteShaffer opened 8 years ago

MonteShaffer commented 8 years ago

The intent of RSA is that you can encrypt/decrypt with either the public or private key.

The current implementation is only one-way. For example, on a web server, I may want to encrypt data with a private key (e.g., openssl functions in php), and then send the public key with the private data. On the client side, using your jsencrypt.js, I would then want to use the public key to decrypt the private data.

Alternatively, on the client, I may want to encrypt data using the public key, send it to the server, and decrypt on the server with the private key. In this scenario, the client only sees the public key and the server only uses the private key.

This use case is not supported in your functionality. Is this on the road-map?

Below is some sample code showing the interaction of public/private and encrypt/decrypt interchanges using openssl functions in php...


$privateKeyString = <<<PK
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
PK;

$publicKeyString = <<<PK
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvx0dtUFju12SSL31o9XE
Iwtp9eBBziQOcm85ZmrAdwk7C+Vkj6GStfHUXmMUrD5ckZQvM1hhDiNYRj6dqxoQ
GhEeXUtVyFAMWGtmnDl+OHDeAN8f2wv+DMmXN+Du4yfZ14w/6B1A7T3Rz0qRALc5
a94ZoP0Q1/QStgD87BRKNumYDbJbARD+576E3r9sp5E+/wCDgGd5SCnW7rLbixQf
QYX0tlcmnFYjsce6VkeTC4XMQTSC4gkYS1NgF7CLa8sLITAttbl4r5V9etf9Gtbr
PADXgjBDeG0Yc7CWlL7F6qAnU4b9NILRW+xFXa16y4V1EbrwSObwCr011ChuidpX
Eg3WK2pPaiXsHb9j5uMHljTq1DgbuIR29s6lYwQHEfTofzMMyLCztod7t/qDz6YE
UST5vigJ3DvREaQ+SNzANCYI1ZFL4WJJZ8DBjKXq+rWUV9hRQhzsXypYQJ3S6zqr
Dyk3v5CrCCeXJ5P5fsA/NueRcA6Fa3gbmozr4LFs0EBUPZ+ie1btrykTOJRFOFEF
Bbt2+kj3zIs6MCf+MVZMnWA1GTATwlKENzMzMwguoBBoYsvEH36/omO01qGS2kQz
hWqyPI+302/lO72EZTEhvmjkuoTkKNKD+swvQVFM5OPvg5pZbbGxobXBMAjT7UJj 
kUmKgNbuIys0Lftl7+WQb6MCAwEAAQ==
-----END PUBLIC KEY-----
PK;

// Load private key
$privateKey = openssl_pkey_get_private($privateKeyString);

// Load public key
$publicKey = openssl_pkey_get_public($publicKeyString);

if (!$privateKey) {
    echo "Private key NOT OK\n";
}

if (!$publicKey) {
    echo "Public key NOT OK\n";
}

if (!openssl_private_encrypt($sensitiveData, $encryptedWithPrivate, $privateKey)) {
    echo "Error encrypting with private key\n";
}

if (!openssl_public_encrypt($sensitiveData, $encryptedWithPublic, $publicKey)) {
    echo "Error encrypting with public key\n";
}

if (!openssl_private_decrypt($encryptedWithPublic, $decryptedWithPrivateFromPublic, $privateKey)) {
    echo "Error decrypting with private key what was encrypted with public key\n";
}

if (!openssl_public_decrypt($encryptedWithPrivate, $decryptedWithPublicFromPrivate, $publicKey)) {
    echo "Error decrypting with public key what was encrypted with private key\n";
}

echo "Encrypted with public key: " . base64_encode($encryptedWithPublic) . "\n"; // This is different every time
echo "Encrypted with private key: " . base64_encode($encryptedWithPrivate) . "\n";
echo "Decrypted with private key what was encrypted with public key: " . $decryptedWithPrivateFromPublic . "\n";
echo "Decrypted with public key what was encrypted with private key: " . $decryptedWithPublicFromPrivate . "\n";
barkermn01 commented 7 years ago

Could you please provide the output of that really your trying to prove something so prove it, you have that PHP code can you please then put the output.