spaces.php

aws/Aws/Crypto/Cipher/Cbc.php

@@ -0,0 +1,82 @@
+<?php
+namespace Aws\Crypto\Cipher;
+
+use \InvalidArgumentException;
+use \LogicException;
+
+/**
+ * An implementation of the CBC cipher for use with an AesEncryptingStream or
+ * AesDecrypting stream.
+ */
+class Cbc implements CipherMethod
+{
+    const BLOCK_SIZE = 16;
+
+    /**
+     * @var string
+     */
+    private $baseIv;
+
+    /**
+     * @var string
+     */
+    private $iv;
+
+    /**
+     * @var int
+     */
+    private $keySize;
+
+    /**
+     * @param string $iv Base Initialization Vector for the cipher.
+     * @param int $keySize Size of the encryption key, in bits, that will be
+     *                     used.
+     *
+     * @throws InvalidArgumentException Thrown if the passed iv does not match
+     *                                  the iv length required by the cipher.
+     */
+    public function __construct($iv, $keySize = 256)
+    {
+        $this->baseIv = $this->iv = $iv;
+        $this->keySize = $keySize;
+
+        if (strlen($iv) !== openssl_cipher_iv_length($this->getOpenSslName())) {
+            throw new InvalidArgumentException('Invalid initialization vector');
+        }
+    }
+
+    public function getOpenSslName()
+    {
+        return "aes-{$this->keySize}-cbc";
+    }
+
+    public function getAesName()
+    {
+        return 'AES/CBC/PKCS5Padding';
+    }
+
+    public function getCurrentIv()
+    {
+        return $this->iv;
+    }
+
+    public function requiresPadding()
+    {
+        return true;
+    }
+
+    public function seek($offset, $whence = SEEK_SET)
+    {
+        if ($offset === 0 && $whence === SEEK_SET) {
+            $this->iv = $this->baseIv;
+        } else {
+            throw new LogicException('CBC initialization only support being'
+                . ' rewound, not arbitrary seeking.');
+        }
+    }
+
+    public function update($cipherTextBlock)
+    {
+        $this->iv = substr($cipherTextBlock, self::BLOCK_SIZE * -1);
+    }
+}

aws/Aws/Crypto/Cipher/CipherMethod.php

@@ -0,0 +1,59 @@
+<?php
+namespace Aws\Crypto\Cipher;
+
+interface CipherMethod
+{
+    /**
+     * Returns an identifier recognizable by `openssl_*` functions, such as
+     * `aes-256-cbc` or `aes-128-ctr`.
+     *
+     * @return string
+     */
+    public function getOpenSslName();
+
+    /**
+     * Returns an AES recognizable name, such as 'AES/GCM/NoPadding'.
+     *
+     * @return string
+     */
+    public function getAesName();
+
+    /**
+     * Returns the IV that should be used to initialize the next block in
+     * encrypt or decrypt.
+     *
+     * @return string
+     */
+    public function getCurrentIv();
+
+    /**
+     * Indicates whether the cipher method used with this IV requires padding
+     * the final block to make sure the plaintext is evenly divisible by the
+     * block size.
+     *
+     * @return boolean
+     */
+    public function requiresPadding();
+
+    /**
+     * Adjust the return of this::getCurrentIv to reflect a seek performed on
+     * the encryption stream using this IV object.
+     *
+     * @param int $offset
+     * @param int $whence
+     *
+     * @throws LogicException   Thrown if the requested seek is not supported by
+     *                          this IV implementation. For example, a CBC IV
+     *                          only supports a full rewind ($offset === 0 &&
+     *                          $whence === SEEK_SET)
+     */
+    public function seek($offset, $whence = SEEK_SET);
+
+    /**
+     * Take account of the last cipher text block to adjust the return of
+     * this::getCurrentIv
+     *
+     * @param string $cipherTextBlock
+     */
+    public function update($cipherTextBlock);
+}