Is this good enough encryption for daily use ?

FYI, I need to keep the first part of the file unencrypted so the file will progressively load
Functions were taken from the mycrypt php page :)

$chunkSize = 32768;
$key = "6q9nKLg5"

   if( $fd  = fopen($filepath, 'rb')){

     while(!feof($fd)) {
                if($gotFastStartHeaders != true){
                        echo fread($fd, $chunkSize/30);
                        $gotFastStartHeaders = true;
                }else{
                        echo encrypt(fread($fd, $chunkSize));
                }
        }
     fclose ($fd);
     exit;
   }

/ /----------------------------------------------------------------------- -------------------
// Encrypt
function encrypt($encrypt) {
   global $key;
   //$key = "6q9nEUg5";
   srand((double) microtime() * 1000000); //for sake of MCRYPT_RAND
$iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND); $passcrypt = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $encrypt, MCRYPT_MODE_ECB, $iv);
   $encode = base64_encode($passcrypt);
 return $encode;
 }

/ /----------------------------------------------------------------------- -------------------
// Decrypt
 function decrypt($decrypt) {
   global $key;
   $decoded = base64_decode($decrypt);
$iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND); $decrypted = mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $decoded, MCRYPT_MODE_ECB, $iv);
 return $decrypted;

many thanks
g

On Sep 24, 2005, at 2:25 PM, Jasper Bryant-Greene wrote:

Graham Anderson wrote:
How do you display raw binary data of a file sent from a server with curl ?

You can probably just use file_get_contents() if allow_url_fopen is enabled (it is by default).

For binary data, base64_encode and it's friend base64_decode allow you to encode and decode binary data in a normal ASCII string.

http://php.net/file_get_contents
http://php.net/base64_encode

I want to encrypt the file with something akin to str_replace and decode it on the other side with a custom data handler Just want to make sure that I am str_replace'ing the actual data and not a representation of it :)

str_replace is not for encryption. You might want to look at mcrypt, as using str_replace is probably just as bad as sending the unencrypted string. It's not going to be secure.

http://php.net/mcrypt

--
Jasper Bryant-Greene
Freelance web developer
http://jasper.bryant-greene.name/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to