Geek Answers Handbook

Decrypt AES from Coldfusion to PHP

I encrypted the string in ColdFusion using:

<cfset strEnc=ToBase64(Encrypt("some text","123", "AES","Base64"))>

I can decrypt the string in ColdFusion using:

 <cfset strDec=ToString(Decrypt(ToBinary(strEnc), "123", "AES","Base64"))>

But I can not decrypt strEnc in PHP. I found some decryption functions in PHP. But they require iv . Can anybody help me?

0
source share
3 answers
 $key = base64_decode($key); $data = base64_decode($data); echo mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, $data, MCRYPT_MODE_ECB);
+1
source

The native methods offered by each language will vary depending on the expected arguments, parameters, and encryption methods.

To be able to encrypt in one language and decrypt in another, you will need to use a "global" security tool that works in different languages.

I would recommend you take a look at ESAPI (Enterprise Security API) https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API , which is an open source security library created by OWASP (Open Web Application Security Project) https : //www.owasp.org

There is an implementation of the ESAPI library specific to ColdFusion ( https://github.com/damonmiller/cfesapi ) and the PHP library ( http://code.google.com/p/owasp-esapi-php/ )

Since both methods are based on the same basic security principles, implementing different methods will work on any platform / language that you want to use.

ESAPI is essentially built using a number of interfaces that allow you to select and use different parts of the security library to suit your needs.

Take a look at Encryptor, which provides methods for hashing and encrypting data. It can also sign and print to add additional data integrity checks if you want to go this far. (it all depends on how deep you wanted to go).

ESAPI essentially allows developers to set details such as hash and salt keys, encryption keys and other data in the security configuration file (a plain text file) that the library will read. As this is the case, your PHP implementation can easily have the same security data as your ColdFusion implementation, that is, they will share the same encryption / hash / salt information and thus they will encrypt and decrypt the same same data to the same values.

I did not add code examples to this comment, but if it looks like it will help you and fulfill your requirements, check out the links to the ESAPI libraries mentioned above. It is quite easy to pick up and find out, and will do what you need easily.

+3
source

Take a look at base64_decode() and aes_decrypt

+1
source

More articles:


All Articles