openssl_open(3) [php man page]

OPENSSL_OPEN(3) 							 1							   OPENSSL_OPEN(3)

openssl_open - Open sealed data

SYNOPSIS

       bool openssl_open (string  $sealed_data, string	&$open_data, string  $env_key, mixed  $priv_key_id, [string  $method])

DESCRIPTION

       openssl_open(3)	opens  (decrypts)  $sealed_data using the private key associated with the key identifier $priv_key_id and the envelope key
       $env_key, and fills $open_data with the decrypted data. The envelope key is generated when the data are sealed and can only be used by  one
       specific private key. See openssl_seal(3) for more information.

PARAMETERS

	      o $sealed_data
		-

	      o $open_data
		- If the call is successful the opened data is returned in this parameter.

	      o $env_key
		-

	      o $priv_key_id
		-

RETURN VALUES

	Returns TRUE on success or FALSE on failure.

EXAMPLES

       Example #1

	      openssl_open(3) example

	      <?php
	      // $sealed and $env_key are assumed to contain the sealed data
	      // and our envelope key, both given to us by the sealer.

	      // fetch private key from file and ready it
	      $fp = fopen("/src/openssl-0.9.6/demos/sign/key.pem", "r");
	      $priv_key = fread($fp, 8192);
	      fclose($fp);
	      $pkeyid = openssl_get_privatekey($priv_key);

	      // decrypt the data and store it in $open
	      if (openssl_open($sealed, $open, $env_key, $pkeyid)) {
		  echo "here is the opened data: ", $open;
	      } else {
		  echo "failed to open data";
	      }

	      // free the private key from memory
	      openssl_free_key($pkeyid);
	      ?>

SEE ALSO

       openssl_seal(3).

PHP Documentation Group 													   OPENSSL_OPEN(3)

OPENSSL_SEAL(3) 							 1							   OPENSSL_SEAL(3)

openssl_seal - Seal (encrypt) data

SYNOPSIS

       int openssl_seal (string  $data, string	&$sealed_data, array  &$env_keys, array  $pub_key_ids, [string	$method])

DESCRIPTION

       openssl_seal(3) seals (encrypts) $data by using RC4 with a randomly generated secret key. The key is encrypted with each of the public keys
       associated with the identifiers in $pub_key_ids and each encrypted key is returned in $env_keys. This means that one can send  sealed  data
       to multiple recipients (provided one has obtained their public keys). Each recipient must receive both the sealed data and the envelope key
       that was encrypted with the recipient's public key.

PARAMETERS

	      o $data
		-

	      o $sealed_data
		-

	      o $env_keys
		-

	      o $pub_key_ids
		-

RETURN VALUES

	Returns the length of the sealed data on success, or FALSE on error. If successful the sealed data is returned in  $sealed_data,  and  the
       envelope keys in $env_keys.

EXAMPLES

       Example #1

	      openssl_seal(3) example

	      <?php
	      // $data is assumed to contain the data to be sealed

	      // fetch public keys for our recipients, and ready them
	      $fp = fopen("/src/openssl-0.9.6/demos/maurice/cert.pem", "r");
	      $cert = fread($fp, 8192);
	      fclose($fp);
	      $pk1 = openssl_get_publickey($cert);
	      // Repeat for second recipient
	      $fp = fopen("/src/openssl-0.9.6/demos/sign/cert.pem", "r");
	      $cert = fread($fp, 8192);
	      fclose($fp);
	      $pk2 = openssl_get_publickey($cert);

	      // seal message, only owners of $pk1 and $pk2 can decrypt $sealed with keys
	      // $ekeys[0] and $ekeys[1] respectively.
	      openssl_seal($data, $sealed, $ekeys, array($pk1, $pk2));

	      // free the keys from memory
	      openssl_free_key($pk1);
	      openssl_free_key($pk2);
	      ?>

SEE ALSO

       openssl_open(3).

PHP Documentation Group 													   OPENSSL_SEAL(3)