Simplify data encryption in PHP using the JustEncrypt library

Composer can be learned through the following address: Learning address

In project development, data encryption is a key link, especially when processing sensitive information. To ensure the security of the data during transmission, I need an encryption library that can run on different PHP versions and perform well. After many attempts, I ended up choosing the JustEncrypt library.

JustEncrypt is a lightweight PHP encryption library that supports PHP versions 5.6 to 7.1. PHP 7.1 is particularly recommended because it supports OpenSSL extensions, which provide faster encryption algorithms. If you use a lower version of PHP, the library falls back to a native PHP-based implementation, which is slower, but still guarantees the integrity of the function.

Using JustEncrypt

The main functions of the JustEncrypt library include key derivation and data encryption. Here is a simple example of how to use the library for encryption:

Key Derivation

First, we need to generate a salt value and derive the key from the password:

 <code class="language-php">use JustEncrypt\KeyDerivation; $salt = KeyDerivation::generateSalt(); $iterations = 35000; // 默认迭代次数$key = KeyDerivation::deriveKey($password, $salt, $iterations);</code>

Data encryption

Data encryption using derived keys:

 <code class="language-php">use JustEncrypt\Encryption; $data = '这是需要加密的数据'; $encryptedBlob = Encryption::encrypt($data, $password); // 获取加密后的二进制数据$binaryData = $encryptedBlob->getBinary(); // 获取助记词（用于人工记录） $mnemonic = $encryptedBlob->getMnemonic();</code>

The encrypted data includes salt values, initial vectors, ciphertexts, and tags. These parameters are serialized in such a way that they can be decrypted on any machine with just knowing the password.

Select number of iterations

The default number of iterations is set to 35000, which is safe enough for encryption with a password. If you use a random byte string generated by CSPRNG as the password, you can set the number of iterations to 1, because in this case there is no need to perform a password stretching.

mnemonic words

To make encrypted results easier to record manually, JustEncrypt supports converting encrypted data into mnemonics. This uses Bitcoin BIP39's encoding method, but ignores its original weak password protection and ensures that the data is filled correctly.

 <code class="language-php">$mnemonic = $encryptedBlob->getMnemonic();</code>

Install JustEncrypt using Composer

Installing the JustEncrypt library is very simple, just run the following command:

 <code class="language-bash">composer require koltsov/justencrypt</code>

Summarize

The JustEncrypt library greatly simplifies the data encryption process in my PHP project by providing a flexible and efficient encryption solution. Not only does it maintain consistency across different PHP versions, it also provides the complete functionality from key derivation to data encryption. By using JustEncrypt, I not only solved the consistency problem of encryption algorithms, but also improved the security and performance of the project. If you are looking for a library that can simplify the encryption process in PHP, JustEncrypt is undoubtedly an option worth considering.

The above is the detailed content of Simplify data encryption in PHP using the JustEncrypt library. For more information, please follow other related articles on the PHP Chinese website!