PHP ??? ??? ? ??? ??

???? ?? ??? ? ???? ??? ???? ?? ?????. ????? ???? ??? ?? ??(MAC)? ??? ??? ???? ?????. ??? ????? ?? ???? ???? ?? ??? ?? ??? ???? ???? ??? ? ??? ?????? ???? ?? ????.

libsodium? ??? ??? ??:

1. CTR ???? AES? ???? ???? ?????? ??? ???? GCM? ?????. ?????.
2. HMAC-SHA-256? ???? ?? ???? ???? MAC? IV? ?? ???? ?? ????? ?????.

libsodium? ??? ?? ?? ??:

1. ???? MAC ?? ??? MAC? ?? ??? ???? ??? ??? ?????.
2. ??? ??? ??? ???? ???? ?????.

?? ?? ??:

• ????? ?? ??? ????.
• ??? ???? ???? ??? ??? ?? ??? ?????.
• ????? ??? ?? ?? ???(CSPRNG)? ???? IV? ???? ?????.
• ???? ????? ?? MAC?? ?? ???? ?????.
• ???? ?? ??? ?????. ?? ??? ??? ??? ????.

?? ?? libsodium:

<?php
declare(strict_types=1);

/**
 * Encrypt a message
 * 
 * @param string $message - message to encrypt
 * @param string $key - encryption key
 * @return string
 * @throws RangeException
 */
function safeEncrypt(string $message, string $key): string
{
    if (mb_strlen($key, '8bit') !== SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
        throw new RangeException('Key is not the correct size (must be 32 bytes).');
    }
    $nonce = random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
    
    $cipher = base64_encode(
        $nonce.
        sodium_crypto_secretbox(
            $message,
            $nonce,
            $key
        )
    );
    sodium_memzero($message);
    sodium_memzero($key);
    return $cipher;
}

/**
 * Decrypt a message
 * 
 * @param string $encrypted - message encrypted with safeEncrypt()
 * @param string $key - encryption key
 * @return string
 * @throws Exception
 */
function safeDecrypt(string $encrypted, string $key): string
{   
    $decoded = base64_decode($encrypted);
    $nonce = mb_substr($decoded, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, '8bit');
    $ciphertext = mb_substr($decoded, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, null, '8bit');
    
    $plain = sodium_crypto_secretbox_open(
        $ciphertext,
        $nonce,
        $key
    );
    if (!is_string($plain)) {
        throw new Exception('Invalid MAC');
    }
    sodium_memzero($ciphertext);
    sodium_memzero($key);
    return $plain;
}
?>

? ??? libsodium? ???? PHP ???? ???? ????? ???? ??? ??????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!