php rsa加密解密

PHP服务端与客户端交互、提供开放api时，通常需要对敏感的部分api数据传输进行数据加密，这时候rsa非对称加密就能派上用处了，下面通过一个例子来说明如何用php来实现数据的加密解密 1、加密解密的第一步是生成公钥、私钥对，私钥加密的内容能通过公钥解密（反过来亦可以） 下载开源RSA密钥生成工具openssl（通常Linux系统都自带该程序），解压缩至独立的文件夹，进入其中的bin目录，执行以下命令：

openssl genrsa -out rsa_private_key.pem 1024                (with out password protected)   

openssl genrsa -des3 -out rsa_private_key.pem 1024/2048    (password protected)

openssl pkcs8 -topk8 -inform PEM -in rsa_private_key.pem -outform PEM -nocrypt -out private_key.pem openssl rsa -in rsa_private_key.pem -pubout -out rsa_public_key.pem 第一条命令生成原始 RSA私钥文件 rsa_private_key.pem，第二条命令将原始 RSA私钥转换为 pkcs8格式，第三条生成RSA公钥 rsa_public_key.pem

从上面看出通过私钥能生成对应的公钥，因此我们将私钥private_key.pem用在服务器端，公钥发放给别的对接对象

<?php $private_key = "-----BEGIN PRIVATE KEY----- MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKLBOqHsJt5tv6sS 4kKCw6qYNeKyC1eBWp1Xr0Wbw+zBlpdBiVYSvkzeQ3bqVUC9bqjZL4CKdT6TPmoh +2dh8tQ8bUaDDSG2Ni6eaCW4N4a9Yw7Iu16Ubq39o55FF8Wgq4QaOc5Lw/Wybr5f WDUmTQsCXxxs12b0JdWWw83OHxQ5AgMBAAECgYATnSnNvcHpaFyC52GxFkUyV+mW ilJnl0UuVRTgVKdF7waQ7+r3HockiFylBhSEGtAtNQ9OdGEwy1noPHQpv1oeHGev 8tERuYZb5wjenoANiwpHYbSh7lXBgL7xhLxFhQoKjVWsn+oA8Hxk0rgAcH2jNnI6 dUr+O5gYeeaM2twcIQJBANkAELnD4IPwAx6UcNQ0oHdg7q/nW70bHRiME40/4WM1 TNa6AraNEsgOpg5zGsttRZG1UMYOedP3RY7j3NNCha0CQQDAAWRhVhKhtU0ZYEMC yDrmyKzmlk7Z7fzxyJMXVvF8rpA51SxRQX2Czd5jzCwJYnieMIpi/n0Fhwxu2dK5 nWI9AkAQ7E9hnWQKBhLINL1j30LQbI/QyhM+eTnYqzvvHRc/vG1kpZcGk5PuZC4R HGrviHMPfPtyprhbjoIvNZgIJbz1AkEAvz/ju6yfjGFptZATz26gdQaIanpnel26 qR8vnHzmt1mtoV178kf4e9UR4ngZmRNzr6YMAgUZhOr68GOZqXdhxQJABuFWCvrR wlCmabSDlBoYEgrXcaACtgJD80tSqfb+kPmxSMwBqJS99KvAsKjcksmGqK8Ccf8R PTiycU8gCjI01Q== -----END PRIVATE KEY-----"; $public_key = "-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCiwTqh7Cbebb+rEuJCgsOqmDXi sgtXgVqdV69Fm8PswZaXQYlWEr5M3kN26lVAvW6o2S+AinU+kz5qIftnYfLUPG1G gw0htjYunmgluDeGvWMOyLtelG6t/aOeRRfFoKuEGjnOS8P1sm6+X1g1Jk0LAl8c bNdm9CXVlsPNzh8UOQIDAQAB -----END PUBLIC KEY-----"; //echo $private_key; $pi_key = openssl_pkey_get_private($private_key);//这个函数可用来判断私钥是否是可用的，可用返回资源id Resource id $pu_key = openssl_pkey_get_public($public_key);//这个函数可用来判断公钥是否是可用的 print_r($pi_key);echo "<br/>"; print_r($pu_key);echo "<br/>"; $data = "ahreheesrrthtrjrj";//原始数据 $encrypted = ""; $decrypted = ""; echo "source data:",$data,"<br/>"; echo "private key encrypt:<br/>"; echo "<hr/>"; openssl_private_encrypt($data,$encrypted,$pi_key);//私钥加密 $encrypted = base64_encode($encrypted); //加密后的内容通常含有特殊字符，需要编码转换下，在网络间通过url传输时要注意base64编码是否是url安全的 echo $encrypted,"<br/>"; openssl_public_decrypt(base64_decode($encrypted),$decrypted,$pu_key);//私钥加密的内容通过公钥可用解密出来 echo $decrypted,"\n"; echo "<hr/><hr/>"; echo "公钥加密，私钥解密","<hr/>"; openssl_public_encrypt($data,$encrypted,$pu_key); $encrypted = base64_encode($encrypted); echo $encrypted,"<br/>"; openssl_private_decrypt(base64_decode($encrypted),$decrypted,$pi_key); echo $decrypted;