2

Problem

I need to encrypt data in Javascript and decrypt it in PHP. Mcrypt seems the way to go on the PHP side, and AES seems thoroughly good enough, but I'm having trouble finding a javascript decryption algorithm that matches it. Any suggestions? I'm open to replacing any of the assumptions (mcrypt, aes, ECB, etc) if it'll help get a compatible js encryption/decryption library.

Code

The PHP looks pretty much like this:

$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
$iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
$encrypted = mcrypt_encrypt( MCRYPT_RIJNDAEL_256, $key, $plaintext,
        MCRYPT_MODE_ECB,$iv );

Rationale

Not that it matters, but the point here is to encrypt some credentials to an external system so that we can pass it around our server without our analytics and logging servers picking it up in the clear. It'll eventually be decrypted in the PHP just before it's sent to the external system.

Matt Ball
  • 354,903
  • 100
  • 647
  • 710
Fishtoaster
  • 1,809
  • 2
  • 20
  • 36
  • Same question here!!! All the current lib that I have found are using password, I need the one use key and iv :( – wgx731 May 19 '12 at 13:50
  • I am on same problem. Did you find anything esle ? – hsuk Sep 16 '13 at 04:56
  • Check out my question http://stackoverflow.com/questions/18786025/why-encrypted-string-given-by-mcrypt-js-library-and-php-is-different – hsuk Sep 16 '13 at 04:57

1 Answers1

1

I ended up using the SlowAES library, which has parallel implementations in PHP and JS:

http://kevinkuchta.com/_site/2011/08/matching-php-and-js-encryption/

Fishtoaster
  • 1,809
  • 2
  • 20
  • 36