Php Encryption Result

Question

I unforesee the result.

This is my encryption method:

const METHOD = "AES-256-ECB";
public $key;

public function encrypt($string,$key){
        return strtr(base64_encode(openssl_encrypt($string, $this::METHOD, hash('sha256', $key, true))), '+/=', '-_,');
}

This code generates the $key for encryption.

$string = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
        $max = strlen($string) - 1;
        $token = '';
        for ($i = 0; $i < 32; $i++) {
            $token .= $string[mt_rand(0, $max)];
        }
        $key = $token;

My question is: ? & these signs can the result in?

because I am using the $_GET parameters in.

I can not get the idea of the question ? can you please paste a functional code? — PaulRM
– PaulRM, Commented Oct 11, 2018 at 11:18
I want to say simply this. $result = strtr(base64_encode(openssl_encrypt("HELLOWORD", "AES-256-ECB", hash('sha256', rand(1000,9999), true))), '+/=', '-_,'); This $result may contain these signs "? &". — Sahin Ersever
– Sahin Ersever, Commented Oct 11, 2018 at 11:30
My english not well. Maybe i cant say what i want to say sorry, but looking understandable. :D — Sahin Ersever
– Sahin Ersever, Commented Oct 11, 2018 at 11:33
It shouldn't matter because you should be URL Encoding any raw data that you are inserting into a query string anyway. — Quentin
– Quentin, Commented Oct 11, 2018 at 11:40
It's not the point here, but this code isn't secure. The ECB is not safe, you can see the encrypted penguin, also anyone can modify the encrypted text. The mt_rand is not cryptographically secure, also there's no reason to forces the key to be alphanumeric-only. — Inkeliz
– Inkeliz, Commented Oct 11, 2018 at 12:26

PaulRM · Accepted Answer · 2018-10-11 11:38:08Z

1

No, any output of base64 encode are chars from 0 to 63 only + and / are the non letters or numbers

take a look in https://en.wikipedia.org/wiki/Base64#Base64_table

answered Oct 11, 2018 at 11:38

PaulRM

4196 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Php Encryption Result

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related