blocks|key|3026164|text|问题1:关于PGP|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3026165|3026166|PGP+(Pretty+Good+Privacy)是赛门铁克公司的产品和商标(他们几年前买下了它)。ago).|unordered-list-item|offset|length|style|BOLD|3026167|OpenPGP是PGP.|3026168|GnuPG+(+Guard)使用的标准，是PGP的免费和开源实现。|3026169|3026170|因此，您要做的是加密到OpenPGP密钥。您的客户端使用哪个OpenPGP实现来解密数据对您来说并不重要。在PHP中，通常使用GnuPG，并且有内置的接口。|3026171|问题2:在PHP中使用GnuPG|3026172|使用GnuPG+interface，这是一个可以为PHP安装的扩展。|3026173|首先导入密钥，其中$keydata为ASCII装甲公钥：|CODE|3026174|<?php
$gpg+=+new+gnupg();
$info+=+$gpg+->+import($keydata);
print_r($info);
?>|code-block|syntax|javascript|3026175|然后使用此密钥加密数据，这次使用客户端密钥的指纹：|3026176|<?php
++$gpg+=+new+gnupg();
++$gpg+->+addencryptkey("8660281B6051D071D94B5B230549F9DC851566DC");
++$enc+=+$gpg+->+encrypt("just+a+test");
++echo+$enc;
?>|3026177|如果您想加密文件，请读取它们并将其传递给encrypt()。请确保至少使用长密钥ID(例如，DEADBEEFDEADBEEF)，引用关键字时更好的指纹(如示例中所示)；以及never+use+short+key+IDs+(DEADBEEF),+as+those+are+vulnerable+to+collision+attacks。|3026178|3026179|是用户在PHP手册中添加的一个更多的comprehensive+example+for+doing+both。|3026180|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/manual/en/book.gnupg.php|1|https://security.stackexchange.com/q/74009/19837|2|http://www.php.net/manual/en/function.gnupg-encrypt.php#81229^0|0|0|0|3|0|0|7|0|0|5|0|0|0|0|2|F|0|0|9|8|0|0|0|0|K|9|1A|G|33|8|2E|28|1|0|0|I|10|2|0^^$0|@$1|2|3|4|5|6|7|1N|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|1O|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|1P|8|@$F|1Q|G|1R|H|I]]|9|@]|A|$]]|$1|J|3|K|5|E|7|1S|8|@$F|1T|G|1U|H|I]]|9|@]|A|$]]|$1|L|3|M|5|E|7|1V|8|@$F|1W|G|1X|H|I]]|9|@]|A|$]]|$1|N|3|-4|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|20|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|21|8|@]|9|@$F|22|G|23|1|24]]|A|$]]|$1|U|3|V|5|6|7|25|8|@$F|26|G|27|H|W]]|9|@]|A|$]]|$1|X|3|Y|5|Z|7|28|8|@]|9|@]|A|$10|11]]|$1|12|3|13|5|6|7|29|8|@]|9|@]|A|$]]|$1|14|3|15|5|Z|7|2A|8|@]|9|@]|A|$10|11]]|$1|16|3|17|5|6|7|2B|8|@$F|2C|G|2D|H|W]|$F|2E|G|2F|H|W]|$F|2G|G|2H|H|W]]|9|@$F|2I|G|2J|1|2K]]|A|$]]|$1|18|3|-4|5|6|7|2L|8|@]|9|@]|A|$]]|$1|19|3|1A|5|6|7|2M|8|@]|9|@$F|2N|G|2O|1|2P]]|A|$]]|$1|1B|3|-4|5|6|7|2Q|8|@]|9|@]|A|$]]]|1C|$1D|$5|1E|1F|1G|A|$1H|1I]]|1J|$5|1E|1F|1G|A|$1H|1K]]|1L|$5|1E|1F|1G|A|$1H|1M]]]]

<h3>Question 1: About PGP</h3>

<ul>
<li>PGP (Pretty Good Privacy) is a product and trademark of Symantec Corporation (they bought it some years ago).</li>
<li>OpenPGP is the standard used by PGP.</li>
<li>GnuPG (Gnu Privacy Guard) is a free and open source implementation of PGP.</li>
</ul>

So what you want to do is encrypt to an OpenPGP key. Which implementation of OpenPGP your client uses to decrypt the data is not important for you. With PHP, commonly GnuPG is used and there are interfaces built-in.

<h3>Question 2: Using GnuPG in PHP</h3>

Use the <a href="http://php.net/manual/en/book.gnupg.php" rel="noreferrer">GnuPG interface</a>, which is an extension that can be installed for PHP.

At first, import the key, where <code>$keydata</code> is the ASCII armored public key:

<pre><code>&lt;?php
$gpg = new gnupg();
$info = $gpg -&gt; import($keydata);
print_r($info);
?&gt;
</code></pre>

Then use this key to encrypt the data, this time using the client's key's fingerprint:

<pre><code>&lt;?php
 $gpg = new gnupg();
 $gpg -&gt; addencryptkey("8660281B6051D071D94B5B230549F9DC851566DC");
 $enc = $gpg -&gt; encrypt("just a test");
 echo $enc;
?&gt;
</code></pre>

If you want to encrypt files, read and pass them to <code>encrypt()</code>. Be sure to use at least long key IDs (eg. <code>DEADBEEFDEADBEEF</code>), better fingerprints (as in the example) when referencing keys; and <a href="https://security.stackexchange.com/q/74009/19837">never use short key IDs (<code>DEADBEEF</code>), as those are vulnerable to collision attacks</a>.

<hr>

The is a more <a href="http://www.php.net/manual/en/function.gnupg-encrypt.php#81229" rel="noreferrer">comprehensive example for doing both</a> added by a user in the PHP manual.

blocks|key|3026191|text|我在这里给出一个答案，因为网上很多PHP+GnuPG的例子都是非常简单的，希望这能让一些人省去一些挫败感。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3026192|基本上，它反映了GnuPG命令行工具的工作方式。如果密钥不在gpg的密钥环中，则需要导入密钥，然后需要选择接收者的密钥用于加密/解密。|3026193|gpg+--import+recipients-public-key.asc
gpg+-r+recipient+--encrypt+test.txt|code-block|syntax|javascript|3026194|如果你做了我做的事情，并以接收者的身份传递了密钥，它就不起作用了！|3026195|目前还不清楚这个字段在GPG+manual或PHP+documentation中是什么，后者将这个字段称为“指纹”。使用以下命令检查gpg的钥匙环，查找新导入的密钥：|offset|length|3026196|gpg+--list-keys|3026197|这将输出如下所示：|3026198|pub+++rsa2048+2019-04-14+[SC]+[expires:+2021-04-14]
++++++0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA
uid+++++++++++[ultimate]+Dean+Or
sub+++rsa2048+2019-04-14+[E]+[expires:+2021-04-14]|3026199|这将为您提供UID，并在第二行显示与每个密钥相关联的指纹。据我所知，您可以使用UID和指纹作为收件人。|style|BOLD|3026200|因此，要加密的PHP代码可能如下所示：|3026201|//+Encrypt
$gpg+=+new+gnupg();
$gpg->seterrormode(gnupg::ERROR_EXCEPTION);

//+Check+key+ring+for+recipient+public+key,+otherwise+import+it
$keyInfo+=+$gpg->keyinfo('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
if+(empty($keyInfo))+{
++++$gpg->import('recipients-public-key.asc');
}
$gpg->addencryptkey('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
echo+$gpg->encrypt('This+is+a+test!');|3026202|然后，收件人的代码将如下所示：|3026203|//+Decrypt
$gpg+=+new+gnupg();
$gpg->seterrormode(gnupg::ERROR_EXCEPTION);

//+Check+key+ring+for+recipient+private+key,+otherwise+import+it
$keyInfo+=+$gpg->keyinfo('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
if+(empty($keyInfo))+{
++++$gpg->import('recipients-private-key.asc');
}
$gpg->adddecryptkey('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA',+'');
echo+$gpg->decrypt($encyptedMessage);|3026204|注意，收件人的公钥和私钥的指纹是相同的。|3026205|还有一个已知的问题是adddecryptkey不接受密码短语！您需要删除密码或更改您的GnuPG版本。|3026206|entityMap|0|LINK|mutability|MUTABLE|url|https://www.gnupg.org/documentation/manpage.html|1|https://www.php.net/manual/en/function.gnupg-adddecryptkey.php^0|0|0|0|0|B|A|0|M|H|1|0|0|0|0|T|M|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|1M|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|1N|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|1O|8|@]|9|@$M|1P|N|1Q|1|1R]|$M|1S|N|1T|1|1U]]|A|$]]|$1|O|3|P|5|F|7|1V|8|@]|9|@]|A|$G|H]]|$1|Q|3|R|5|6|7|1W|8|@]|9|@]|A|$]]|$1|S|3|T|5|F|7|1X|8|@]|9|@]|A|$G|H]]|$1|U|3|V|5|6|7|1Y|8|@$M|1Z|N|20|W|X]]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|21|8|@]|9|@]|A|$]]|$1|10|3|11|5|F|7|22|8|@]|9|@]|A|$G|H]]|$1|12|3|13|5|6|7|23|8|@]|9|@]|A|$]]|$1|14|3|15|5|F|7|24|8|@]|9|@]|A|$G|H]]|$1|16|3|17|5|6|7|25|8|@]|9|@]|A|$]]|$1|18|3|19|5|6|7|26|8|@]|9|@]|A|$]]|$1|1A|3|-4|5|6|7|27|8|@]|9|@]|A|$]]]|1B|$1C|$5|1D|1E|1F|A|$1G|1H]]|1I|$5|1D|1E|1F|A|$1G|1J]]]]

Going to leave an answer here as many examples across the net for PHP GnuPG are very bare bones and hopefully this saves someone some frustration. 

Basically, it mirrors how the GnuPG command line tool works. You need to import a key if it's not already in gpg's key ring then you need to select the recipient's key to use for encryption/decryption.

<pre><code>gpg --import recipients-public-key.asc
gpg -r recipient --encrypt test.txt
</code></pre>

If you did what I did and passed in the key as the recipient it doesn't work!

It's not clear what this field is in either the <a href="https://www.gnupg.org/documentation/manpage.html" rel="nofollow noreferrer">GPG manual</a> or <a href="https://www.php.net/manual/en/function.gnupg-adddecryptkey.php" rel="nofollow noreferrer">PHP documentation</a> which refers to this field as "fingerprint". Check gpg's key ring for your freshly imported key with:

<pre><code>gpg --list-keys
</code></pre>

This will output something like this:

<pre><code>pub rsa2048 2019-04-14 [SC] [expires: 2021-04-14]
 0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA
uid [ultimate] Dean Or
sub rsa2048 2019-04-14 [E] [expires: 2021-04-14]
</code></pre>

This will give you the UID and on the second line the fingerprint associated with every key. As far as I can tell you can use the UID and fingerprint as the recipient.

So your PHP code to encrypt might look like this:

<pre><code>// Encrypt
$gpg = new gnupg();
$gpg-&gt;seterrormode(gnupg::ERROR_EXCEPTION);

// Check key ring for recipient public key, otherwise import it
$keyInfo = $gpg-&gt;keyinfo('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
if (empty($keyInfo)) {
 $gpg-&gt;import('recipients-public-key.asc');
}
$gpg-&gt;addencryptkey('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
echo $gpg-&gt;encrypt('This is a test!');
</code></pre>

Then the recipient's code will look like this:

<pre><code>// Decrypt
$gpg = new gnupg();
$gpg-&gt;seterrormode(gnupg::ERROR_EXCEPTION);

// Check key ring for recipient private key, otherwise import it
$keyInfo = $gpg-&gt;keyinfo('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA');
if (empty($keyInfo)) {
 $gpg-&gt;import('recipients-private-key.asc');
}
$gpg-&gt;adddecryptkey('0DAA2C747B1974BE9EB9E6DCF7EE249AD00A46AA', '');
echo $gpg-&gt;decrypt($encyptedMessage);
</code></pre>

Note the fingerprints are the same for both the recipient's public and private key.

There is also a known issue with adddecryptkey not taking a passphrase! You either need to remove the passphrase or change your version of GnuPG.

I want to use PGP encryption to encrypt a CSV files, I am generating through a PHP script and then send that file to client via email. Client will give me the encryption key, which I need to use for encryption files.

I Googled about PGP and found it is Pretty Good Privacy, also I found OpenPGP <a href="http://www.openpgp.org/" rel="noreferrer">http://www.openpgp.org/</a> and GnuPG <a href="http://www.gnupg.org/" rel="noreferrer">http://www.gnupg.org/</a> What are these two types of PGP? and which one should I use?

Also how to encrypt a files using PGP in PHP with the key that my client will provide?

I have heard this term first time, can anyone please help in understanding this and implementing this in PHP.

Encrypt files using PGP in PHP?

命令行工具

我想使用PGP加密来加密CSV文件，我是通过PHP脚本生成的，然后通过电子邮件将该文件发送到客户端。客户端会给我加密密钥，我需要用它来加密文件。我在谷歌上搜索了一下PGP，发现它的隐私性很好，我还发现了OpenPGP 和GnuPG 这两种类型的PGP是什么？我应该用哪一个呢？另外，如何使用PGP在PHP中使用我的客户端...

问在PHP中使用PGP加密文件？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在PHP中使用PGP加密文件？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在PHP中使用PGP加密文件？
EN