blocks|key|282266|text|与listed相比，mcrypt实际上实现了更多的模式，您可以使用字符串名称来访问它们：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|282267|282268|cbc+-+CBC+mode|unordered-list-item|282269|cfb+-8位CFB+mode;|282270|ncfb+-块大小CFB+mode;|282271|nofb+-+OFB模式(非ofb);|282272|ctr+-+CTR模式。|282273|282274|这些模式在实现细节上有所不同，因此它们的适用性取决于您的数据和环境。|282275|填充|BOLD|282276|除非您实现了自己的padding.|282277|CFB，|282278|
|282279|和CTR模式来加密任意长度的消息，否则mcrypt会用零字节填充您的明文。|282280|282281|初始化向量|282282|282283|CBC和CFB模式需要一个随机IV+(不要使用deleted).|282284|CTR模式，只需要一个唯一的IV+(例如，全局计数器，如果行从未被修改，则可能是数据库主键)，或者要求每个计数器块是唯一的(不仅仅是消息的IV，它是第一个计数器块，其余的是通过为每个消息块将计数器块递增1而形成的)。|282285|282286|有关更多信息，请参阅NIST+recommendations。|282287|性能上的差异在PHP中是不重要的，比如加密或解密是否可以并行化，以及每个块使用了多少次密码迭代(通常是一次，但在8位CFB模式下是16次)。|282288|malleability中存在一些差异，这些差异应该不重要，因为您将应用MAC。|282289|它们的安全性可能会有所不同，但为此您应该咨询cryptographer。|282290|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/manual/en/mcrypt.constants.php|1|http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf|2|http://en.wikipedia.org/wiki/Malleability_(cryptography)|3|http://en.wikipedia.org/wiki/Message_authentication_codes|4|http://www.daemonology.net/blog/2009-06-11-cryptographic-right-answers.html^0|A|6|1|6|0|0|0|0|3|0|0|3|0|0|4|0|0|4|E|3|0|0|3|0|0|0|0|2|0|0|0|0|J|6|0|0|0|5|0|0|0|0|0|A|K|1|0|0|0|C|2|10|3|3|0|M|D|4|0^^$0|@$1|2|3|4|5|6|7|22|8|@$9|23|A|24|B|C]]|D|@$9|25|A|26|1|27]]|E|$]]|$1|F|3|-4|5|6|7|28|8|@]|D|@]|E|$]]|$1|G|3|H|5|I|7|29|8|@$9|2A|A|2B|B|C]]|D|@]|E|$]]|$1|J|3|K|5|I|7|2C|8|@$9|2D|A|2E|B|C]]|D|@]|E|$]]|$1|L|3|M|5|I|7|2F|8|@$9|2G|A|2H|B|C]]|D|@]|E|$]]|$1|N|3|O|5|I|7|2I|8|@$9|2J|A|2K|B|C]|$9|2L|A|2M|B|C]]|D|@]|E|$]]|$1|P|3|Q|5|I|7|2N|8|@$9|2O|A|2P|B|C]]|D|@]|E|$]]|$1|R|3|-4|5|6|7|2Q|8|@]|D|@]|E|$]]|$1|S|3|T|5|6|7|2R|8|@]|D|@]|E|$]]|$1|U|3|V|5|6|7|2S|8|@$9|2T|A|2U|B|W]]|D|@]|E|$]]|$1|X|3|Y|5|6|7|2V|8|@]|D|@]|E|$]]|$1|Z|3|10|5|I|7|2W|8|@]|D|@]|E|$]]|$1|11|3|12|5|6|7|2X|8|@]|D|@]|E|$]]|$1|13|3|14|5|I|7|2Y|8|@$9|2Z|A|30|B|C]]|D|@]|E|$]]|$1|15|3|-4|5|6|7|31|8|@]|D|@]|E|$]]|$1|16|3|17|5|6|7|32|8|@$9|33|A|34|B|W]]|D|@]|E|$]]|$1|18|3|-4|5|6|7|35|8|@]|D|@]|E|$]]|$1|19|3|1A|5|I|7|36|8|@]|D|@]|E|$]]|$1|1B|3|1C|5|I|7|37|8|@]|D|@]|E|$]]|$1|1D|3|-4|5|6|7|38|8|@]|D|@]|E|$]]|$1|1E|3|1F|5|6|7|39|8|@]|D|@$9|3A|A|3B|1|3C]]|E|$]]|$1|1G|3|1H|5|6|7|3D|8|@]|D|@]|E|$]]|$1|1I|3|1J|5|6|7|3E|8|@]|D|@$9|3F|A|3G|1|3H]|$9|3I|A|3J|1|3K]]|E|$]]|$1|1K|3|1L|5|6|7|3L|8|@]|D|@$9|3M|A|3N|1|3O]]|E|$]]|$1|1M|3|-4|5|6|7|3P|8|@]|D|@]|E|$]]]|1N|$1O|$5|1P|1Q|1R|E|$1S|1T]]|1U|$5|1P|1Q|1R|E|$1S|1V]]|1W|$5|1P|1Q|1R|E|$1S|1X]]|1Y|$5|1P|1Q|1R|E|$1S|1Z]]|20|$5|1P|1Q|1R|E|$1S|21]]]]

<code>mcrypt</code> actually implements more modes than <a href="http://www.php.net/manual/en/mcrypt.constants.php" rel="noreferrer">listed</a>, you can use the string names to access them:

<ul>
<li><code>cbc</code> – CBC mode</li>
<li><code>cfb</code> – 8-bit CFB mode;</li>
<li><code>ncfb</code> – block-size CFB mode;</li>
<li><code>nofb</code> – OFB mode (not <code>ofb</code>);</li>
<li><code>ctr</code> – CTR mode.</li>
</ul>

The modes differ in implementation details, so their suitability depends on your data and environment.

Padding:

<ul>
<li>CBC mode only encrypts complete blocks, so <code>mcrypt</code> pads your plaintext with zero bytes unless you implement your own padding.</li>
<li>CFB, OFB and CTR modes encrypt messages of any length.</li>
</ul>

Initialization vector:

<ul>
<li>CBC and CFB modes require a random IV (don't use <code>MCRYPT_RAND</code>).</li>
<li>OFB mode merely requires a unique IV (e.g. a global counter, maybe the database primary key if rows are never modified or deleted).</li>
<li>CTR requires that each counter block is unique (not just the IV of the message, which is the first counter block, but the rest, formed by incrementing the counter block by 1 for each block of the message).</li>
</ul>

More information in the <a href="http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf" rel="noreferrer">NIST recommendations</a>.

There are differences in performance which should be unimportant in PHP, such as whether encryption or decryption can be parallelized and how many cipher iterations are used per block (usually one, but 16 in 8-bit CFB mode).

There are differences in <a href="http://en.wikipedia.org/wiki/Malleability_(cryptography)" rel="noreferrer">malleability</a> which should be unimportant because you will apply a <a href="http://en.wikipedia.org/wiki/Message_authentication_codes" rel="noreferrer">MAC</a>.

And there may be differences in their security, but for that you should consult a <a href="http://www.daemonology.net/blog/2009-06-11-cryptographic-right-answers.html" rel="noreferrer">cryptographer</a>.

I've been testing out the various <a href="http://www.php.net/manual/en/mcrypt.constants.php" rel="nofollow noreferrer">modes</a> available in PHP's <code>mcrypt</code> function. ECB is the mode used in most tutorials, but isn't recommended by both the just linked page and <a href="https://stackoverflow.com/questions/2809855/which-php-mcrypt-cipher-is-safest">some users</a>, so I reckon that either CBC or CFB should do the trick.

The PHP documentation isn't too fat in it's comparision of the different modes available to <code>mcrypt</code> and instead refers to the book of 'Applied Cryptography by Schneier', which I am not too keen to buy for the moment.

So which of the <code>mcrypt</code>-modes do I want to use and why?

PHP: Mcrypt - which mode?

数据库

我一直在测试PHP的mcrypt函数中提供的各种。ECB是大多数教程中使用的模式，但并不是刚链接的页面和都推荐使用的模式，所以我认为CBC或CFB中的任何一个都可以做到这一点。PHP文档在比较mcrypt可用的不同模式时并不是太多，而是参考了“Schneier的应用密码学”这本书，我目前不太想买这本书。那么，我应该使用...

问PHP: Mcrypt -哪种模式？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问PHP: Mcrypt -哪种模式？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问PHP: Mcrypt -哪种模式？
EN