|
|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
[2017-02-17 06:15 UTC] er dot haridarshan at gmail dot com
Description:
------------
As of 7.1.0, when trying to use AES-256-GCM algorithm with openssl_cipher_iv_length getting warning as
PHP Warning: openssl_cipher_iv_length(): Unknown cipher algorithm
And as mentioned in changelog of 7.1.0
OpenSSL:
Implemented FR #67304 (Added AEAD support [CCM and GCM modes] to openssl_encrypt and openssl_decrypt).
this should work but its not working
Test script:
---------------
function encrypt($algo = 'AES-256-GCM')
{
$key = random_bytes(32); // 256 bits
$iv = random_bytes(openssl_cipher_iv_length($algo));
$ciphertext = openssl_encrypt(
random_bytes(1024 * 1024 * 10),
$algo,
$key,
OPENSSL_RAW_DATA,
$iv,
$tag
);
return $ciphertext;
}
$cipherText = encrypt();
Expected result:
----------------
Exepected Result is the cipherText
Actual result:
--------------
PHP Warning: openssl_cipher_iv_length(): Unknown cipher algorithm in /var/www/test/aes.php on line 13
Warning: openssl_cipher_iv_length(): Unknown cipher algorithm in /var/www/test/aes.php on line 13
PHP Fatal error: Uncaught Error: Length must be greater than 0 in /var/www/test/aes.php:13
Stack trace:
#0 /var/www/test/aes.php(13): random_bytes(false)
#1 /var/www/test/aes.php(41): encrypt('Hello')
#2 {main}
thrown in /var/www/test/aes.php on line 13
Fatal error: Uncaught Error: Length must be greater than 0 in /var/www/test/aes.php:13
Stack trace:
#0 /var/www/test/aes.php(13): random_bytes(false)
#1 /var/www/test/aes.php(41): encrypt('Hello')
#2 {main}
thrown in /var/www/test/aes.php on line 13
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Fri Jul 04 11:01:37 2025 UTC |
Yeah lowercase works. openssl_get_cipher_methods(); returns values algorithm names in capital as well as lower-case but not of aes-256-gcm and few others. Here is the sample output [16] => AES-256-CBC [17] => AES-256-CBC-HMAC-SHA1 [18] => AES-256-CFB [19] => AES-256-CFB1 [20] => AES-256-CFB8 [21] => AES-256-CTR [22] => AES-256-ECB [23] => AES-256-OFB [24] => AES-256-XTS --------------------------------- [101] => aes-256-cbc [102] => aes-256-cbc-hmac-sha1 [103] => aes-256-ccm [104] => aes-256-cfb [105] => aes-256-cfb1 [106] => aes-256-cfb8 [107] => aes-256-ctr [108] => aes-256-ecb [109] => aes-256-gcm [110] => aes-256-ofb [111] => aes-256-xts As you can see aes-256-cbc is returned both in lower-case and upper-case then why not AES-256-GCM