Kickass Crypto

openssl.php

2023-04-04 jj5 - these constants are for use with the OpenSSL module.

2023-04-04 jj5 - NOTE: these constants are constants and not configuration settings. If you need to override any of these, for instance to test the correct handling of error scenarios, please override the relevant get_const_*() accessor in the KickassCrypto class, don't edit these... please see the documentation in README.md for an explanation of these values.

KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_CURR

2023-04-05 jj5 - this happens when CONFIG_OPENSSL_SECRET_CURR is defined for the round-trip use case and the OpenSSL module but it is not valid.


    public
        string
    KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_CURR
    = 'config invalid: CONFIG_OPENSSL_SECRET_CURR.'

KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_LIST

2023-04-05 jj5 - this happens when CONFIG_OPENSSL_SECRET_LIST is defined for the at-rest use case and the OpenSSL module but it is not valid.


    public
        string
    KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_LIST
    = 'config invalid: CONFIG_OPENSSL_SECRET_LIST.'

KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_PREV

2023-04-05 jj5 - this happens when CONFIG_OPENSSL_SECRET_PREV is defined for the round-trip use case and the OpenSSL module but it is not valid.


    public
        string
    KICKASS_CRYPTO_CONFIG_PROBLEM_INVALID_OPENSSL_SECRET_PREV
    = 'config invalid: CONFIG_OPENSSL_SECRET_PREV.'

KICKASS_CRYPTO_CONFIG_PROBLEM_MISSING_OPENSSL_SECRET_CURR

2023-04-05 jj5 - this happens when CONFIG_OPENSSL_SECRET_CURR is not defined for the round-trip use case and the OpenSSL module.


    public
        string
    KICKASS_CRYPTO_CONFIG_PROBLEM_MISSING_OPENSSL_SECRET_CURR
    = 'config missing: CONFIG_OPENSSL_SECRET_CURR.'

KICKASS_CRYPTO_CONFIG_PROBLEM_MISSING_OPENSSL_SECRET_LIST

2023-04-05 jj5 - this happens when CONFIG_OPENSSL_SECRET_LIST is not defined for the at-rest use case and the OpenSSL module.


    public
        string
    KICKASS_CRYPTO_CONFIG_PROBLEM_MISSING_OPENSSL_SECRET_LIST
    = 'config missing: CONFIG_OPENSSL_SECRET_LIST.'

KICKASS_CRYPTO_OPENSSL_CIPHER

2023-04-05 jj5 - this is the OpenSSL cipher we use, this should never be changed... at least not without a lot of support to upgrading to a new cipher.


    public
        string
    KICKASS_CRYPTO_OPENSSL_CIPHER
    = 'aes-256-gcm'

KICKASS_CRYPTO_OPENSSL_IV_LENGTH

2023-04-05 jj5 - this is the length of the initialization vector expected by the openssl_encrypt() and openssl_decrypt() fucntions, this should not be changed.


    public
        int
    KICKASS_CRYPTO_OPENSSL_IV_LENGTH
    = 12

KICKASS_CRYPTO_OPENSSL_OPTIONS

2023-04-05 jj5 - these are the options for the OpenSSL openssl_encrypt() function, these should not be changed.


    public
        int
    KICKASS_CRYPTO_OPENSSL_OPTIONS
    = \OPENSSL_RAW_DATA

KICKASS_CRYPTO_OPENSSL_PASSPHRASE_LENGTH

2023-04-05 jj5 - this is the passphrase length excepted by the openssl_encrypt() function, this should not be changed.


    public
        int
    KICKASS_CRYPTO_OPENSSL_PASSPHRASE_LENGTH
    = 32

KICKASS_CRYPTO_OPENSSL_TAG_LENGTH

2023-04-05 jj5 - this is the tag length of the tag generated by the openssl_encrypt() function and expected by the openssl_decrypt() function, this should not be changed.


    public
        int
    KICKASS_CRYPTO_OPENSSL_TAG_LENGTH
    = 16