1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
<?php
/**
* The OpenID library's Diffie-Hellman implementation.
*
* PHP versions 4 and 5
*
* LICENSE: See the COPYING file included in this distribution.
*
* @package OpenID
* @author JanRain, Inc. <openid@janrain.com>
* @copyright 2005 Janrain, Inc.
* @license http://www.gnu.org/copyleft/lesser.html LGPL
*/
/**
* Check to see if GMP or Bcmath are available and supply the
* appropriate implementation.
*/
if (extension_loaded('gmp') || @dl('gmp.' . PHP_SHLIB_SUFFIX) ||
@dl('php_gmp.' . PHP_SHLIB_SUFFIX)) {
define('Net_OpenID_math_type', 'gmp');
/**
* The Diffie-Hellman key exchange class.
*
* @package OpenID
*/
class Net_OpenID_DiffieHellman {
var $DEFAULT_MOD = '155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443';
var $DEFAULT_GEN = '2';
var $mod;
var $gen;
var $private;
function generateRandom() {
// XXX: not cryptographically secure (potentially predictable)
$limb_cnt = 31;
do {
$rdm = gmp_random($limb_cnt--);
} while (gmp_cmp( $minval, $rdm) > 0);
return $rdm;
}
function Net_OpenID_DiffieHellman($mod=NULL, $gen=NULL, $private=NULL) {
if ($mod === NULL) {
$this->mod = gmp_init($this->DEFAULT_MOD, 10);
} else {
$this->mod = $mod;
}
if ($gen === NULL) {
$this->gen = gmp_init($this->DEFAULT_GEN, 10);
} else {
$this->gen = $gen;
}
$this->private =
$private === NULL ? $this->generateRandom() : $private;
$this->public = user_error("not implemented", E_USER_ERROR);
}
function createKeyExchange( ) {
return Net_OpenID_BigInt::powm( $this->g, $this->x, $this->p);
}
function decryptKeyExchange( $keyEx ) {
return Net_OpenID_BigInt::powm( $keyEx, $this->x, $this->p );
}
}
} elseif (extension_loaded('bcmath') || @dl('bcmath.' . PHP_SHLIB_SUFFIX) ||
@dl('php_bcmath.' . PHP_SHLIB_SUFFIX)) {
/**
* @ignore
*/
define('Net_OpenID_math_type', 'bcmath');
if (!function_exists('bcpowmod')) {
// PHP4 does not expose bcpowmod, so we have to implement it here
/**
* (base ^ exponent) % modulus
*/
function bcpowmod($base, $exponent, $modulus) {
$square = bcmod($base, $modulus);
$result = '1';
while( bccomp( $exponent, 0 ) > 0 ) {
if (bcmod($exponent, 2)) {
// result = (result * square) % modulus
$result = bcmod(bcmul($result, $square), $modulus);
}
$square = bcmod(bcmul($square, $square), $modulus);
$exponent = bcdiv($exponent, 2);
}
return $result;
}
}
/**
* @ignore
* @package OpenID
*/
class Net_OpenID_DiffieHellman {
var $DEFAULT_MOD = '155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443';
var $DEFAULT_GEN = '2';
var $mod;
var $gen;
var $private;
var $public;
function Net_OpenID_DiffieHellman($mod=NULL, $gen=NULL, $private=NULL) {
$this->mod = $mod === NULL ? $this->DEFAULT_MOD : $mod;
$this->gen = $gen === NULL ? $this->DEFAULT_GEN : $gen;
$this->private =
$private === NULL ? $this->generateRandom() : $private;
$this->public = bcpowmod($this->gen, $this->private, $this->mod);
}
function generateRandom() {
// XXX: not cryptographically secure (predictable!!!)
// XXX: also, way too small (usually)
// FIXME
return mt_rand(1, $this->mod);
}
function getSharedSecret($composite) {
return bcpowmod($composite, $this->private, $this->mod);
}
function getPublicKey() {
return $this->public;
}
}
} else {
trigger_error("No usable big int library present (gmp or bcmath). " .
"Only dumb mode OpenID is available.",
E_USER_NOTICE);
}
|
