PHP: Hypertext Preprocessor (original) (raw)

`<?php ciphers=opensslgetciphermethods();//ECBmodeshouldbeavoided<spanclass="katex"><spanclass="katex−mathml"><mathxmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mi>c</mi><mi>i</mi><mi>p</mi><mi>h</mi><mi>e</mi><mi>r</mi><mi>s</mi><mo>=</mo><mi>a</mi><mi>r</mi><mi>r</mi><mi>a</mi><msub><mi>y</mi><mi>f</mi></msub><mi>i</mi><mi>l</mi><mi>t</mi><mi>e</mi><mi>r</mi><mostretchy="false">(</mo></mrow><annotationencoding="application/x−tex">ciphers=arrayfilter(</annotation></semantics></math><spanclass="katex−html"aria−hidden="true"><spanclass="base"><spanclass="strut"style="height:0.8889em;vertical−align:−0.1944em;"><spanclass="mordmathnormal">c<spanclass="mordmathnormal">i<spanclass="mordmathnormal">p<spanclass="mordmathnormal">h<spanclass="mordmathnormal">ers<spanclass="mspace"style="margin−right:0.2778em;"><spanclass="mrel">=<spanclass="mspace"style="margin−right:0.2778em;"><spanclass="base"><spanclass="strut"style="height:1.0361em;vertical−align:−0.2861em;"><spanclass="mordmathnormal">a<spanclass="mordmathnormal"style="margin−right:0.02778em;">rr<spanclass="mordmathnormal">a<spanclass="mord"><spanclass="mordmathnormal"style="margin−right:0.03588em;">y<spanclass="msupsub"><spanclass="vlist−tvlist−t2"><spanclass="vlist−r"><spanclass="vlist"style="height:0.3361em;"><spanstyle="top:−2.55em;margin−left:−0.0359em;margin−right:0.05em;"><spanclass="pstrut"style="height:2.7em;"><spanclass="sizingreset−size6size3mtight"><spanclass="mordmathnormalmtight"style="margin−right:0.10764em;">f<spanclass="vlist−s"><spanclass="vlist−r"><spanclass="vlist"style="height:0.2861em;"><spanclass="mordmathnormal">i<spanclass="mordmathnormal">lt<spanclass="mordmathnormal"style="margin−right:0.02778em;">er<spanclass="mopen">(ciphers,function(ciphers = openssl_get_cipher_methods();//ECB mode should be avoided <math xmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mi>c</mi><mi>i</mi><mi>p</mi><mi>h</mi><mi>e</mi><mi>r</mi><mi>s</mi><mo>=</mo><mi>a</mi><mi>r</mi><mi>r</mi><mi>a</mi><msub><mi>y</mi><mi>f</mi></msub><mi>i</mi><mi>l</mi><mi>t</mi><mi>e</mi><mi>r</mi><mo stretchy="false">(</mo></mrow><annotation encoding="application/x-tex">ciphers = array_filter(</annotation></semantics></math>ciphers=arrayfilter(ciphers, function (ciphers=opensslgetciphermethods();//ECBmodeshouldbeavoided<spanclass="katex"><spanclass="katex−mathml"><mathxmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mi>c</mi><mi>i</mi><mi>p</mi><mi>h</mi><mi>e</mi><mi>r</mi><mi>s</mi><mo>=</mo><mi>a</mi><mi>r</mi><mi>r</mi><mi>a</mi><msub><mi>y</mi><mi>f</mi></msub><mi>i</mi><mi>l</mi><mi>t</mi><mi>e</mi><mi>r</mi><mostretchy="false">(</mo></mrow><annotationencoding="application/x−tex">ciphers=arrayfilter(</annotation></semantics></math><spanclass="katex−html"aria−hidden="true"><spanclass="base"><spanclass="strut"style="height:0.8889em;vertical−align:−0.1944em;"><spanclass="mordmathnormal">c<spanclass="mordmathnormal">i<spanclass="mordmathnormal">p<spanclass="mordmathnormal">h<spanclass="mordmathnormal">ers<spanclass="mspace"style="margin−right:0.2778em;"><spanclass="mrel">=<spanclass="mspace"style="margin−right:0.2778em;"><spanclass="base"><spanclass="strut"style="height:1.0361em;vertical−align:−0.2861em;"><spanclass="mordmathnormal">a<spanclass="mordmathnormal"style="margin−right:0.02778em;">rr<spanclass="mordmathnormal">a<spanclass="mord"><spanclass="mordmathnormal"style="margin−right:0.03588em;">y<spanclass="msupsub"><spanclass="vlist−tvlist−t2"><spanclass="vlist−r"><spanclass="vlist"style="height:0.3361em;"><spanstyle="top:−2.55em;margin−left:−0.0359em;margin−right:0.05em;"><spanclass="pstrut"style="height:2.7em;"><spanclass="sizingreset−size6size3mtight"><spanclass="mordmathnormalmtight"style="margin−right:0.10764em;">f<spanclass="vlist−s"><spanclass="vlist−r"><spanclass="vlist"style="height:0.2861em;"><spanclass="mordmathnormal">i<spanclass="mordmathnormal">lt<spanclass="mordmathnormal"style="margin−right:0.02778em;">er<spanclass="mopen">(ciphers,function(n) {
return stripos($n, "ecb") === FALSE;
});// At least as early as Aug 2016, Openssl declared the following weak: RC2, RC4, DES, 3DES, MD5 based ciphers=arrayfilter(ciphers = array_filter(ciphers=arrayfilter(ciphers, function ($c) {
return stripos($c, "des") === FALSE;
}); ciphers=arrayfilter(ciphers = array_filter(ciphers=arrayfilter(ciphers, function ($c) {
return stripos($c, "rc2") === FALSE;
}); ciphers=arrayfilter(ciphers = array_filter(ciphers=arrayfilter(ciphers, function ($c) {
return stripos($c, "rc4") === FALSE;
}); ciphers=arrayfilter(ciphers = array_filter(ciphers=arrayfilter(ciphers, function ($c) {
return stripos($c, "md5") === FALSE;
});

if (

is_array($ciphers)) {
foreach ($ciphers as $cipher) {
echo $cipher.': ';
echo openssl_cipher_iv_length($cipher);
echo "
\n";
}
}
?>

Will be...
AES-xxx-xxx is 16
BF-xxx is 8
CAMELLIA-xxx is 16
CAST5-xxx is 8
IDEA-xxx is 8
SEED-xxx is 16

lower case:
aes-xxx-xxx are mixed between 16 and 12.
id-aes-xxx are mixed between 12 and 8.
The values above are tested with PHP 5.5 - 5.6 on Windows. In PHP 7.x is different than this.