sop / jwx

lib/JWX/JWE/KeyManagementAlgorithm.php

Indentation +109 added lines, -109 removed lines

@@ -16,122 +16,122 @@
  * algorithms.
  */
 abstract class KeyManagementAlgorithm implements 
-    AlgorithmParameterValue,
-    HeaderParameters
+	AlgorithmParameterValue,
+	HeaderParameters
 {
-    /**
-     * ID of the key used by the algorithm.
-     *
-     * If set, KeyID parameter shall be automatically inserted into JWE's
-     * header.
-     *
-     * @var string|null $_keyID
-     */
-    protected $_keyID;
+	/**
+	 * ID of the key used by the algorithm.
+	 *
+	 * If set, KeyID parameter shall be automatically inserted into JWE's
+	 * header.
+	 *
+	 * @var string|null $_keyID
+	 */
+	protected $_keyID;
     
-    /**
-     * Encrypt a key.
-     *
-     * @param string $key Key to be encrypted
-     * @param Header $header Reference to the Header variable, that shall
-     *        be updated to contain parameters specific to the encryption
-     * @return string Ciphertext
-     */
-    abstract protected function _encryptKey(string $key, Header &$header): string;
+	/**
+	 * Encrypt a key.
+	 *
+	 * @param string $key Key to be encrypted
+	 * @param Header $header Reference to the Header variable, that shall
+	 *        be updated to contain parameters specific to the encryption
+	 * @return string Ciphertext
+	 */
+	abstract protected function _encryptKey(string $key, Header &$header): string;
     
-    /**
-     * Decrypt a key.
-     *
-     * @param string $ciphertext Ciphertext of the encrypted key
-     * @param Header $header Header possibly containing encoding specific
-     *        parameters
-     * @return string Plaintext key
-     */
-    abstract protected function _decryptKey(string $ciphertext, Header $header): string;
+	/**
+	 * Decrypt a key.
+	 *
+	 * @param string $ciphertext Ciphertext of the encrypted key
+	 * @param Header $header Header possibly containing encoding specific
+	 *        parameters
+	 * @return string Plaintext key
+	 */
+	abstract protected function _decryptKey(string $ciphertext, Header $header): string;
     
-    /**
-     * Encrypt a key to be inserted into JWE header.
-     *
-     * @param string $cek Content encryption key
-     * @param Header|null $header Optional reference to the Header variable,
-     *        which may be updated to contain parameters specific to this
-     *        encrypt invocation. If the variable is referenced, but is a null,
-     *        it shall be initialized to an empty Header.
-     * @throws \RuntimeException For generic errors
-     * @return string Encrypted key
-     */
-    final public function encrypt(string $cek, Header &$header = null): string
-    {
-        if (!isset($header)) {
-            $header = new Header();
-        }
-        return $this->_encryptKey($cek, $header);
-    }
+	/**
+	 * Encrypt a key to be inserted into JWE header.
+	 *
+	 * @param string $cek Content encryption key
+	 * @param Header|null $header Optional reference to the Header variable,
+	 *        which may be updated to contain parameters specific to this
+	 *        encrypt invocation. If the variable is referenced, but is a null,
+	 *        it shall be initialized to an empty Header.
+	 * @throws \RuntimeException For generic errors
+	 * @return string Encrypted key
+	 */
+	final public function encrypt(string $cek, Header &$header = null): string
+	{
+		if (!isset($header)) {
+			$header = new Header();
+		}
+		return $this->_encryptKey($cek, $header);
+	}
     
-    /**
-     * Decrypt a CEK from the encrypted data.
-     *
-     * @param string $data Encrypted key
-     * @param Header|null Optional header containing parameters required to
-     *        decrypt the key.
-     * @throws \RuntimeException For generic errors
-     * @return string Content encryption key
-     */
-    final public function decrypt(string $data, Header $header = null): string
-    {
-        if (!isset($header)) {
-            $header = new Header();
-        }
-        return $this->_decryptKey($data, $header);
-    }
+	/**
+	 * Decrypt a CEK from the encrypted data.
+	 *
+	 * @param string $data Encrypted key
+	 * @param Header|null Optional header containing parameters required to
+	 *        decrypt the key.
+	 * @throws \RuntimeException For generic errors
+	 * @return string Content encryption key
+	 */
+	final public function decrypt(string $data, Header $header = null): string
+	{
+		if (!isset($header)) {
+			$header = new Header();
+		}
+		return $this->_decryptKey($data, $header);
+	}
     
-    /**
-     * Get content encryption key for the encryption.
-     *
-     * Returned key may be random depending on the key management algorithm.
-     *
-     * @param int $length Required key size in bytes
-     * @return string
-     */
-    abstract public function cekForEncryption(int $length): string;
+	/**
+	 * Get content encryption key for the encryption.
+	 *
+	 * Returned key may be random depending on the key management algorithm.
+	 *
+	 * @param int $length Required key size in bytes
+	 * @return string
+	 */
+	abstract public function cekForEncryption(int $length): string;
     
-    /**
-     * Initialize key management algorithm from a JWK and a header.
-     *
-     * @param JWK $jwk
-     * @param Header $header
-     * @return KeyManagementAlgorithm
-     */
-    public static function fromJWK(JWK $jwk, Header $header)
-    {
-        $factory = new KeyAlgorithmFactory($header);
-        return $factory->algoByKey($jwk);
-    }
+	/**
+	 * Initialize key management algorithm from a JWK and a header.
+	 *
+	 * @param JWK $jwk
+	 * @param Header $header
+	 * @return KeyManagementAlgorithm
+	 */
+	public static function fromJWK(JWK $jwk, Header $header)
+	{
+		$factory = new KeyAlgorithmFactory($header);
+		return $factory->algoByKey($jwk);
+	}
     
-    /**
-     * Get self with key ID.
-     *
-     * @param string|null $id Key ID or null to remove
-     * @return self
-     */
-    public function withKeyID($id): self
-    {
-        $obj = clone $this;
-        $obj->_keyID = $id;
-        return $obj;
-    }
+	/**
+	 * Get self with key ID.
+	 *
+	 * @param string|null $id Key ID or null to remove
+	 * @return self
+	 */
+	public function withKeyID($id): self
+	{
+		$obj = clone $this;
+		$obj->_keyID = $id;
+		return $obj;
+	}
     
-    /**
-     *
-     * @see \JWX\JWT\Header\HeaderParameters::headerParameters()
-     * @return \JWX\JWT\Parameter\JWTParameter[]
-     */
-    public function headerParameters(): array
-    {
-        $params = array();
-        if (isset($this->_keyID)) {
-            $params[] = new KeyIDParameter($this->_keyID);
-        }
-        return $params;
-    }
+	/**
+	 *
+	 * @see \JWX\JWT\Header\HeaderParameters::headerParameters()
+	 * @return \JWX\JWT\Parameter\JWTParameter[]
+	 */
+	public function headerParameters(): array
+	{
+		$params = array();
+		if (isset($this->_keyID)) {
+			$params[] = new KeyIDParameter($this->_keyID);
+		}
+		return $params;
+	}
 }

Spacing +2 added lines, -2 removed lines

@@ -37,7 +37,7 @@ 
      *        be updated to contain parameters specific to the encryption
      * @return string Ciphertext
      */
-    abstract protected function _encryptKey(string $key, Header &$header): string;
+    abstract protected function _encryptKey(string $key, Header&$header): string;
     
     /**
      * Decrypt a key.
@@ -60,7 +60,7 @@ 
      * @throws \RuntimeException For generic errors
      * @return string Encrypted key
      */
-    final public function encrypt(string $cek, Header &$header = null): string
+    final public function encrypt(string $cek, Header&$header = null): string
     {
         if (!isset($header)) {
             $header = new Header();

lib/JWX/JWE/EncryptionAlgorithm/A128CBCHS256Algorithm.php

Indentation +56 added lines, -56 removed lines

@@ -13,66 +13,66 @@
  */
 class A128CBCHS256Algorithm extends AESCBCAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 32;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 32;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A128CBC_HS256;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A128CBC_HS256;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _cipherMethod(): string
-    {
-        return "AES-128-CBC";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _cipherMethod(): string
+	{
+		return "AES-128-CBC";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha256";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha256";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _encKeyLen(): int
-    {
-        return 16;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _encKeyLen(): int
+	{
+		return 16;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _macKeyLen(): int
-    {
-        return 16;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _macKeyLen(): int
+	{
+		return 16;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _tagLen(): int
-    {
-        return 16;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _tagLen(): int
+	{
+		return 16;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/AESCBCAlgorithm.php

Indentation +206 added lines, -206 removed lines

@@ -15,210 +15,210 @@
  */
 abstract class AESCBCAlgorithm implements ContentEncryptionAlgorithm
 {
-    /**
-     * Get cipher method name that is recognized by OpenSSL.
-     *
-     * @return string
-     */
-    abstract protected function _cipherMethod(): string;
-    
-    /**
-     * Get algorithm name that is recognized by the Hash extension.
-     *
-     * @return string
-     */
-    abstract protected function _hashAlgo(): string;
-    
-    /**
-     * Get length of the encryption key.
-     *
-     * @return int
-     */
-    abstract protected function _encKeyLen(): int;
-    
-    /**
-     * Get length of the MAC key.
-     *
-     * @return int
-     */
-    abstract protected function _macKeyLen(): int;
-    
-    /**
-     * Get length of the authentication tag.
-     *
-     * @return int
-     */
-    abstract protected function _tagLen(): int;
-    
-    /**
-     * Get cipher method and verify that it's supported.
-     *
-     * @throws \RuntimeException
-     * @return string
-     */
-    final protected function _getCipherMethod(): string
-    {
-        static $supported_ciphers;
-        if (!isset($supported_ciphers)) {
-            $supported_ciphers = array_flip(openssl_get_cipher_methods());
-        }
-        $method = $this->_cipherMethod();
-        if (!isset($supported_ciphers[$method])) {
-            throw new \RuntimeException(
-                "Cipher method $method is not" .
-                     " supported by this version of OpenSSL.");
-        }
-        return $method;
-    }
-    
-    /**
-     * Check that key is valid.
-     *
-     * @param string $key
-     * @throws \RuntimeException
-     */
-    final protected function _validateKey(string $key)
-    {
-        if (strlen($key) != $this->keySize()) {
-            throw new \RuntimeException("Invalid key size.");
-        }
-    }
-    
-    /**
-     * Check that IV is valid.
-     *
-     * @param string $iv
-     * @throws \RuntimeException
-     */
-    final protected function _validateIV(string $iv)
-    {
-        $len = openssl_cipher_iv_length($this->_getCipherMethod());
-        if ($len != strlen($iv)) {
-            throw new \RuntimeException("Invalid IV length.");
-        }
-    }
-    
-    /**
-     * Get MAC key from CEK.
-     *
-     * @param string $key
-     * @return string
-     */
-    final protected function _macKey(string $key): string
-    {
-        return substr($key, 0, $this->_macKeyLen());
-    }
-    
-    /**
-     * Get encryption key from CEK.
-     *
-     * @param string $key
-     * @return string
-     */
-    final protected function _encKey(string $key): string
-    {
-        return substr($key, -$this->_encKeyLen());
-    }
-    
-    /**
-     * Compute AL value.
-     *
-     * @param string $aad
-     * @return string 64 bits
-     */
-    final protected function _aadLen(string $aad): string
-    {
-        // truncate on 32 bit hosts
-        if (PHP_INT_SIZE < 8) {
-            return "\0\0\0\0" . pack("N", strlen($aad) * 8);
-        }
-        return pack("J", strlen($aad) * 8);
-    }
-    
-    /**
-     * Compute authentication tag.
-     *
-     * @param string $data
-     * @param string $key CEK
-     * @return string
-     */
-    final protected function _computeAuthTag(string $data, string $key): string
-    {
-        $tag = hash_hmac($this->_hashAlgo(), $data, $this->_macKey($key), true);
-        return substr($tag, 0, $this->_tagLen());
-    }
-    
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encrypt(string $plaintext, string $key, string $iv,
-        string $aad): array
-    {
-        $this->_validateKey($key);
-        $this->_validateIV($iv);
-        $ciphertext = openssl_encrypt($plaintext, $this->_getCipherMethod(),
-            $this->_encKey($key), OPENSSL_RAW_DATA, $iv);
-        if (false === $ciphertext) {
-            throw new \RuntimeException(
-                "openssl_encrypt() failed: " . $this->_getLastOpenSSLError());
-        }
-        $auth_data = $aad . $iv . $ciphertext . $this->_aadLen($aad);
-        $auth_tag = $this->_computeAuthTag($auth_data, $key);
-        return [$ciphertext, $auth_tag];
-    }
-    
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function decrypt(string $ciphertext, string $key, string $iv,
-        string $aad, string $auth_tag): string
-    {
-        $this->_validateKey($key);
-        $this->_validateIV($iv);
-        $auth_data = $aad . $iv . $ciphertext . $this->_aadLen($aad);
-        if ($this->_computeAuthTag($auth_data, $key) != $auth_tag) {
-            throw new AuthenticationException("Message authentication failed.");
-        }
-        $plaintext = openssl_decrypt($ciphertext, $this->_getCipherMethod(),
-            $this->_encKey($key), OPENSSL_RAW_DATA, $iv);
-        if (false === $plaintext) {
-            throw new \RuntimeException(
-                "openssl_decrypt() failed: " . $this->_getLastOpenSSLError());
-        }
-        return $plaintext;
-    }
-    
-    /**
-     * Get last OpenSSL error message.
-     *
-     * @return string|null
-     */
-    protected function _getLastOpenSSLError()
-    {
-        $msg = null;
-        while (false !== ($err = openssl_error_string())) {
-            $msg = $err;
-        }
-        return $msg;
-    }
-    
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function ivSize(): int
-    {
-        return 16;
-    }
-    
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function headerParameters(): array
-    {
-        return array(EncryptionAlgorithmParameter::fromAlgorithm($this));
-    }
+	/**
+	 * Get cipher method name that is recognized by OpenSSL.
+	 *
+	 * @return string
+	 */
+	abstract protected function _cipherMethod(): string;
+    
+	/**
+	 * Get algorithm name that is recognized by the Hash extension.
+	 *
+	 * @return string
+	 */
+	abstract protected function _hashAlgo(): string;
+    
+	/**
+	 * Get length of the encryption key.
+	 *
+	 * @return int
+	 */
+	abstract protected function _encKeyLen(): int;
+    
+	/**
+	 * Get length of the MAC key.
+	 *
+	 * @return int
+	 */
+	abstract protected function _macKeyLen(): int;
+    
+	/**
+	 * Get length of the authentication tag.
+	 *
+	 * @return int
+	 */
+	abstract protected function _tagLen(): int;
+    
+	/**
+	 * Get cipher method and verify that it's supported.
+	 *
+	 * @throws \RuntimeException
+	 * @return string
+	 */
+	final protected function _getCipherMethod(): string
+	{
+		static $supported_ciphers;
+		if (!isset($supported_ciphers)) {
+			$supported_ciphers = array_flip(openssl_get_cipher_methods());
+		}
+		$method = $this->_cipherMethod();
+		if (!isset($supported_ciphers[$method])) {
+			throw new \RuntimeException(
+				"Cipher method $method is not" .
+					 " supported by this version of OpenSSL.");
+		}
+		return $method;
+	}
+    
+	/**
+	 * Check that key is valid.
+	 *
+	 * @param string $key
+	 * @throws \RuntimeException
+	 */
+	final protected function _validateKey(string $key)
+	{
+		if (strlen($key) != $this->keySize()) {
+			throw new \RuntimeException("Invalid key size.");
+		}
+	}
+    
+	/**
+	 * Check that IV is valid.
+	 *
+	 * @param string $iv
+	 * @throws \RuntimeException
+	 */
+	final protected function _validateIV(string $iv)
+	{
+		$len = openssl_cipher_iv_length($this->_getCipherMethod());
+		if ($len != strlen($iv)) {
+			throw new \RuntimeException("Invalid IV length.");
+		}
+	}
+    
+	/**
+	 * Get MAC key from CEK.
+	 *
+	 * @param string $key
+	 * @return string
+	 */
+	final protected function _macKey(string $key): string
+	{
+		return substr($key, 0, $this->_macKeyLen());
+	}
+    
+	/**
+	 * Get encryption key from CEK.
+	 *
+	 * @param string $key
+	 * @return string
+	 */
+	final protected function _encKey(string $key): string
+	{
+		return substr($key, -$this->_encKeyLen());
+	}
+    
+	/**
+	 * Compute AL value.
+	 *
+	 * @param string $aad
+	 * @return string 64 bits
+	 */
+	final protected function _aadLen(string $aad): string
+	{
+		// truncate on 32 bit hosts
+		if (PHP_INT_SIZE < 8) {
+			return "\0\0\0\0" . pack("N", strlen($aad) * 8);
+		}
+		return pack("J", strlen($aad) * 8);
+	}
+    
+	/**
+	 * Compute authentication tag.
+	 *
+	 * @param string $data
+	 * @param string $key CEK
+	 * @return string
+	 */
+	final protected function _computeAuthTag(string $data, string $key): string
+	{
+		$tag = hash_hmac($this->_hashAlgo(), $data, $this->_macKey($key), true);
+		return substr($tag, 0, $this->_tagLen());
+	}
+    
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encrypt(string $plaintext, string $key, string $iv,
+		string $aad): array
+	{
+		$this->_validateKey($key);
+		$this->_validateIV($iv);
+		$ciphertext = openssl_encrypt($plaintext, $this->_getCipherMethod(),
+			$this->_encKey($key), OPENSSL_RAW_DATA, $iv);
+		if (false === $ciphertext) {
+			throw new \RuntimeException(
+				"openssl_encrypt() failed: " . $this->_getLastOpenSSLError());
+		}
+		$auth_data = $aad . $iv . $ciphertext . $this->_aadLen($aad);
+		$auth_tag = $this->_computeAuthTag($auth_data, $key);
+		return [$ciphertext, $auth_tag];
+	}
+    
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function decrypt(string $ciphertext, string $key, string $iv,
+		string $aad, string $auth_tag): string
+	{
+		$this->_validateKey($key);
+		$this->_validateIV($iv);
+		$auth_data = $aad . $iv . $ciphertext . $this->_aadLen($aad);
+		if ($this->_computeAuthTag($auth_data, $key) != $auth_tag) {
+			throw new AuthenticationException("Message authentication failed.");
+		}
+		$plaintext = openssl_decrypt($ciphertext, $this->_getCipherMethod(),
+			$this->_encKey($key), OPENSSL_RAW_DATA, $iv);
+		if (false === $plaintext) {
+			throw new \RuntimeException(
+				"openssl_decrypt() failed: " . $this->_getLastOpenSSLError());
+		}
+		return $plaintext;
+	}
+    
+	/**
+	 * Get last OpenSSL error message.
+	 *
+	 * @return string|null
+	 */
+	protected function _getLastOpenSSLError()
+	{
+		$msg = null;
+		while (false !== ($err = openssl_error_string())) {
+			$msg = $err;
+		}
+		return $msg;
+	}
+    
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function ivSize(): int
+	{
+		return 16;
+	}
+    
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function headerParameters(): array
+	{
+		return array(EncryptionAlgorithmParameter::fromAlgorithm($this));
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A256CBCHS512Algorithm.php

Indentation +56 added lines, -56 removed lines

@@ -13,66 +13,66 @@
  */
 class A256CBCHS512Algorithm extends AESCBCAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 64;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 64;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A256CBC_HS512;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A256CBC_HS512;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _cipherMethod(): string
-    {
-        return "AES-256-CBC";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _cipherMethod(): string
+	{
+		return "AES-256-CBC";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha512";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha512";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _encKeyLen(): int
-    {
-        return 32;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _encKeyLen(): int
+	{
+		return 32;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _macKeyLen(): int
-    {
-        return 32;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _macKeyLen(): int
+	{
+		return 32;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _tagLen(): int
-    {
-        return 32;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _tagLen(): int
+	{
+		return 32;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A192CBCHS384Algorithm.php

Indentation +56 added lines, -56 removed lines

@@ -13,66 +13,66 @@
  */
 class A192CBCHS384Algorithm extends AESCBCAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 48;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 48;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A192CBC_HS384;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A192CBC_HS384;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _cipherMethod(): string
-    {
-        return "AES-192-CBC";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _cipherMethod(): string
+	{
+		return "AES-192-CBC";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha384";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha384";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _encKeyLen(): int
-    {
-        return 24;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _encKeyLen(): int
+	{
+		return 24;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _macKeyLen(): int
-    {
-        return 24;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _macKeyLen(): int
+	{
+		return 24;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _tagLen(): int
-    {
-        return 24;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _tagLen(): int
+	{
+		return 24;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/EncryptionAlgorithmFactory.php

Indentation +49 added lines, -49 removed lines

@@ -13,55 +13,55 @@
  */
 abstract class EncryptionAlgorithmFactory
 {
-    /**
-     * Mapping from algorithm name to class name.
-     *
-     * @internal
-     *
-     * @var array
-     */
-    const MAP_ALGO_TO_CLASS = array(
-        /* @formatter:off */
-        JWA::ALGO_A128CBC_HS256 => A128CBCHS256Algorithm::class,
-        JWA::ALGO_A192CBC_HS384 => A192CBCHS384Algorithm::class,
-        JWA::ALGO_A256CBC_HS512 => A256CBCHS512Algorithm::class,
-        JWA::ALGO_A128GCM => A128GCMAlgorithm::class,
-        JWA::ALGO_A192GCM => A192GCMAlgorithm::class,
-        JWA::ALGO_A256GCM => A256GCMAlgorithm::class
-        /* @formatter:on */
-    );
+	/**
+	 * Mapping from algorithm name to class name.
+	 *
+	 * @internal
+	 *
+	 * @var array
+	 */
+	const MAP_ALGO_TO_CLASS = array(
+		/* @formatter:off */
+		JWA::ALGO_A128CBC_HS256 => A128CBCHS256Algorithm::class,
+		JWA::ALGO_A192CBC_HS384 => A192CBCHS384Algorithm::class,
+		JWA::ALGO_A256CBC_HS512 => A256CBCHS512Algorithm::class,
+		JWA::ALGO_A128GCM => A128GCMAlgorithm::class,
+		JWA::ALGO_A192GCM => A192GCMAlgorithm::class,
+		JWA::ALGO_A256GCM => A256GCMAlgorithm::class
+		/* @formatter:on */
+	);
     
-    /**
-     * Get the content encryption algorithm by algorithm name.
-     *
-     * @param string $name Algorithm name
-     * @throws \UnexpectedValueException If algorithm is not supported.
-     * @return ContentEncryptionAlgorithm
-     */
-    public static function algoByName(string $name): ContentEncryptionAlgorithm
-    {
-        if (!array_key_exists($name, self::MAP_ALGO_TO_CLASS)) {
-            throw new \UnexpectedValueException(
-                "No content encryption algorithm '$name'.");
-        }
-        $cls = self::MAP_ALGO_TO_CLASS[$name];
-        return new $cls();
-    }
+	/**
+	 * Get the content encryption algorithm by algorithm name.
+	 *
+	 * @param string $name Algorithm name
+	 * @throws \UnexpectedValueException If algorithm is not supported.
+	 * @return ContentEncryptionAlgorithm
+	 */
+	public static function algoByName(string $name): ContentEncryptionAlgorithm
+	{
+		if (!array_key_exists($name, self::MAP_ALGO_TO_CLASS)) {
+			throw new \UnexpectedValueException(
+				"No content encryption algorithm '$name'.");
+		}
+		$cls = self::MAP_ALGO_TO_CLASS[$name];
+		return new $cls();
+	}
     
-    /**
-     * Get the content encryption algorithm as specified in the given header.
-     *
-     * @param Header $header Header
-     * @throws \UnexpectedValueException If content encryption algorithm
-     *         parameter is not present or algorithm is not supported.
-     * @return ContentEncryptionAlgorithm
-     */
-    public static function algoByHeader(Header $header): ContentEncryptionAlgorithm
-    {
-        if (!$header->hasEncryptionAlgorithm()) {
-            throw new \UnexpectedValueException(
-                "No encryption algorithm parameter.");
-        }
-        return self::algoByName($header->encryptionAlgorithm()->value());
-    }
+	/**
+	 * Get the content encryption algorithm as specified in the given header.
+	 *
+	 * @param Header $header Header
+	 * @throws \UnexpectedValueException If content encryption algorithm
+	 *         parameter is not present or algorithm is not supported.
+	 * @return ContentEncryptionAlgorithm
+	 */
+	public static function algoByHeader(Header $header): ContentEncryptionAlgorithm
+	{
+		if (!$header->hasEncryptionAlgorithm()) {
+			throw new \UnexpectedValueException(
+				"No encryption algorithm parameter.");
+		}
+		return self::algoByName($header->encryptionAlgorithm()->value());
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A192GCMAlgorithm.php

Indentation +24 added lines, -24 removed lines

@@ -15,30 +15,30 @@
  */
 class A192GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A192GCM;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A192GCM;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 24;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 24;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _getGCMCipher(): Cipher
-    {
-        return new AES192Cipher();
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _getGCMCipher(): Cipher
+	{
+		return new AES192Cipher();
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A128GCMAlgorithm.php

Indentation +24 added lines, -24 removed lines

@@ -15,30 +15,30 @@
  */
 class A128GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A128GCM;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A128GCM;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 16;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 16;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _getGCMCipher(): Cipher
-    {
-        return new AES128Cipher();
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _getGCMCipher(): Cipher
+	{
+		return new AES128Cipher();
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A256GCMAlgorithm.php

Indentation +24 added lines, -24 removed lines

@@ -15,30 +15,30 @@
  */
 class A256GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A256GCM;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A256GCM;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 32;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 32;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _getGCMCipher(): Cipher
-    {
-        return new AES256Cipher();
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _getGCMCipher(): Cipher
+	{
+		return new AES256Cipher();
+	}
 }