sop / jwx

lib/JWX/JWE/KeyAlgorithm/RSAESKeyAlgorithm.php

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-declare(strict_types = 1);
+declare(strict_types=1);
 
 namespace Sop\JWX\JWE\KeyAlgorithm;
 

Indentation +198 added lines, -198 removed lines

@@ -21,202 +21,202 @@
  */
 abstract class RSAESKeyAlgorithm extends KeyManagementAlgorithm
 {
-    use RandomCEK;
-
-    /**
-     * Mapping from algorithm name to class name.
-     *
-     * @internal
-     *
-     * @var array
-     */
-    const MAP_ALGO_TO_CLASS = [
-        JWA::ALGO_RSA1_5 => RSAESPKCS1Algorithm::class,
-        JWA::ALGO_RSA_OAEP => RSAESOAEPAlgorithm::class,
-    ];
-
-    /**
-     * Public key.
-     *
-     * @var RSAPublicKeyJWK
-     */
-    protected $_publicKey;
-
-    /**
-     * Private key.
-     *
-     * @var null|RSAPrivateKeyJWK
-     */
-    protected $_privateKey;
-
-    /**
-     * Constructor.
-     *
-     * Use `fromPublicKey` or `fromPrivateKey` instead!
-     *
-     * @param RSAPublicKeyJWK  $pub_key  RSA public key
-     * @param RSAPrivateKeyJWK $priv_key Optional RSA private key
-     */
-    protected function __construct(RSAPublicKeyJWK $pub_key,
-        ?RSAPrivateKeyJWK $priv_key = null)
-    {
-        $this->_publicKey = $pub_key;
-        $this->_privateKey = $priv_key;
-    }
-
-    /**
-     * Initialize from JWK.
-     *
-     * @param JWK    $jwk
-     * @param Header $header
-     *
-     * @throws \UnexpectedValueException
-     *
-     * @return self
-     */
-    public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
-    {
-        $alg = JWA::deriveAlgorithmName($header, $jwk);
-        if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
-            throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
-        }
-        $cls = self::MAP_ALGO_TO_CLASS[$alg];
-        if ($jwk->has(...RSAPrivateKeyJWK::MANAGED_PARAMS)) {
-            return $cls::fromPrivateKey(RSAPrivateKeyJWK::fromJWK($jwk));
-        }
-        return $cls::fromPublicKey(RSAPublicKeyJWK::fromJWK($jwk));
-    }
-
-    /**
-     * Initialize from a public key.
-     *
-     * @param RSAPublicKeyJWK $jwk
-     *
-     * @return self
-     */
-    public static function fromPublicKey(RSAPublicKeyJWK $jwk): self
-    {
-        return new static($jwk);
-    }
-
-    /**
-     * Initialize from a private key.
-     *
-     * @param RSAPrivateKeyJWK $jwk
-     *
-     * @return self
-     */
-    public static function fromPrivateKey(RSAPrivateKeyJWK $jwk): self
-    {
-        return new static($jwk->publicKey(), $jwk);
-    }
-
-    /**
-     * Get the public key.
-     *
-     * @return RSAPublicKeyJWK
-     */
-    public function publicKey(): RSAPublicKeyJWK
-    {
-        return $this->_publicKey;
-    }
-
-    /**
-     * Check whether the private key is present.
-     *
-     * @return bool
-     */
-    public function hasPrivateKey(): bool
-    {
-        return isset($this->_privateKey);
-    }
-
-    /**
-     * Get the private key.
-     *
-     * @throws \LogicException
-     *
-     * @return RSAPrivateKeyJWK
-     */
-    public function privateKey(): RSAPrivateKeyJWK
-    {
-        if (!$this->hasPrivateKey()) {
-            throw new \LogicException('Private key not set.');
-        }
-        return $this->_privateKey;
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    public function headerParameters(): array
-    {
-        return array_merge(parent::headerParameters(),
-            [AlgorithmParameter::fromAlgorithm($this)]);
-    }
-
-    /**
-     * Get the padding scheme.
-     *
-     * @return int
-     */
-    abstract protected function _paddingScheme(): int;
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _encryptKey(string $key, Header &$header): string
-    {
-        $pubkey = openssl_pkey_get_public(
-            $this->publicKey()->toPEM()->string());
-        if (false === $pubkey) {
-            throw new \RuntimeException(
-                'openssl_pkey_get_public() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = openssl_public_encrypt($key, $crypted, $pubkey,
-            $this->_paddingScheme());
-        if (!$result) {
-            throw new \RuntimeException(
-                'openssl_public_encrypt() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        return $crypted;
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _decryptKey(string $ciphertext, Header $header): string
-    {
-        $privkey = openssl_pkey_get_private(
-            $this->privateKey()->toPEM()->string());
-        if (false === $privkey) {
-            throw new \RuntimeException(
-                'openssl_pkey_get_private() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = openssl_private_decrypt($ciphertext, $cek, $privkey,
-            $this->_paddingScheme());
-        if (!$result) {
-            throw new \RuntimeException(
-                'openssl_private_decrypt() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        return $cek;
-    }
-
-    /**
-     * Get last OpenSSL error message.
-     *
-     * @return null|string
-     */
-    protected function _getLastOpenSSLError(): ?string
-    {
-        $msg = null;
-        while (false !== ($err = openssl_error_string())) {
-            $msg = $err;
-        }
-        return $msg;
-    }
+	use RandomCEK;
+
+	/**
+	 * Mapping from algorithm name to class name.
+	 *
+	 * @internal
+	 *
+	 * @var array
+	 */
+	const MAP_ALGO_TO_CLASS = [
+		JWA::ALGO_RSA1_5 => RSAESPKCS1Algorithm::class,
+		JWA::ALGO_RSA_OAEP => RSAESOAEPAlgorithm::class,
+	];
+
+	/**
+	 * Public key.
+	 *
+	 * @var RSAPublicKeyJWK
+	 */
+	protected $_publicKey;
+
+	/**
+	 * Private key.
+	 *
+	 * @var null|RSAPrivateKeyJWK
+	 */
+	protected $_privateKey;
+
+	/**
+	 * Constructor.
+	 *
+	 * Use `fromPublicKey` or `fromPrivateKey` instead!
+	 *
+	 * @param RSAPublicKeyJWK  $pub_key  RSA public key
+	 * @param RSAPrivateKeyJWK $priv_key Optional RSA private key
+	 */
+	protected function __construct(RSAPublicKeyJWK $pub_key,
+		?RSAPrivateKeyJWK $priv_key = null)
+	{
+		$this->_publicKey = $pub_key;
+		$this->_privateKey = $priv_key;
+	}
+
+	/**
+	 * Initialize from JWK.
+	 *
+	 * @param JWK    $jwk
+	 * @param Header $header
+	 *
+	 * @throws \UnexpectedValueException
+	 *
+	 * @return self
+	 */
+	public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
+	{
+		$alg = JWA::deriveAlgorithmName($header, $jwk);
+		if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
+			throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
+		}
+		$cls = self::MAP_ALGO_TO_CLASS[$alg];
+		if ($jwk->has(...RSAPrivateKeyJWK::MANAGED_PARAMS)) {
+			return $cls::fromPrivateKey(RSAPrivateKeyJWK::fromJWK($jwk));
+		}
+		return $cls::fromPublicKey(RSAPublicKeyJWK::fromJWK($jwk));
+	}
+
+	/**
+	 * Initialize from a public key.
+	 *
+	 * @param RSAPublicKeyJWK $jwk
+	 *
+	 * @return self
+	 */
+	public static function fromPublicKey(RSAPublicKeyJWK $jwk): self
+	{
+		return new static($jwk);
+	}
+
+	/**
+	 * Initialize from a private key.
+	 *
+	 * @param RSAPrivateKeyJWK $jwk
+	 *
+	 * @return self
+	 */
+	public static function fromPrivateKey(RSAPrivateKeyJWK $jwk): self
+	{
+		return new static($jwk->publicKey(), $jwk);
+	}
+
+	/**
+	 * Get the public key.
+	 *
+	 * @return RSAPublicKeyJWK
+	 */
+	public function publicKey(): RSAPublicKeyJWK
+	{
+		return $this->_publicKey;
+	}
+
+	/**
+	 * Check whether the private key is present.
+	 *
+	 * @return bool
+	 */
+	public function hasPrivateKey(): bool
+	{
+		return isset($this->_privateKey);
+	}
+
+	/**
+	 * Get the private key.
+	 *
+	 * @throws \LogicException
+	 *
+	 * @return RSAPrivateKeyJWK
+	 */
+	public function privateKey(): RSAPrivateKeyJWK
+	{
+		if (!$this->hasPrivateKey()) {
+			throw new \LogicException('Private key not set.');
+		}
+		return $this->_privateKey;
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	public function headerParameters(): array
+	{
+		return array_merge(parent::headerParameters(),
+			[AlgorithmParameter::fromAlgorithm($this)]);
+	}
+
+	/**
+	 * Get the padding scheme.
+	 *
+	 * @return int
+	 */
+	abstract protected function _paddingScheme(): int;
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _encryptKey(string $key, Header &$header): string
+	{
+		$pubkey = openssl_pkey_get_public(
+			$this->publicKey()->toPEM()->string());
+		if (false === $pubkey) {
+			throw new \RuntimeException(
+				'openssl_pkey_get_public() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = openssl_public_encrypt($key, $crypted, $pubkey,
+			$this->_paddingScheme());
+		if (!$result) {
+			throw new \RuntimeException(
+				'openssl_public_encrypt() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		return $crypted;
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _decryptKey(string $ciphertext, Header $header): string
+	{
+		$privkey = openssl_pkey_get_private(
+			$this->privateKey()->toPEM()->string());
+		if (false === $privkey) {
+			throw new \RuntimeException(
+				'openssl_pkey_get_private() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = openssl_private_decrypt($ciphertext, $cek, $privkey,
+			$this->_paddingScheme());
+		if (!$result) {
+			throw new \RuntimeException(
+				'openssl_private_decrypt() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		return $cek;
+	}
+
+	/**
+	 * Get last OpenSSL error message.
+	 *
+	 * @return null|string
+	 */
+	protected function _getLastOpenSSLError(): ?string
+	{
+		$msg = null;
+		while (false !== ($err = openssl_error_string())) {
+			$msg = $err;
+		}
+		return $msg;
+	}
 }

lib/JWX/JWE/KeyAlgorithm/A192GCMKWAlgorithm.php

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-declare(strict_types = 1);
+declare(strict_types=1);
 
 namespace Sop\JWX\JWE\KeyAlgorithm;
 

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A192GCMKWAlgorithm extends AESGCMKWAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_A192GCMKW;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_A192GCMKW;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    protected function _keySize(): int
-    {
-        return 24;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _keySize(): int
+	{
+		return 24;
+	}
 }

lib/JWX/JWE/KeyAlgorithm/AESGCMKWAlgorithm.php

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-declare(strict_types = 1);
+declare(strict_types=1);
 
 namespace Sop\JWX\JWE\KeyAlgorithm;
 

Indentation +143 added lines, -143 removed lines

@@ -22,147 +22,147 @@
  */
 abstract class AESGCMKWAlgorithm extends KeyManagementAlgorithm
 {
-    use RandomCEK;
-
-    /**
-     * Mapping from algorithm name to class name.
-     *
-     * @internal
-     *
-     * @var array
-     */
-    const MAP_ALGO_TO_CLASS = [
-        JWA::ALGO_A128GCMKW => A128GCMKWAlgorithm::class,
-        JWA::ALGO_A192GCMKW => A192GCMKWAlgorithm::class,
-        JWA::ALGO_A256GCMKW => A256GCMKWAlgorithm::class,
-    ];
-
-    /**
-     * Required IV size in bytes.
-     *
-     * @var int
-     */
-    const IV_SIZE = 12;
-
-    /**
-     * Authentication tag size in bytes.
-     *
-     * @var int
-     */
-    const AUTH_TAG_SIZE = 16;
-
-    /**
-     * Key encryption key.
-     *
-     * @var string
-     */
-    protected $_kek;
-
-    /**
-     * Initialization vector.
-     *
-     * @var string
-     */
-    protected $_iv;
-
-    /**
-     * Constructor.
-     *
-     * @param string $kek Key encryption key
-     * @param string $iv  Initialization vector
-     */
-    public function __construct(string $kek, string $iv)
-    {
-        if (strlen($kek) !== $this->_keySize()) {
-            throw new \LengthException('Invalid key size.');
-        }
-        if (self::IV_SIZE !== strlen($iv)) {
-            throw new \LengthException('Initialization vector must be 96 bits.');
-        }
-        $this->_kek = $kek;
-        $this->_iv = $iv;
-    }
-
-    /**
-     * Initialize from JWK.
-     *
-     * @param JWK    $jwk
-     * @param Header $header
-     *
-     * @throws \UnexpectedValueException
-     *
-     * @return self
-     */
-    public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
-    {
-        $jwk = SymmetricKeyJWK::fromJWK($jwk);
-        if (!$header->hasInitializationVector()) {
-            throw new \UnexpectedValueException('No initialization vector.');
-        }
-        $iv = $header->initializationVector()->initializationVector();
-        $alg = JWA::deriveAlgorithmName($header, $jwk);
-        if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
-            throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
-        }
-        $cls = self::MAP_ALGO_TO_CLASS[$alg];
-        return new $cls($jwk->key(), $iv);
-    }
-
-    /**
-     * Initialize from key encryption key with random IV.
-     *
-     * Key size must match the underlying cipher.
-     *
-     * @param string $key Key encryption key
-     *
-     * @return self
-     */
-    public static function fromKey(string $key): self
-    {
-        $iv = openssl_random_pseudo_bytes(self::IV_SIZE);
-        return new static($key, $iv);
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    public function headerParameters(): array
-    {
-        return array_merge(parent::headerParameters(),
-            [AlgorithmParameter::fromAlgorithm($this),
-                InitializationVectorParameter::fromString($this->_iv), ]);
-    }
-
-    /**
-     * Get the required key size.
-     *
-     * @return int
-     */
-    abstract protected function _keySize(): int;
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _encryptKey(string $key, Header &$header): string
-    {
-        [$ciphertext, $auth_tag] = AESGCM::encrypt($key, '', $this->_kek,
-            $this->_iv, self::AUTH_TAG_SIZE);
-        // insert authentication tag to the header
-        $header = $header->withParameters(
-            AuthenticationTagParameter::fromString($auth_tag));
-        return $ciphertext;
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _decryptKey(string $ciphertext, Header $header): string
-    {
-        if (!$header->hasAuthenticationTag()) {
-            throw new \RuntimeException(
-                "Header doesn't contain authentication tag.");
-        }
-        $auth_tag = $header->authenticationTag()->authenticationTag();
-        return AESGCM::decrypt($ciphertext, $auth_tag, '', $this->_kek, $this->_iv);
-    }
+	use RandomCEK;
+
+	/**
+	 * Mapping from algorithm name to class name.
+	 *
+	 * @internal
+	 *
+	 * @var array
+	 */
+	const MAP_ALGO_TO_CLASS = [
+		JWA::ALGO_A128GCMKW => A128GCMKWAlgorithm::class,
+		JWA::ALGO_A192GCMKW => A192GCMKWAlgorithm::class,
+		JWA::ALGO_A256GCMKW => A256GCMKWAlgorithm::class,
+	];
+
+	/**
+	 * Required IV size in bytes.
+	 *
+	 * @var int
+	 */
+	const IV_SIZE = 12;
+
+	/**
+	 * Authentication tag size in bytes.
+	 *
+	 * @var int
+	 */
+	const AUTH_TAG_SIZE = 16;
+
+	/**
+	 * Key encryption key.
+	 *
+	 * @var string
+	 */
+	protected $_kek;
+
+	/**
+	 * Initialization vector.
+	 *
+	 * @var string
+	 */
+	protected $_iv;
+
+	/**
+	 * Constructor.
+	 *
+	 * @param string $kek Key encryption key
+	 * @param string $iv  Initialization vector
+	 */
+	public function __construct(string $kek, string $iv)
+	{
+		if (strlen($kek) !== $this->_keySize()) {
+			throw new \LengthException('Invalid key size.');
+		}
+		if (self::IV_SIZE !== strlen($iv)) {
+			throw new \LengthException('Initialization vector must be 96 bits.');
+		}
+		$this->_kek = $kek;
+		$this->_iv = $iv;
+	}
+
+	/**
+	 * Initialize from JWK.
+	 *
+	 * @param JWK    $jwk
+	 * @param Header $header
+	 *
+	 * @throws \UnexpectedValueException
+	 *
+	 * @return self
+	 */
+	public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
+	{
+		$jwk = SymmetricKeyJWK::fromJWK($jwk);
+		if (!$header->hasInitializationVector()) {
+			throw new \UnexpectedValueException('No initialization vector.');
+		}
+		$iv = $header->initializationVector()->initializationVector();
+		$alg = JWA::deriveAlgorithmName($header, $jwk);
+		if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
+			throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
+		}
+		$cls = self::MAP_ALGO_TO_CLASS[$alg];
+		return new $cls($jwk->key(), $iv);
+	}
+
+	/**
+	 * Initialize from key encryption key with random IV.
+	 *
+	 * Key size must match the underlying cipher.
+	 *
+	 * @param string $key Key encryption key
+	 *
+	 * @return self
+	 */
+	public static function fromKey(string $key): self
+	{
+		$iv = openssl_random_pseudo_bytes(self::IV_SIZE);
+		return new static($key, $iv);
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	public function headerParameters(): array
+	{
+		return array_merge(parent::headerParameters(),
+			[AlgorithmParameter::fromAlgorithm($this),
+				InitializationVectorParameter::fromString($this->_iv), ]);
+	}
+
+	/**
+	 * Get the required key size.
+	 *
+	 * @return int
+	 */
+	abstract protected function _keySize(): int;
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _encryptKey(string $key, Header &$header): string
+	{
+		[$ciphertext, $auth_tag] = AESGCM::encrypt($key, '', $this->_kek,
+			$this->_iv, self::AUTH_TAG_SIZE);
+		// insert authentication tag to the header
+		$header = $header->withParameters(
+			AuthenticationTagParameter::fromString($auth_tag));
+		return $ciphertext;
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _decryptKey(string $ciphertext, Header $header): string
+	{
+		if (!$header->hasAuthenticationTag()) {
+			throw new \RuntimeException(
+				"Header doesn't contain authentication tag.");
+		}
+		$auth_tag = $header->authenticationTag()->authenticationTag();
+		return AESGCM::decrypt($ciphertext, $auth_tag, '', $this->_kek, $this->_iv);
+	}
 }

lib/JWX/JWE/KeyAlgorithm/A128GCMKWAlgorithm.php

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-declare(strict_types = 1);
+declare(strict_types=1);
 
 namespace Sop\JWX\JWE\KeyAlgorithm;
 

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A128GCMKWAlgorithm extends AESGCMKWAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_A128GCMKW;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_A128GCMKW;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    protected function _keySize(): int
-    {
-        return 16;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _keySize(): int
+	{
+		return 16;
+	}
 }

lib/JWX/JWE/KeyAlgorithm/A256GCMKWAlgorithm.php

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-declare(strict_types = 1);
+declare(strict_types=1);
 
 namespace Sop\JWX\JWE\KeyAlgorithm;
 

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A256GCMKWAlgorithm extends AESGCMKWAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_A256GCMKW;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_A256GCMKW;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    protected function _keySize(): int
-    {
-        return 32;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _keySize(): int
+	{
+		return 32;
+	}
 }