phpseclib/phpseclib
Phpseclib
phpseclib is a pure-PHP cryptographic library that provides a comprehensive suite of cryptographic operations entirely without requiring compiled C extensions. At its core, it implements arbitrary-precision integer arithmetic for big-number math, ASN.1 DER encoding and decoding for working with cryptographic data structures, and a full set of pure-PHP cryptographic primitives. The library is designed to operate on PHP 5.6 and above, automatically detecting and using native extensions like GMP or BCMath when available, but falling back to its own pure-PHP implementations when they are not.
The library handles the full lifecycle of cryptographic key management, including loading, saving, and converting keys between PKCS1, PKCS8, OpenSSH, PuTTY, and XML formats. It supports both symmetric encryption with ciphers such as AES, ChaCha20, and Blowfish, and asymmetric encryption with RSA and elliptic-curve algorithms. Digital signature creation and verification are available for RSA, DSA, ECDSA, and EdDSA, while cryptographic hashing, cryptographically secure random byte generation, and Diffie-Hellman key exchange round out the security toolkit.
Beyond raw cryptographic operations, phpseclib implements the SSH-2 protocol for authenticated remote command execution and secure file transfer via SFTP, all in pure PHP. It also provides X.509 certificate parsing, validation, and generation, enabling identity and encryption workflows involving certificates and certificate signing requests. The library's protocol-layer abstraction separates transport, authentication, and channel logic into distinct layers for both SSH and TLS.
Features
- Cryptographic Key Management - Loads, saves, and converts cryptographic keys in PKCS1, PKCS8, OpenSSH, PuTTY, and XML formats.
- PHP Security Libraries - Implements a full suite of cryptographic operations entirely in PHP without compiled extensions.
- General ASN.1 Encoders and Decoders - Provides a pure-PHP ASN.1 parser and encoder for working with cryptographic data structures like certificates and keys.
- General ASN.1 Parsers - Parses and encodes data in ASN.1 format for use with cryptographic structures like certificates and keys.
- Symmetric and Asymmetric Ciphers - Encrypts and decrypts data with AES, ChaCha20, RSA, and elliptic-curve ciphers for protecting data at rest or in transit.
- Asymmetric Signing - Creates and verifies digital signatures using RSA, ECDSA, Ed25519, and DSA keys.
- Key Format Converters - Loads, saves, and converts cryptographic keys between PKCS1, PKCS8, OpenSSH, PuTTY, and XML formats.
- Pure-PHP Implementations - Implements cryptographic algorithms entirely in PHP without relying on compiled C extensions.
- Digital Signatures - Creates and validates digital signatures using RSA, DSA, ECDSA, and EdDSA algorithms.
- Asymmetric Encryption - Encrypts and decrypts data using RSA and elliptic curve cryptography for public-key operations.
- X.509 Certificate Parsing and Validation - Parses, validates, and generates X.509 certificates and certificate signing requests.
- General ASN.1 DER Parsers - Ships a pure-PHP ASN.1 DER parser and encoder for working with cryptographic data structures.
- Public-Key Access Control - Creates digital signatures using RSA, DSA, or elliptic-curve keys and validates them against a public key.
- SSH-2 Protocol Implementations - Provides a full pure-PHP implementation of the SSH-2 protocol for secure remote access.
- Format Conversions - Transforms cryptographic keys between PKCS1, PKCS8, OpenSSH, PuTTY, and XML formats.
- Symmetric Cipher Implementations - Encrypts and decrypts data using block and stream ciphers like AES, Blowfish, ChaCha20, and others.
- Symmetric Encryption - Protects data using AES, DES, Blowfish, ChaCha20, and other symmetric algorithms with configurable modes.
- Arbitrary-Precision Arithmetic - Performs arbitrary-precision integer arithmetic for cryptographic operations like modular exponentiation.
- X.509 Certificate Parsers - Parses, validates, and generates X.509 certificates and certificate signing requests.
- SFTP Client Libraries - Ships a pure-PHP SFTP client for secure file upload, download, and remote file management.
- Protocol Abstraction Layers - Separates transport, authentication, and channel logic into distinct layers for SSH and TLS.
- SFTP File Transfers - Transfers files over SFTP with encryption and authentication for upload, download, and remote file management.
- Cryptographic Randomness Providers - Generates cryptographically secure random bytes for keys, nonces, and other sensitive values.
- Diffie-Hellman Exchanges - Performs Diffie-Hellman key agreement to establish shared secrets over insecure channels.
- Cryptographic Hash Computations - Computes hash digests using algorithms like SHA-256, SHA-384, SHA-512, and others.
- Cipher Mode Engines - Supports block and stream cipher modes like CBC, CTR, and GCM via a unified streaming interface.
- Security and Encryption - Provides secure communications and cryptographic functions.
