.\" Automatically generated by Pod::Man v1.34, Pod::Parser v1.13
.\" ========================================================================
.de Sh \" Subsection heading
.de Sp \" Vertical space (when we can't use .PP)
.de Vb \" Begin verbatim text
.de Ve \" End verbatim text
.\" Set up some character translations and predefined strings. \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote. | will give a
.\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used to
.\" do unbreakable dashes and therefore won't be available. \*(C` and \*(C'
.\" expand to `' in nroff, nothing in troff, for use with C<>.
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
.\" entries marked with X<> in POD. Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
. tm Index:\\$1\t\\n%\t"\\$2"
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear. Run. Save yourself. No user-serviceable parts.
. \" fudge factors for nroff and troff
. ds #H ((1u-(\\\\n(.fu%2u))*.13m)
. \" simple accents for nroff and troff
. ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
. ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
. ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
. ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
. ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
. ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
. \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
. \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
. \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
.\" ========================================================================
.TH CBC 3 "2002-09-11" "perl v5.8.0" "User Contributed Perl Documentation"
Crypt::CBC \- Encrypt Data with Cipher Block Chaining Mode
\& $cipher = Crypt::CBC->new( {'key' => 'my secret key',
\& 'cipher' => 'Blowfish',
\& 'regenerate_key' => 0, # default true
\& $ciphertext = $cipher->encrypt("This data is hush hush");
\& $plaintext = $cipher->decrypt($ciphertext);
\& $cipher->start('encrypting');
\& while (read(F,$buffer,1024)) {
\& print $cipher->crypt($buffer);
\& print $cipher->finish;
This module is a Perl-only implementation of the cryptographic cipher
block chaining mode (\s-1CBC\s0). In combination with a block cipher such as
\&\s-1DES\s0 or \s-1IDEA\s0, you can encrypt and decrypt messages of arbitrarily long
length. The encrypted messages are compatible with the encryption
format used by \fBSSLeay\fR.
To use this module, you will first create a Crypt::CBC cipher object with
\&\fInew()\fR. At the time of cipher creation, you specify an encryption key
to use and, optionally, a block encryption algorithm. You will then
call the \fIstart()\fR method to initialize the encryption or decryption
process, \fIcrypt()\fR to encrypt or decrypt one or more blocks of data, and
lastly \fIfinish()\fR, to pad and encrypt the final block. For your
convenience, you can call the \fIencrypt()\fR and \fIdecrypt()\fR methods to
operate on a whole data value at once.
\& $cipher = Crypt::CBC->new( {'key' => 'my secret key',
\& 'cipher' => 'Blowfish',
\& 'regenerate_key' => 0, # default true
\& # or (for compatibility with earlier versions)
\& $cipher = new Crypt::CBC($key,$algorithm);
The \fInew()\fR method creates a new Crypt::CBC object.
You must provide an encryption/decryption key, which can be any series
of characters of any length. If regenerate_key is not specified as a
false value, the actual key used is derived from the \s-1MD5\s0 hash of the
key you provide. The cipher is optional and will default to \s-1DES\s0 unless
specified otherwise. You may use any compatible block encryption
algorithm that you have installed. Currently, this includes Crypt::DES,
Crypt::DES_EDE3, Crypt::IDEA, Crypt::Blowfish, and Crypt::Rijndael. You
may refer to them using their full names (\*(L"Crypt::IDEA\*(R") or in
abbreviated form (\*(L"\s-1IDEA\s0\*(R").
An initialization vector may be specified, either by passing in a key of
\&'iv' as an option to new, or by calling
\&\f(CW$cipher\fR\->set_initialization_key($iv) before calling \f(CW$cipher\fR\->\fIstart()\fR.
The \s-1IV\s0 will be ignored in decryption if the ciphertext is prepended by
text which matches the regex /^RandomIV.{8}/, in which case the 8
characters following \*(L"RandomIV\*(R" will be used as the \s-1IV\s0. When encrypting,
by default the ciphertext will be prepended with "RandomIV<\s-1IV\s0>\*(L"
(16 bytes). To disable this, set 'prepend_iv' to a false value. The
padding method can be specified by the 'padding' option. If no padding
method is specified, PKCS#5 (\*(R"standard") padding is assumed.
\& $cipher->start('encrypting');
\& $cipher->start('decrypting');
The \fIstart()\fR method prepares the cipher for a series of encryption or
decryption steps, resetting the internal state of the cipher if
necessary. You must provide a string indicating whether you wish to
encrypt or decrypt. \*(L"E\*(R" or any word that begins with an \*(L"e\*(R" indicates
encryption. \*(L"D\*(R" or any word that begins with a \*(L"d\*(R" indicates
\& $ciphertext = $cipher->crypt($plaintext);
After calling \fIstart()\fR, you should call \fIcrypt()\fR as many times as
necessary to encrypt the desired data.
.IX Subsection "finish()"
\& $ciphertext = $cipher->finish();
The \s-1CBC\s0 algorithm must buffer data blocks inernally until they are
even multiples of the encryption algorithm's blocksize (typically 8
bytes). After the last call to \fIcrypt()\fR you should call \fIfinish()\fR.
This flushes the internal buffer and returns any leftover ciphertext.
In a typical application you will read the plaintext from a file or
input stream and write the result to standard output in a loop that
\& $cipher = new Crypt::CBC('hey jude!');
\& $cipher->start('encrypting');
\& print $cipher->crypt($_) while <>;
\& print $cipher->finish();
.IX Subsection "encrypt()"
\& $ciphertext = $cipher->encrypt($plaintext)
This convenience function runs the entire sequence of \fIstart()\fR, \fIcrypt()\fR
and \fIfinish()\fR for you, processing the provided plaintext and returning
the corresponding ciphertext.
.IX Subsection "decrypt()"
\& $plaintext = $cipher->decrypt($ciphertext)
This convenience function runs the entire sequence of \fIstart()\fR, \fIcrypt()\fR
and \fIfinish()\fR for you, processing the provided ciphertext and returning
the corresponding plaintext.
.Sh "\fIencrypt_hex()\fP, \fIdecrypt_hex()\fP"
.IX Subsection "encrypt_hex(), decrypt_hex()"
\& $ciphertext = $cipher->encrypt_hex($plaintext)
\& $plaintext = $cipher->decrypt_hex($ciphertext)
These are convenience functions that operate on ciphertext in a
hexadecimal representation. \fBencrypt_hex($plaintext)\fR is exactly
equivalent to \fBunpack('H*',encrypt($plaintext))\fR. These functions
can be useful if, for example, you wish to place the encrypted
.Sh "\fIget_initialization_vector()\fP"
.IX Subsection "get_initialization_vector()"
\& $iv = $cipher->get_initialization_vector()
This function will return the \s-1IV\s0 used in encryption and or decryption.
This function may be useful to determine the random \s-1IV\s0 used when
encrypting if none is specified in \fInew()\fR. The \s-1IV\s0 is not guaranteed to
be set when encrypting until \fIstart()\fR is called, and when decrypting
until \fIcrypt()\fR is called the first time.
.Sh "\fIset_initialization_vector()\fP"
.IX Subsection "set_initialization_vector()"
\& $cipher->set_initialization_vector('76543210')
This function sets the \s-1IV\s0 used in encryption and/or decryption. This
function may be useful if the \s-1IV\s0 is not contained within the ciphertext
string being decrypted, or if a particular \s-1IV\s0 is desired for encryption.
If not set, a random \s-1IV\s0 will be generated. The \s-1IV\s0 is not guaranteed to
be set when encrypting until \fIstart()\fR is called, and when decrypting
until \fIcrypt()\fR is called the first time.
.IX Subsection "Padding methods"
Use the 'padding' option to change the padding method.
When the last block of plaintext is shorter than the block size,
it must be padded. Padding methods include: \*(L"standard\*(R" (i.e., PKCS#5),
\&\*(L"oneandzeroes\*(R", \*(L"space\*(R", and \*(L"null\*(R".
\& standard: (default) Binary safe
\& pads with the number of bytes that should be truncated. So, if
\& blocksize is 8, then "0A0B0C" will be padded with "05", resulting
\& in "0A0B0C0505050505". If the final block is a full block of 8
\& bytes, then a whole block of "0808080808080808" is appended.
\& oneandzeroes: Binary safe
\& pads with "80" followed by as many "00" necessary to fill the
\& block. If the last block is a full block and blocksize is 8, a
\& block of "8000000000000000" will be appended.
\& pads with as many "00" necessary to fill the block. If the last
\& block is a full block and blocksize is 8, a block of
\& "0000000000000000" will be appended.
\& same as "null", but with "20".
Both the standard and oneandzeroes paddings are binary safe. The
space and null paddings are recommended only for text data. Which
type of padding you use depends on whether you wish to communicate
with an external (non Crypt::CBC library). If this is the case, use
whatever padding method is compatible.
You can also pass in a custom padding function. To do this, create a
function that takes the arguments:
\& $padded_block = function($block,$blocksize,$direction);
where \f(CW$block\fR is the current block of data, \f(CW$blocksize\fR is the size to
pad it to, \f(CW$direction\fR is \*(L"e\*(R" for encrypting and \*(L"d\*(R" for decrypting,
and \f(CW$padded_block\fR is the result after padding or depadding.
When encrypting, the function should always return a string of
<blocksize> length, and when decrypting, can expect the string coming
in to always be that length. See \fI_standard_padding()\fR, \fI_space_padding()\fR,
\&\fI_null_padding()\fR, or \fI_oneandzeroes_padding()\fR in the source for examples.
Standard and oneandzeroes padding are recommended, as both space and
null padding can potentially truncate more characters than they should.
Two examples, des.pl and idea.pl can be found in the eg/ subdirectory
of the Crypt-CBC distribution. These implement command-line \s-1DES\s0 and
\&\s-1IDEA\s0 encryption algorithms.
The encryption and decryption process is about a tenth the speed of
the equivalent SSLeay programs (compiled C). This could be improved
by implementing this module in C. It may also be worthwhile to
optimize the \s-1DES\s0 and \s-1IDEA\s0 block algorithms further.
Lincoln Stein, lstein@cshl.org
This module is distributed under the \s-1ARTISTIC\s0 \s-1LICENSE\s0 using the same
\&\fIperl\fR\|(1), \fICrypt::DES\fR\|(3), \fICrypt::IDEA\fR\|(3), rfc2898 (PKCS#5)
projects / OpenSPARC-T2-DV / blob