How to Encrypt and Decrypt Large Files Using OpenSSL in PHP – Part 1

Introduction

Data security is of utmost importance when dealing with sensitive information, especially when handling large files. OpenSSL is a powerful library that provides cryptographic functions, allowing us to encrypt and decrypt data using various algorithms. In this two-part blog post series, we will explore how to encrypt and decrypt large files using OpenSSL in PHP. Part 1 will cover the encryption process with added error handling, and Part 2 will focus on decryption.

Prerequisites

Before we begin, make sure you have a basic understanding of PHP and the concept of symmetric encryption. You should also have OpenSSL enabled on your PHP server.

Part 1: Encrypting the File
To handle large files, we’ll read and write the data in chunks, avoiding memory issues. Additionally, we’ll add error handling to deal with potential issues gracefully.

Step 1: Generating a Random Key
To use OpenSSL for encryption, we need a symmetric encryption key. For this example, we’ll use the AES-256-CBC cipher, which requires a 256-bit (32-byte) key. Let’s generate a strong random key using the random_bytes() function:

// Generate a random key
$key = random_bytes(32); // 256-bit key for AES-256 encryption

Step 2: Encrypting the File
Let’s implement the encryption process with error handling in a function called encryptFile:

<?php
function encryptFile($inputFile, $outputFile, $key)
{
    // Check if the input file exists and is readable
    if (!file_exists($inputFile) || !is_readable($inputFile)) {
        return false;
    }

    // Try to open the input and output files in binary mode
    $inputHandle = fopen($inputFile, 'rb');
    $outputHandle = fopen($outputFile, 'wb');

    // Check if file handles were successfully opened
    if (!$inputHandle || !$outputHandle) {
        return false;
    }

    // Initialize the encryption algorithm and parameters
    $cipher = 'AES-256-CBC';
    $ivLength = openssl_cipher_iv_length($cipher);
    $iv = random_bytes($ivLength);

    // Write the IV to the output file
    if (fwrite($outputHandle, $iv) === false) {
        fclose($inputHandle);
        fclose($outputHandle);
        return false;
    }

    // Encrypt the data in chunks
    while (!feof($inputHandle)) {
        $chunk = fread($inputHandle, 8192); // Chunk size (in this case, 8 KB)

        // Check for encryption errors
        $encryptedChunk = openssl_encrypt($chunk, $cipher, $key, OPENSSL_RAW_DATA, $iv);
        if ($encryptedChunk === false) {
            fclose($inputHandle);
            fclose($outputHandle);
            return false;
        }

        // Write the encrypted chunk to the output file
        if (fwrite($outputHandle, $encryptedChunk) === false) {
            fclose($inputHandle);
            fclose($outputHandle);
            return false;
        }

        $iv = $encryptedChunk; // Use the current encrypted chunk as the next IV
    }

    // Close the file handles
    fclose($inputHandle);
    fclose($outputHandle);

    return true;
}

// Example usage
$inputFile = '/path/to/largefile.txt';
$outputFile = '/path/to/encryptedfile.txt';
$key = random_bytes(32); // 256-bit key for AES-256 encryption

if (encryptFile($inputFile, $outputFile, $key)) {
    echo "File encrypted successfully.";
} else {
    echo "Encryption failed.";
}
?>

Conclusion

In Part 1 of this blog post series, we’ve learned how to encrypt large files using OpenSSL in PHP. By generating a random key and encrypting the data in chunks, we can securely protect sensitive information. Additionally, the added error handling ensures that any issues during the encryption process are appropriately dealt with.

---

Stay tuned for Part 2, where we’ll cover the decryption process using OpenSSL in PHP to retrieve the original content from the encrypted file. We’ll continue building upon the knowledge gained in Part 1, ensuring a comprehensive understanding of secure data handling in PHP applications.