removed mods directory from the ATutor codebase

[atutor.git] / mods / social / lib / BasicBlobCrypter.php

diff --git a/mods/social/lib/BasicBlobCrypter.php b/mods/social/lib/BasicBlobCrypter.php
deleted file mode 100644 (file)
index b9a3ee2..0000000
--- a/mods/social/lib/BasicBlobCrypter.php
+++ /dev/null
@@ -1,130 +0,0 @@
-<?php
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-
-class BlobExpiredException extends Exception {
-}
-
-/**
- * This class provides basic binary blob encryption and decryption, for use with the security token
- * 
- */
-class BasicBlobCrypter extends BlobCrypter {
-  //FIXME make this compatible with the java's blobcrypter
-  
-
-  // Labels for key derivation
-  private $CIPHER_KEY_LABEL = 0;
-  private $HMAC_KEY_LABEL = 1;
-  
-  /** Key used for time stamp (in seconds) of data */
-  public $TIMESTAMP_KEY = "t";
-  
-  /** minimum length of master key */
-  public $MASTER_KEY_MIN_LEN = 16;
-  
-  /** allow three minutes for clock skew */
-  private $CLOCK_SKEW_ALLOWANCE = 180;
-  
-  private $UTF8 = "UTF-8";
-  
-  private $cipherKey;
-  private $hmacKey;
-  protected $allowPlaintextToken;
-
-  public function __construct() {
-    $this->cipherKey = 'INSECURE_DEFAULT_KEY';
-    $this->hmacKey = 'INSECURE_DEFAULT_KEY';
-    $this->allowPlaintextToken = true;
-  }
-
-  /**
-   * {@inheritDoc}
-   */
-  public function wrap(Array $in) {
-    $encoded = $this->serializeAndTimestamp($in);
-    if (! function_exists('mcrypt_module_open') && $this->allowPlaintextToken) {
-      $cipherText = base64_encode($encoded);
-    } else {
-      $cipherText = Crypto::aes128cbcEncrypt($this->cipherKey, $encoded);
-    }
-    $hmac = Crypto::hmacSha1($this->hmacKey, $cipherText);
-    $b64 = base64_encode($cipherText . $hmac);
-    return $b64;
-  }
-
-  private function serializeAndTimestamp(Array $in) {
-    $encoded = "";
-    foreach ($in as $key => $val) {
-      $encoded .= urlencode($key) . "=" . urlencode($val) . "&";
-    }
-    $encoded .= $this->TIMESTAMP_KEY . "=" . time();
-    return $encoded;
-  }
-
-  /**
-   * {@inheritDoc}
-   */
-  public function unwrap($in, $maxAgeSec) {
-    //TODO remove this once we have a better way to generate a fake token in the example files
-    if ($this->allowPlaintextToken && count(explode(':', $in)) == 6) {
-      $data = explode(":", $in);
-      $out = array();
-      $out['o'] = $data[0];
-      $out['v'] = $data[1];
-      $out['a'] = $data[2];
-      $out['d'] = $data[3];
-      $out['u'] = $data[4];
-      $out['m'] = $data[5];
-    } else {
-      $bin = base64_decode($in);
-      $cipherText = substr($bin, 0, strlen($bin) - Crypto::$HMAC_SHA1_LEN);
-      $hmac = substr($bin, strlen($cipherText));
-      Crypto::hmacSha1Verify($this->hmacKey, $cipherText, $hmac);
-      if (! function_exists('mcrypt_module_open') && $this->allowPlaintextToken) {
-        $plain = base64_decode($cipherText);
-      } else {
-        $plain = Crypto::aes128cbcDecrypt($this->cipherKey, $cipherText);
-      }
-      $out = $this->deserialize($plain);
-      $this->checkTimestamp($out, $maxAgeSec);
-    }
-    return $out;
-  }
-
-  private function deserialize($plain) {
-    $map = array();
-    $items = split("[&=]", $plain);
-    for ($i = 0; $i < count($items);) {
-      $key = urldecode($items[$i ++]);
-      $value = urldecode($items[$i ++]);
-      $map[$key] = $value;
-    }
-    return $map;
-  }
-
-  private function checkTimestamp(Array $out, $maxAge) {
-    $minTime = (int)$out[$this->TIMESTAMP_KEY] - $this->CLOCK_SKEW_ALLOWANCE;
-    $maxTime = (int)$out[$this->TIMESTAMP_KEY] + $maxAge + $this->CLOCK_SKEW_ALLOWANCE;
-    $now = time();
-    if (! ($minTime < $now && $now < $maxTime)) {
-      throw new BlobExpiredException("Security token expired");
-    }
-  }
-}