PHP의 AES256 암호화 기술과 프레임워크에서의 적용에 대한 자세한 설명

$key = openssl_random_pseudo_bytes(32);

$plaintext = "Hello World";
$cipher = "aes-256-cbc";
$ivlen = openssl_cipher_iv_length($cipher);
$iv = openssl_random_pseudo_bytes($ivlen);
$ciphertext = openssl_encrypt($plaintext, $cipher, $key, OPENSSL_RAW_DATA, $iv);
$ciphertext = $iv . $ciphertext;

$cipher = "aes-256-cbc";
$ivlen = openssl_cipher_iv_length($cipher);
$iv = substr($ciphertext, 0, $ivlen);
$ciphertext = substr($ciphertext, $ivlen);
$plaintext = openssl_decrypt($ciphertext, $cipher, $key, OPENSSL_RAW_DATA, $iv);
echo $plaintext;

php artisan make:middleware EncryptMiddleware

<?php

namespace AppHttpMiddleware;

use Closure;
use IlluminateContractsEncryptionEncrypter;
use IlluminateSupportFacadesApp;

class EncryptMiddleware
{
    /**
     * The encrypter instance.
     */
    protected $encrypter;

    /**
     * Create a new middleware instance.
     *
     * @param  Encrypter  $encrypter
     * @return void
     */
    public function __construct(Encrypter $encrypter)
    {
        $this->encrypter = $encrypter;
    }

    /**
     * Handle an incoming request.
     *
     * @param  IlluminateHttpRequest  $request
     * @param  Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $response = $next($request);

        $content = $response->getContent();

        $encryptedContent = $this->encrypter->encrypt($content);

        $response->setContent($encryptedContent);

        return $response;
    }
}

<?php

namespace AppHttpMiddleware;

use Closure;
use IlluminateContractsEncryptionDecryptException;
use IlluminateContractsEncryptionEncrypter;

class DecryptMiddleware
{
    /**
     * The encrypter instance.
     */
    protected $encrypter;

    /**
     * Create a new middleware instance.
     *
     * @param  Encrypter  $encrypter
     * @return void
     */
    public function __construct(Encrypter $encrypter)
    {
        $this->encrypter = $encrypter;
    }

    /**
     * Handle an incoming request.
     *
     * @param  IlluminateHttpRequest  $request
     * @param  Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $encryptedContent = $request->getContent();

        try {
            $content = $this->encrypter->decrypt($encryptedContent);
        } catch (DecryptException $e) {
            return response('Invalid encryption', 400);
        }

        $response = $next($request->merge(['content' => $content]));

        return $response;
    }
}

protected $middlewareGroups = [
    'web' => [
        // ...
    ],

    'api' => [
        // ...
        AppHttpMiddlewareEncryptMiddleware::class,
        AppHttpMiddlewareDecryptMiddleware::class,
    ],
];