Crypt::Simple - encrypt stuff simply
use Crypt::Simple;
my $data = encrypt(@stuff);
my @same_stuff = decrypt($data);
Maybe you have a web application and you need to store some session data at the
client side (in a cookie or hidden form fields) but you don't want the user to
be able to mess with the data. Maybe you want to save secret information to a
text file. Maybe you have better ideas of what to do with encrypted stuff!
This little module will convert all your data into nice base64 text that you can
save in a text file, send in an email, store in a cookie or web page, or
bounce around the Net. The data you encrypt can be as simple or as complicated
as you like.
If you don't pass any options when using "Crypt::Simple" we will
generate a key for you based on the name of your module that uses this one. In
many cases this works fine, but you may want more control over the key. Here's
how:
- use Crypt::Simple passphrase => 'pass phrase';
- The MD5 hash of the text string "pass phrase" is
used as the key.
- use Crypt::Simple prompt => 'Please type the magic
words';
- The user is prompted to enter a passphrase, and the MD5
hash of the entered text is used as the key.
- use Crypt::Simple passfile => '/home/marty/secret';
- The contents of the file /home/marty/secret are used as the
pass phrase: the MD5 hash of the file is used as the key.
- use Crypt::Simple file => '/home/marty/noise';
- The contents of the file /home/marty/noise are directly
used as the key.
"Crypt::Simple" is really just a wrapper round a few other useful Perl
modules: you may want to read the documentation for these modules too.
We use "FreezeThaw" to squish all your data into a concise textual
representation. We use "Compress::Zlib" to compress this string, and
then use "Crypt::Blowfish" in a home-brew CBC mode to perform the
encryption. Somewhere in this process we also add a MD5 digest (using
"Digest::MD5"). Then we throw the whole thing through
"MIME::Base64" to produce a nice bit of text for you to play with.
Decryption, obviously, is the reverse of this process.
Governments throughout the world do not like encryption because it makes it
difficult for them to look at all your stuff. Each country has a different
policy designed to stop you using encryption: some governments are honest
enough to make it illegal; some think it is a dangerous weapon; some insist
that you are free to encrypt, but only evil people would want to; some make
confusing and contradictory laws because they try to do all of the above.
Although this modules itself does not include any encryption code, it does use
another module that contains encryption code, and this documentation mentions
encryption. Downloading, using, or reading this modules could be illegal where
you live.
Marty Pauley <
[email protected]>
Copyright (C) 2001 Kasei Limited
This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License; either version 2 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
FOR A PARTICULAR PURPOSE.