How to Secure Data Transmission with PHP: HTTPS, Symmetric and Asymmetric Encryption

As the Internet evolves, the security of data transmission has become a continuous concern; without encryption, data can be intercepted, leading to privacy leaks or tampering.

PHP, a widely used server‑side language, offers various tools for encrypting data transmission. The following sections describe three approaches to secure communication using PHP.

1. Use HTTPS

HTTPS

is an HTTP protocol secured by the SSL/TLS protocol, adding an encryption layer between HTTP and TCP. Enabling HTTPS prevents man‑in‑the‑middle attacks and data theft. In PHP projects, configuring the server and site to use HTTPS implements this protection.

2. Use Symmetric Encryption Algorithms

Symmetric algorithms use the same key for encryption and decryption. PHP can employ common symmetric ciphers such as AES, DES, or 3DES. Both parties must agree on a secret key and protect it.

Example code for symmetric encryption in PHP:

$key = "secret_key"; // key
$data = "data_to_encrypt"; // data to encrypt

// encryption
$encryptedData = openssl_encrypt($data, 'AES-128-ECB', $key, OPENSSL_RAW_DATA);

// decryption
$decryptedData = openssl_decrypt($encryptedData, 'AES-128-ECB', $key, OPENSSL_RAW_DATA);

3. Use Asymmetric Encryption Algorithms

Asymmetric encryption uses a public‑key/private‑key pair. The sender encrypts data with the public key, and the receiver decrypts with the private key, eliminating the need to transmit the private key.

PHP’s openssl extension can perform asymmetric encryption. Example code:

// Generate key pair
$config = array(
    "digest_alg" => "sha512",
    "private_key_bits" => 2048,
    "private_key_type" => OPENSSL_KEYTYPE_RSA
);
$res = openssl_pkey_new($config);
openssl_pkey_export($res, $privateKey);
$publicKey = openssl_pkey_get_details($res)["key"];

$data = "data_to_encrypt";

// Encryption
if (openssl_public_encrypt($data, $encryptedData, $publicKey)) {
    // Decryption
    if (openssl_private_decrypt($encryptedData, $decryptedData, $privateKey)) {
        echo $decryptedData;
    }
}

By applying HTTPS, symmetric encryption, and asymmetric encryption, PHP developers can ensure confidentiality, integrity, and authentication of data in transit. Proper key management, such as regular key rotation, further enhances security.