Using PHP to Secure Data Transmission with HTTPS, Symmetric and Asymmetric Encryption

As the Internet continues to evolve, the security of data transmission has become a persistent concern. Unencrypted data can be easily intercepted, leading to privacy breaches or data tampering, making encryption essential for safe communication.

1. Use HTTPS

HTTPS is a secure HTTP protocol based on SSL/TLS, adding an encryption layer between HTTP and TCP to protect data. Enabling HTTPS prevents man‑in‑the‑middle attacks and data theft. PHP websites can enable HTTPS by configuring the server and site accordingly.

2. Use Symmetric Encryption Algorithms

Symmetric encryption uses the same key for encryption and decryption. PHP can employ common symmetric algorithms such as AES, DES, and 3DES. Both parties must agree on a secret key and keep it safe.

Below is a PHP example for symmetric encryption using OpenSSL:

<code>$key = "密钥"; // secret key
$data = "待加密数据"; // data to encrypt

// Encrypt
$encryptedData = openssl_encrypt($data, 'AES-128-ECB', $key, OPENSSL_RAW_DATA);

// Decrypt
$decryptedData = openssl_decrypt($encryptedData, 'AES-128-ECB', $key, OPENSSL_RAW_DATA);
</code>

3. Use Asymmetric Encryption Algorithms

Asymmetric encryption uses a key pair: a public key for encryption and a private key for decryption. The sender encrypts data with the public key, and the receiver decrypts it with the private key, eliminating the need to transmit the private key.

PHP’s openssl extension can perform asymmetric encryption. The following example demonstrates key pair generation, encryption, and decryption:

<code>// Generate key pair
$config = array(
    "digest_alg" => "sha512",
    "private_key_bits" => 2048,
    "private_key_type" => OPENSSL_KEYTYPE_RSA
);
$res = openssl_pkey_new($config);
openssl_pkey_export($res, $privateKey);
$publicKey = openssl_pkey_get_details($res)["key"];

$data = "待加密数据"; // data to encrypt

// Encrypt with public key
if (openssl_public_encrypt($data, $encryptedData, $publicKey)) {
    // Decrypt with private key
    if (openssl_private_decrypt($encryptedData, $decryptedData, $privateKey)) {
        echo $decryptedData;
    }
}
</code>

By applying these three methods—HTTPS, symmetric encryption, and asymmetric encryption—developers can ensure secure data transmission, protect against eavesdropping and tampering, and verify the identities of communicating parties. Proper key management, including regular key rotation, further enhances security.