PHP Requires Chilkat v11.0.0+

How to Generate an Elliptic Curve Shared Secret

See more ECC Examples

Demonstrates how to generate an ECC (Elliptic Curve Cryptography) shared secret. Imagine a cilent has one ECC private key, the server has another. A shared secret is computed by each side providing it's public key to the other. The private keys are kept private. Chilkat2 PHP

<?php

use Chilkat2\Ecc;
use Chilkat2\PrivateKey;
use Chilkat2\Prng;
use Chilkat2\PublicKey;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// This example includes both client-side and server-side code.
// Each code segment is marked as client-side or server-side.
// Imagine these segments are running on separate computers...

// -----------------------------------------------------------------
// (Client-Side) Generate an ECC key, save the public part to a file.
// -----------------------------------------------------------------
$prngClient = new Prng();
$eccClient = new Ecc();
$privKeyClient = new PrivateKey();
try {
    $eccClient->GenKey('secp256r1', $prngClient, $privKeyClient);
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

$pubKeyClient = new PublicKey();
$privKeyClient->ToPublicKey($pubKeyClient);
$pubKeyClient->SavePemFile(false, 'qa_output/eccClientPub.pem');

// -----------------------------------------------------------------
// (Server-Side) Generate an ECC key, save the public part to a file.
// -----------------------------------------------------------------
$prngServer = new Prng();
$eccServer = new Ecc();
$privKeyServer = new PrivateKey();
$eccServer->GenKey('secp256r1', $prngServer, $privKeyServer);

$pubKeyServer = new PublicKey();
$privKeyServer->ToPublicKey($pubKeyServer);
$pubKeyServer->SavePemFile(false, 'qa_output/eccServerPub.pem');

// -----------------------------------------------------------------
// (Client-Side) Generate the shared secret using our private key, and the other's public key.
// -----------------------------------------------------------------

// Imagine that the server sent the public key PEM to the client.
// (This is simulated by loading the server's public key from the file.
$pubKeyFromServer = new PublicKey();
$pubKeyFromServer->LoadFromFile('qa_output/eccServerPub.pem');
$sharedSecret1 = $eccClient->SharedSecretENC($privKeyClient, $pubKeyFromServer, 'base64');

// -----------------------------------------------------------------
// (Server-Side) Generate the shared secret using our private key, and the other's public key.
// -----------------------------------------------------------------

// Imagine that the client sent the public key PEM to the server.
// (This is simulated by loading the client's public key from the file.
$pubKeyFromClient = new PublicKey();
$pubKeyFromClient->LoadFromFile('qa_output/eccClientPub.pem');
$sharedSecret2 = $eccServer->SharedSecretENC($privKeyServer, $pubKeyFromClient, 'base64');

// ---------------------------------------------------------
// Examine the shared secrets.  They should be the same.
// Both sides now have a secret that only they know.
// ---------------------------------------------------------
echo $sharedSecret1, "\n";
echo $sharedSecret2, "\n";