coldfusion decrypt in php

Question

Hello. I'm not english speaker, sorry in advance.

I have a ColdFusion 6.1 application, and now I'm trying to migrate to another enviroment. In the ColdFusion application the passwords of my users are crypted with a ColdFusion function:

password_encrypted=toBase64(encrypt(text,key));

any one knows how can I decrypt it in PHP? I don't know whats the cypher algorithm used in CFMX 6.1... I think that the name of the algorithm is CFMX_COMPAT, but I don't know if it has an equivalent in php.

Thanks!!!

Answer 1

Maybe a dumb question, why not try UN-encrypting using Coldfusion 6? Insert that into the record as plain text (while in DEV).

Then encrypt with any format you want using PHP. That way you are 100% sure it will be decrypted/understood from Coldfusion to PHP.

As reference here is the CF 6 encrypt() fn: http://livedocs.adobe.com/coldfusion/6/CFML_Reference/functions-pt175.htm

and here is decrypt() fn: http://livedocs.adobe.com/coldfusion/6/CFML_Reference/functions-pt170.htm#1103962

Answer 2

So you have the encrypted passwords and want to retrieve them in plain text? If that's the case, I don't think it's viable. In fact passwords are encrypted to prevent people from doing exactly that.

Answer 3

If I'm not mistaken, the default CFMX_COMPAT function is simply a XOR.

So in PHP this would be as simple as:

$password_encrypted = base64_encode($text ^ $key);

Hope this helps.

Edit:

I was curious so I wrote a little script to test, and this might be reversed, here is the encrypt/decrypt.

<?php

$text = 'test';
$key = 'asdf';

$password_encrypted = base64_encode($key ^ $text);

echo $password_encrypted . "<br>\n";

$password_decrypted = base64_decode($password_encrypted) ^ $key;

echo $password_decrypted;

?>