Dumping 59 bytes

Dumping 4933 bytes

<?php
    //This file is a time stamping demonstration in PHP
    //It basically does the same timestamp request that openSSL "ts" command would do.
    //How you use this or validate a timestamp is beyond the scope of this.
    //The reply will be an ASN.1 formatted file with the certificate of the signer
    //(if chosen when signing) and the signed hash as well as the timestamp
    
    //This contains algorithms. The key is the algorithm name and the value the hex encoded OID.
    //An algorithm list can be obtained with "openssl list -digest-algorithms"
    //Note that not all openSSL algorithms are valid choices.
    //As of this writing "sha256" is the industry preferred choice.
    $algorithms=array(
        'ripemd160'=>pack('H*','06052B240302010500'),
        'sha1'     =>pack('H*','06052B0E03021A0500'),
        'sha256'   =>pack('H*','06096086480165030402010500'),
        'sha512'   =>pack('H*','06096086480165030402030500'),
        'sha3-256' =>pack('H*','06096086480165030402080500'),
    );

    //Hash data using the given algorithm
    //and return the binary data for TsSign
    //
    //Params:
    //  $data(any)
    //    Binary data to sign
    //  $alg(string)
    //     A key from the $algorithms global
    //  $includeCert(bool):
    //    Tell signer to include their certificate in the response data.
    //    Excluding the certificate means you need to obtain it by other means
    //    when you want to verify the signed data.
    //    Usually this should be left enabled unless size of the response is a big concern
    //
    //Returns:
    //  data to be supplied into TsSign() function.
    //  This should be saved somewhere (preferrably close to the data the hash is from).
    //  It's technically not needed because you can just re-hash the data,
    //  but keeping it allows you to detect whether the file has changed or not.
    function TsHash($data,$alg,$includeCert){
        global $algorithms;
        if(!isset($algorithms[$alg])){
            return FALSE;
        }
        //Get hash and OID
        $hash=hash($alg,$data,TRUE);
        $oid=$algorithms[$alg];
        //Add header to hash and OID
        $hash="\x04" . chr(strlen($hash)) . $hash;
        $oid="\x30" . chr(strlen($oid)) . $oid;
        //Combine OID and hash, then add header to the combined value
        $blob="\x30" . chr(strlen($oid . $hash)) . $oid . $hash;
        //Add header and trailer to the combined value
        $ret="\x02\x01\x01" . $blob . "\x01\x01" . ($includeCert?"\xFF":"\x00");
        //Add yet another header because we don't have enough of them already
        return "\x30" . chr(strlen($ret)) . $ret;
    }

    //Sign the value from a TsHash call using the supplied CA timestamping URL
    //
    //Params:
    //  $tshash(binary): Data from TsHash() function call
    //  $url: URL to the timestamp authority
    //
    //Returns:
    //  Signed binary response from the timestamp authority.
    //  Must be stored for later verification
    function TsSign($tshash,$url){
        $ch=curl_init($url);
        curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
        curl_setopt($ch,CURLOPT_POST,TRUE);
        curl_setopt($ch,CURLOPT_TIMEOUT,5);
        curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,5);
        curl_setopt($ch,CURLOPT_POSTFIELDS,$tshash);
        curl_setopt($ch,CURLOPT_HTTPHEADER,array('Content-Type: application/timestamp-query'));
        $res=curl_exec($ch);
        if(!$res){
            throw new Exception(curl_error($ch),curl_errno($ch));
        }
        curl_close($ch);
        return $res;
    }

    //Hex dump binary data to the output
    //Params:
    //  $x(string,binary): Data to dump
    //
    //Returns:
    //  None. Output is directly written
    function bindump($x){
        echo '<p>Dumping ' . strlen($x) . ' bytes</p>';
        $hex='';
        $dump='';
        $chunks=str_split($x,16);
        foreach($chunks as $chunk){
            $chars=str_split($chunk);
            foreach($chars as $c){
                $hex.=sprintf('%02X ',ord($c));
                $dump.=preg_match('#[^\x00-\x1F\x7F]#',$c)?iconv('CP437','UTF-8',$c):'.';
            }
            for($i=0;$i<16-strlen($chunk);$i++){
                $hex.='-- ';
            }
            $hex.=PHP_EOL;
            $dump.=PHP_EOL;
        }
        //Write as table to allow selection of either hex or text only.
        echo '<table style="font-family:monospace;"><tr><td style="padding:1em;">' .
            nl2br(htmlspecialchars($hex)) .
            '</td><td style="padding:1em;">' .
            nl2br(htmlspecialchars($dump)) .
            '</td></tr></table>';
    }
    
    //Demo (with cache support)
    $req=@file_get_contents('last.req');
    $res=@file_get_contents('last.res');
    if(!$req){
        $req=TsHash(file_get_contents('C:/Temp/enc.bin'),'sha256',TRUE);
        file_put_contents('last.req',$req);
    }
    bindump($req);
    if(!$res){
        $res=TsSign($req,'http://timestamp.comodoca.com/');
        file_put_contents('last.res',$res);
    }
    bindump($res);
    
    //Show source of this
    highlight_file(__FILE__);