Gazelle/classes/dbcrypt.class.php

<?
class DBCrypt {
  /**
   * Encrypts input text for use in database
   *
   * @param string $plaintext
   * @return encrypted string or false if DB key not accessible
   */
  public static function encrypt($plaintext) {
    if (apcu_exists('DBKEY')) {
      $iv_size = openssl_cipher_iv_length('AES-128-CBC');
      $iv = openssl_random_pseudo_bytes($iv_size);
      $ret =  base64_encode($iv.openssl_encrypt($plaintext, 'AES-128-CBC', apcu_fetch('DBKEY'), OPENSSL_RAW_DATA, $iv));
      return $ret;
    } else {
      return false;
    }
  }

  /**
   * Decrypts input text from database
   *
   * @param string $ciphertext
   * @return decrypted string string or false if DB key not accessible
   */
  public static function decrypt($ciphertext) {
    if (apcu_exists('DBKEY')) {
      $iv_size = openssl_cipher_iv_length('AES-128-CBC');
      $iv = substr(base64_decode($ciphertext), 0, $iv_size);
      $ciphertext = substr(base64_decode($ciphertext), $iv_size);
      return openssl_decrypt($ciphertext, 'AES-128-CBC', apcu_fetch('DBKEY'), OPENSSL_RAW_DATA, $iv);
    } else {
      return false;
    }
  }
}
?>