(PHP 4 >= 4.0.2, PHP 5)

mcrypt_module_openOpens the module of the algorithm and the mode to be used


resource mcrypt_module_open ( string $algorithm , string $algorithm_directory , string $mode , string $mode_directory )

This function opens the module of the algorithm and the mode to be used. The name of the algorithm is specified in algorithm, e.g. "twofish" or is one of the MCRYPT_ciphername constants. The module is closed by calling mcrypt_module_close().

Список параметров


Одна из констант MCRYPT_ciphername или название алгоритма в виде строки.


The algorithm_directory parameter is used to locate the encryption module. When you supply a directory name, it is used. When you set it to an empty string (""), the value set by the mcrypt.algorithms_dir php.ini directive is used. When it is not set, the default directory that is used is the one that was compiled into libmcrypt (usually /usr/local/lib/libmcrypt).


Одна из констант MCRYPT_MODE_modename, либо одна из следующих строк: "ecb", "cbc", "cfb", "ofb", "nofb" и "stream".


The mode_directory parameter is used to locate the encryption module. When you supply a directory name, it is used. When you set it to an empty string (""), the value set by the mcrypt.modes_dir php.ini directive is used. When it is not set, the default directory that is used is the one that was compiled-in into libmcrypt (usually /usr/local/lib/libmcrypt).

Возвращаемые значения

Normally it returns an encryption descriptor, or FALSE on error.


Пример #1 mcrypt_module_open() Examples


$td mcrypt_module_open('rijndael-256''''ofb''');

The first line in the example above will try to open the DES cipher from the default directory and the ECB mode from the directory /usr/lib/mcrypt-modes. The second example uses strings as name for the cipher and mode, this only works when the extension is linked against libmcrypt 2.4.x or 2.5.x.

Пример #2 Using mcrypt_module_open() in encryption

/* Open the cipher */
$td mcrypt_module_open('rijndael-256''''ofb''');

/* Create the IV and determine the keysize length, use MCRYPT_RAND
     * on Windows instead */
$iv mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_DEV_RANDOM);
$ks mcrypt_enc_get_key_size($td);

/* Create key */
$key substr(md5('very secret key'), 0$ks);

/* Intialize encryption */

/* Encrypt data */
$encrypted mcrypt_generic($td'This is very important data');

/* Terminate encryption handler */

/* Initialize encryption module for decryption */

/* Decrypt encrypted string */
$decrypted mdecrypt_generic($td$encrypted);

/* Terminate decryption handle and close module */

/* Show string */
echo trim($decrypted) . "\n";

Смотрите также


Doing a trim($decrypted) will remove the null padding that may occur as a result of decryption.

The problem is if you're encrypting something like a MSWord document which can commonly end with nulls. The result $decrypted will be smaller than the original cleartext - which will then fail to open in MSOffice.

To get around this, make sure you store the length of the original cleartext, and when you decrypt it, do:

$decrypted = substr(mdecrypt_generic($td, $encrypted), 0, $originalLength);
2003-07-31 23:14:51
Also it should be pointed that md5() and/or sha1() should not be used while forming your key for the mcrypt. This is so because hex encoding uses a set of only 16 characters [0-9a-f], which is equivalent to 4 bits, and thus halve the strength of your encryption: 4 x 32 = 128-bit.

I have re-wrote the example shown, so here is my suggestion to get real 256-bit encryption:

"this is a secret key";
$key2 "this is the second secret key";
$input "Let us meet at 9 o'clock at the secret place.";
$length strlen($input);

/* Open the cipher */
$td mcrypt_module_open('rijndael-256''''cbc''');

/* Create the IV and determine the keysize length, use MCRYPT_RAND
     * on Windows instead */
$iv mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_RAND);
$ks mcrypt_enc_get_key_size($td);

/* Create key */
$key1 md5($key1);
$key2 md5($key2);

$key substr($key10$ks/2) . substr(strtoupper($key2), (round(strlen($key2) / 2)), $ks/2);

$key substr($key.$key1.$key2.strtoupper($key1),0,$ks);

/* Intialize encryption */

/* Encrypt data */
$encrypted mcrypt_generic($td$input);

/* Terminate encryption handler */

/* Initialize encryption module for decryption */

/* Decrypt encrypted string */
$decrypted mdecrypt_generic($td$encrypted);

/* Terminate decryption handle and close module */

/* Show string */
echo "Text: ".substr($decrypted,0,$length) . "<br>";
"Encoded: ".$encrypted ."<br>";
"<br>key1: $key1 <br>key2: $key2<br>created key: $key";
2007-11-13 05:05:45
A slight improvement of dinamic's function to create a key:

I think the weak point is that capitals are always used in the same part of the string. The following code capitalizes random characters of the string, making the key less predictable:

substr($key10$ks/2) . substr($key2, (round(strlen($key2) / 2)), $ks/2);
$key substr($key.$key1.$key2.$key1,0,$ks);

$buffer str_split($key);

$limit count($buffer)-1;
srand((float)microtime() * 1000000);

$end rand(0$limit);
$a 0;

// replace random chars with capitals
while ($a $end) {   
$usec$sec) = explode(' 'microtime());
$seed = ((float)$sec) + ((float) $usec 100000);
$index mt_rand(0,$limit);
$buffer[$index] = strtoupper($buffer[$index]);

$key join(''$buffer);
2008-07-17 06:07:53
about the previous comments on hex formatting and capitalization as a way to improve the key:

this would seem pretty obvious, but it is a choice to be limited to only hex characters ([0-9a-z]); you can get the original RAW output from md5() or sha1() and not the default readable hex formatting.

the result of a raw output will be 16 o 20 (depending on the hash function being used) series of chars in the range 0-255. way better than [0-9a-z] and even [0-9a-zA-Z].

16 or 20 is generally lower than the maximum key lenght ($ks in the example), but you can append two or more keys together:

'something very secret';
$human_key2 'something else very secret';

// 40 bytes binary key using two "human readable" keys and sha1.
$bigger_binary_key sha1($human_key1true) . sha1($human_key2true);

// then just use it as you would (extract taken from the example)
$key substr($bigger_binary_key0$ks);

... or you can automatically split one large "human key" into two or more parts, hash those parts with sha1 (raw output!) and merge them together again (in original order or rearrange, salt, transform them as you like) to get a binary key of 40, 60, 80 or more chars depending on the number of parts the secret key has been splitted =)
2009-03-30 00:01:47
Keep in mind that the mcrypt functions do not implement padding like e.g. pkcs#5. This causes the problem with zero bytes at the end and the sting cannot be correctly decoded in other environments.

For an example how to add pkcs 5 padding, see ref.mcrypt.php
2009-07-20 11:10:18
for errors like
' mcrypt_module_open(): Could not open encryption module in '

Make sure you're using the right name. The page giving the list of ciphers is NOT the right way to say each cipher (shown here mcrypt.ciphers).

In order to see what ones are supported, try phpinfo(); and look under mcrypt to find something like this

mcrypt support => enabled
mcrypt_filter support => enabled
Version => 2.5.8
Api No => 20021217
Supported ciphers => cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256
 serpent xtea blowfish enigma rc2 tripledes 
Supported modes => cbc cfb ctr ecb ncfb nofb ofb stream
2012-10-29 16:11:23
Follow up to anonymous with Windows' mcrypt_module_open() errors:

$A mcrypt_list_algorithms();
foreach (
$M as $m)
    foreach (
$A as $a) {
$t = @mcrypt_module_open($a,'',$m,'');
"$m, $a = ";
        print (

This will show that not all modes work with all algorithmns. Cygwin also has no 'libmcrypt.dll' and it too will work with only some combinations.

(First tries just happened to be one of the ones that did not work!)
2016-02-18 12:34:47

    Поддержать сайт на родительском проекте КГБ