Method parseKeyString

src/FileRise/Support/CryptoAtRest.php:55–87

(string $raw)

    }

    private static function parseKeyString(string $raw): ?string
    {
        $s = trim($raw);
        if ($s === '') {
            return null;
        }

        // base64:... convenience
        if (stripos($s, 'base64:') === 0) {
            $b = substr($s, 7);
            $bin = base64_decode($b, true);
            if (is_string($bin) && strlen($bin) === SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_KEYBYTES) {
                return $bin;
            }
            return null;
        }

        // hex key (64 hex chars => 32 bytes)
        if (preg_match('/^[a-f0-9]{64}$/i', $s)) {
            $bin = hex2bin($s);
            if (is_string($bin) && strlen($bin) === SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_KEYBYTES) {
                return $bin;
            }
            return null;
        }

        // raw (unlikely via env); accept only exact key length
        if (strlen($s) === SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_KEYBYTES) {
            return $s;
        }

        return null;
    }

    /**
     * Decode a key string without persisting it.