C＃AES加密到Java 8解密 java加密标题 C＃加密

如何解决C＃AES加密到Java 8解密 java加密标题 C＃加密

我正在尝试模仿C＃中的Java加密例程，因为端点基于Java，并且将解密C＃生成的值。

我尝试使用twitterhandle和const tweets = this.state.tweets.map((item,i) => ( <div> <div class="tweet_box"> <h1>{this.getUserById(item.userid_id)?.twitterhandle}</h1> <p>{item.tweet}</p> </div> </div> ));的不同实现，这些实现来自SO和网络上的几个示例，但是我仍然无法使Java端点成功解密该值，它会出错AesCryptoServiceProvider。

使用邮递员，我能够调用Java端点并使用来检索文档由下面发布的Java代码生成的加密文本，因此该部分经过了正面验证。

端点使用标头值解密文本并验证内容，以下是相关的代码段：

java加密

AesManaged

标题

{"message":"AUTHENTICATION_ERROR: Error while decrypting the cipher.","status":"Error"}

C＃加密

  private static Cipher generateCipher(int mode,String password,String salt,String iv,Integer iterations,Integer keySize) throws Exception {
    byte[] saltBytes = salt.getBytes("UTF-8"); byte[]ivBytes = iv.getBytes("UTF-8");
    // Derive the key
    SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
    PBEKeySpec spec = new PBEKeySpec(password.toCharArray(),saltBytes,iterations,keySize);

    SecretKey secretKey = factory.generateSecret(spec);
    SecretKeySpec secret = new SecretKeySpec(secretKey.getEncoded(),"AES");
    //encrypt the message
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding"); cipher.init(mode,secret,new IvParameterSpec(ivBytes));
    return cipher;
  }

  public static String AES_encrypt(String plainText,Integer keySize) throws Exception {
    Cipher cipher = generateCipher(Cipher.ENCRYPT_MODE,password,salt,iv,keySize);
    byte[] encryptedTextBytes = cipher.doFinal(plainText.getBytes("UTF-8"));
    Base64.Encoder encoder = Base64.getEncoder();
    return encoder.encodeToString(encryptedTextBytes);
  }

解决方法

要测试任何C＃加密，我向您的Java代码中添加了一种解密方法，并成功运行了完整的一轮（加密和解密）。

对于C＃部分，我太懒了，无法检查您的代码（就像@Topaco一样），并使用我自己的代码和凭据来获取可以提供给Java解密方法的输出。

让我们从更长的安全警告开始：代码使用的是静态初始化向量和静态盐以及迭代计数 PBKDF2的密钥派生太低（应至少使用10.000）。该代码没有任何异常处理，仅用于教育目的。

运行C＃代码会给出简短的输出：

AES CBC 256 string encryption with PBKDF2 SHA1 key derivation
plaintext:      The quick brown fox jumps over the lazy dog
ciphertext:     5HMLSQKEgG+RADgPmf5Eyw0F/GG9sXFuWiHeuZxgpmJP+UoH4MZlvnQDrgnofQy4

将密文呈现给Java解密将给出以下输出：

C# AES encrypt to java 8 decrypt
plaintext: The quick brown fox jumps over the lazy dog
ciphertext: 5HMLSQKEgG+RADgPmf5Eyw0F/GG9sXFuWiHeuZxgpmJP+UoH4MZlvnQDrgnofQy4
decryptedtext: The quick brown fox jumps over the lazy dog

decryption of a ciphertext from C#
ciphertextFromCsharp: 5HMLSQKEgG+RADgPmf5Eyw0F/GG9sXFuWiHeuZxgpmJP+UoH4MZlvnQDrgnofQy4
decryptedtextFromCsharp: The quick brown fox jumps over the lazy dog

这两个代码均可用于现场自测（Java：https://repl.it/@javacrypto/JavaAes256EncryptionWithPBKDF2SHA1keyderivation，C＃：https://repl.it/@javacrypto/CsharpAes256Pbkdf2Encryption#main.cs）。

C＃代码：

using System;
using System.IO;
using System.Security.Cryptography;
using System.Text;

public class Program {
    public static void Main() {
        Console.WriteLine("AES CBC 256 string encryption with PBKDF2 SHA1 key derivation");
        // credentials
    string plaintext = "The quick brown fox jumps over the lazy dog";
        string password = "myPassword";
    string saltString = "salt_sixteen1234";
    var iterationsCount = 100;
    string ivString = "sixteen_value_12";

    Encoding enc = Encoding.UTF8;
        byte[] saltBytes = enc.GetBytes(saltString);
    byte[] iv = enc.GetBytes(ivString);
    byte[] key;

        try {
      // pbkdf2 sha1 key derivation
      using (var pbkdf2 = new Rfc2898DeriveBytes(
            password,saltBytes,iterationsCount,HashAlgorithmName.SHA1))
          {
            key = pbkdf2.GetBytes(32);
          }
            Console.WriteLine("plaintext:      {0}",plaintext);
            string ciphertext = encrypt(key,iv,plaintext);
            Console.WriteLine("ciphertext:     {0}",ciphertext);
        }
        catch(Exception e) {
            Console.WriteLine("Error: {0}",e.Message);
        }
    }

    static string encrypt(byte[] key,byte[] IV,string data) {
        byte[] encrypted;
        using(Aes aesAlg = Aes.Create()) {
            aesAlg.Key = key;
            aesAlg.IV = IV;
            aesAlg.Mode = CipherMode.CBC;
            var encryptor = aesAlg.CreateEncryptor(aesAlg.Key,aesAlg.IV);
            // create the streams used for encryption.
            using(var msEncrypt = new MemoryStream()) {
                using(var csEncrypt = new CryptoStream(msEncrypt,encryptor,CryptoStreamMode.Write)) {
                    using(var swEncrypt = new StreamWriter(csEncrypt)) {
                        //Write all data to the stream.
                        swEncrypt.Write(data);
                    }
                    encrypted = msEncrypt.ToArray();
                }
            }
        }
        return Convert.ToBase64String(encrypted);
    }
}

Java代码：

import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.util.Base64;

public class Main {
    public static void main(String[] args) throws Exception {
        System.out.println("C# AES encrypt to java 8 decrypt");

        String plaintext = "The quick brown fox jumps over the lazy dog";
        String password = "myPassword";
        String iv = "sixteen_value_12";
        String salt = "salt_sixteen1234";
        int iterations = 100;
        int keySize = 256;
        System.out.println("plaintext: " + plaintext);
        String ciphertext = AES_encrypt(plaintext,password,salt,iterations,keySize);
        System.out.println("ciphertext: " + ciphertext);
        String decryptedtext = AES_decrypt(ciphertext,keySize);
        System.out.println("decryptedtext: " + decryptedtext);
        System.out.println("\ndecryption of a ciphertext from C#");
        String ciphertextFromCsharp = "5HMLSQKEgG+RADgPmf5Eyw0F/GG9sXFuWiHeuZxgpmJP+UoH4MZlvnQDrgnofQy4";
        System.out.println("ciphertextFromCsharp: " + ciphertextFromCsharp);
        String decryptedtextFromCsharp = AES_decrypt(ciphertextFromCsharp,keySize);
        System.out.println("decryptedtextFromCsharp: " + decryptedtextFromCsharp);
   }

    private static Cipher generateCipher(int mode,String password,String salt,String iv,Integer iterations,Integer keySize) throws Exception {
        byte[] saltBytes = salt.getBytes("UTF-8"); byte[]ivBytes = iv.getBytes("UTF-8");
        // Derive the key
        SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
        PBEKeySpec spec = new PBEKeySpec(password.toCharArray(),keySize);
        SecretKey secretKey = factory.generateSecret(spec);
        SecretKeySpec secret = new SecretKeySpec(secretKey.getEncoded(),"AES");
        //encrypt the message
        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding"); cipher.init(mode,secret,new IvParameterSpec(ivBytes));
        return cipher;
    }

    public static String AES_encrypt(String plainText,Integer keySize) throws Exception {
        Cipher cipher = generateCipher(Cipher.ENCRYPT_MODE,keySize);
        byte[] encryptedTextBytes = cipher.doFinal(plainText.getBytes("UTF-8"));
        Base64.Encoder encoder = Base64.getEncoder();
        return encoder.encodeToString(encryptedTextBytes);
    }

    public static String AES_decrypt(String cipherText,Integer keySize) throws Exception {
        Base64.Decoder decoder = Base64.getDecoder();
        Cipher cipher = generateCipher(Cipher.DECRYPT_MODE,keySize);
        return new String(cipher.doFinal(decoder.decode(cipherText)),StandardCharsets.UTF_8);
    }
}

C＃AES加密到Java 8解密 java加密标题 C＃加密

如何解决C＃AES加密到Java 8解密 java加密标题 C＃加密

java加密

标题

C＃加密

解决方法

相关推荐