RAILO CFML中的DESede（3DES）加密 [英] DESede (3DES) Encryption in RAILO CFML

查看：152
本文介绍了RAILO CFML中的DESede（3DES）加密的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

我已经尝试了很多天来尝试解决此问题。



第三方网络服务要求我使用带有ECB $ b $的3DES发送加密的数据b和PKCS7padding-他们使用的是.NET



railo CFML中的加密功能仅限于DESede，而没有任何其他选择（即，默认方式用于密码模式和填充） 。



有人在Railo中遇到过这个问题，并提出了解决方案（也许基于Java）吗？ -我正在认真地把头发拉出来！



根据下面的李的建议，我进行了一些更改：



我已经取得了一些进展，我认为此密钥上有某种MD5哈希。



我在网上钓鱼，并对您的解决方案做了一些修改-我认为填充不是必需的，但是最初生成的加密字符串似乎是我应该期望的，但是随后仔细检查它是不正确的：

  IvParameterSpec = createObject（ java， javax.crypto.spec.IvParameterSpec）; 
 Cipher = createObject（ java， javax.crypto.Cipher）; 
 SecretKeySpec = createObject（ java， javax.crypto.spec.SecretKeySpec）; 
 BASE64Decoder = createObject（ java， sun.misc.BASE64Decoder）; 
 Str = createObject（ java， java.lang.String）; 
 MessageDigest = createObject（ java， java.security.MessageDigest）; 
 
 input =< xml>< PanNumber> 6280390027626871< / PanNumber>< Req_Currency_Code> 826< / Req_Currency_Code>< Card_Pin> 1234< / Card_Pill_A&mount;> ;< Auth_Code>< / Auth_Code>< / xml>; 
键= 06098140901984F95E139F29B479D952CB6545C177D21456； 
 
 md = MessageDigest.getInstance（ MD5）; 
 md.update（key.getBytes（ UTF-8），0，key.length（））; 
 keyBytes = md.digest（）; 
 newKey = tobase64（keyBytes）; 
 keyBytes2 = binaryDecode（newKey， base64）; 
 keyBytes2 = arrayMerge（keyBytes，arraySlice（keyBytes，1，8））; 
 allnewKey = binaryEncode（javacast（ byte []，keyBytes2）， base64）; 
 
加密=加密（input，allnewKey， desede， base64）; 
 WriteDump（ encrypted（CF）：& encryption）;`

结果是：<强> 26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6KrdbXe7NBUVADYMdGuagfO4Tev584dUcgKGJ2h6kWPZxooNUGMgL2xB7e00YOkLosA8wFD569sZUd1MGKuF9yCjY1zCsAE4SgohkcuK9YZ7BizQma99 / W9yOsIjAfHtAqGiep4tMTQ + eFASYtPybccsgi8H4brIB / HAu0kaDSAw



预期的结果是：
的 26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6MxaAzUpJDqQBq8NGgdqmtn6q / wVQNHGWrOE8 + aetKVC78nszS3ZO8AHjwoT1igv4lGl78n8jCHHU + KwnBT7KfXIYMTCuwO / MohIiFbGyhMXPsvv3 / G4OY1C2nEkN0LweLh4mTgtU8syT1M9XdmvwhaltsmPoFtoE9FujvQpJCY3

解决方案

$ ed CF是

，则没有其他选择（即，默认模式用于密码模式和
填充）。


是，我相信它使用Java的默认值，即 DESede / ECB / PKCS5Padding 与兼容.NET中的TripleDES / ECB / PKCS7padding 。因此，只要您使用24字节密钥，它就可以立即使用。



一无所知，我猜这可能与您的密钥大小有关。 .NET支持16和24字节密钥，但是Java仅支持24字节密钥。因此，如果密钥只有16个字节，则需要用前八（8）个字节填充密钥，以使其可以被Java / Railo接受。



CF / Railo代码 

 < cfscript> 
 input = RAILO CFML中的DESede（3DES）加密; 
 key = ru8femXhTm9jwdGdhb / 4Sw ==; 
 
 //用前八个字节填充密钥。然后转换回base64 
 keyBytes = binaryDecode（key， base64）; 
 keyBytes = arrayMerge（keyBytes，arraySlice（keyBytes，1，8））; 
 newKey = binaryEncode（javacast（ byte []，keyBytes）， base64）; 
 
 crypto =加密（input，newKey， desede， base64）; 
 WriteDump（ encrypted（CF）：& encryption）; 
< / cfscript>

C＃代码 

  byte []输入= Encoding.UTF8.GetBytes（ RAILO CFML中的DESede（3DES）加密）; 
 byte []键= Convert.FromBase64String（ ru8femXhTm9jwdGdhb / 4Sw ==）;; 
 
 TripleDESCryptoServiceProvider算法=新的TripleDESCryptoServiceProvider（）; 
 algorithm.Mode = CipherMode.ECB; 
 algorithm.BlockSize = 64; 
 algorithm.KeySize = 128; // 16字节密钥
算法。 
 ICryptoTransform cipher = algorithm.CreateEncryptor（）; 
字节[]加密= cipher.TransformFinalBlock（input，0，input.Length）; 
 Console.WriteLine（ encrypted（.NET）：{0}，Convert.ToBase64String（encrypted））;

结果： 

 加密（CF）：fMPlk0ZqHDwp2zzZs / Cng7Y6r8Acr55UPJYWJTruEesxkBApsEFo6w == 
加密（.NET）：fMPlk0ZqHDwp2zzZs / Cng7Y6r8BAcr> pre> 
 
 
 
 
 
 更新：很奇怪。当我MD5哈希.NET中的密钥时，我得到的是您的第一个结果，而不是预期的结果。
  String rawInput =< ; xml>< PanNumber> 6280390027626871< / PanNumber>< Req_Currency_Code> 826< / Req_Currency_Code>< Card_Pin> 1234< / Card_Pin>< Aill_Amount>>< / xml>; 
 String rawKey = 06098140901984F95E139F29B479D952CB6545C177D21456； 
 byte [] input = Encoding.UTF8.GetBytes（rawInput）; 
 byte []键= MD5.Create（）。ComputeHash（Encoding.UTF8.GetBytes（rawKey））; 
 // ...其余代码
  
 结果： 
 加密（.NET）：26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6KrdbXe7NB 
 UVADYMdGuagfO4Tev584dUcgKGJ2h6kWPZxooNUGMgL2xB7e00YOkLosA8wFD569sZUd1MGKuF9yCjY1 
 zCsAE4SgohkcuK9YZ7BizQma99 / W9yOsIjAfHtAqGiep4tMTQ + eFASYtPybccsgi8H4brIB / HAu0kaDS 
 Aw 
  
 
I've been trying for many days to try and solve this issue.



A 3rd Party webservice requires me to send encrypted data using 3DES with ECB
and PKCS7padding - They're using .NET



The encrypt function within railo CFML is limited to DESede without any further options (i.e. defaults are used for cipher mode and padding). 



Has anyone had this issue in Railo and come up with a solution (java based perhaps)? - I'm seriously pulling my hair out here!



Based on Leigh's suggestions below I made some changes:



I've made a bit of progress, I think this key has some kind of MD5 hashing on it.



I fished around the web and modified your solution a bit - I don't think the padding is necessary but the resultant encrypted string at first appears to be what I should expect but then closer on inspection it's incorrect:
IvParameterSpec = createObject("java", "javax.crypto.spec.IvParameterSpec");
Cipher = createObject("java", "javax.crypto.Cipher");
SecretKeySpec = createObject("java", "javax.crypto.spec.SecretKeySpec");
BASE64Decoder = createObject("java", "sun.misc.BASE64Decoder");
Str = createObject("java", "java.lang.String");
MessageDigest = createObject("java", "java.security.MessageDigest");

input  = "<xml><PanNumber>6280390027626871</PanNumber><Req_Currency_Code>826</Req_Currency_Code><Card_Pin>1234</Card_Pin><Till_Amount></Till_Amount><Auth_Code></Auth_Code></xml>";
key = "06098140901984F95E139F29B479D952CB6545C177D21456";

md = MessageDigest.getInstance("MD5");
md.update(key.getBytes("UTF-8"), 0, key.length());
keyBytes = md.digest();
newKey = tobase64(keyBytes);
keyBytes2  = binaryDecode(newKey, "base64");
keyBytes2  = arrayMerge(keyBytes, arraySlice(keyBytes, 1, 8));
allnewKey = binaryEncode(javacast("byte[]", keyBytes2), "base64");

encrypted = encrypt(input, allnewKey, "desede", "base64");
WriteDump("encrypted (CF): "& encrypted);`

The result is: 26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6KrdbXe7NBUVADYMdGuagfO4Tev584dUcgKGJ2h6kWPZxooNUGMgL2xB7e00YOkLosA8wFD569sZUd1MGKuF9yCjY1zCsAE4SgohkcuK9YZ7BizQma99/W9yOsIjAfHtAqGiep4tMTQ+eFASYtPybccsgi8H4brIB/HAu0kaDSAw



The expected result is:
26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6MxaAzUpJDqQBq8NGgdqmtn6q/wVQNHGWrOE8+aetKVC78nszS3ZO8AHjwoT1igv4lGl78n8jCHHU+KwnBT7KfXIYMTCuwO/MohIiFbGyhMXPsvv3/G4OY1C2nEkN0LweLh4mTgtU8syT1M9XdmvwhaltsmPoFtoE9FujvQpJCY3
 解决方案 

  
The encrypt function within railo CFML is limited to DESede without
  any further options (i.e. defaults are used for cipher mode and
  padding).


Yes, I believe it uses java's defaults ie DESede/ECB/PKCS5Padding which are compatible with TripleDES/ECB/PKCS7padding in .NET. So it should work right out of the box as long as you are using a 24 byte key.  



Without knowing more, I am guessing it might be a problem with your key size. .NET supports both 16 and 24 byte keys, but java only supports 24 byte keys. So if your key is only 16 bytes, you need to pad it with the first eight (8) bytes to make it acceptable to Java/Railo.



CF/Railo Code
<cfscript>
    input  = "DESede (3DES) Encryption in RAILO CFML";
    key    = "ru8femXhTm9jwdGdhb/4Sw==";

    // pad the key with the first eight bytes. then convert back to base64
    keyBytes  = binaryDecode(key, "base64");
    keyBytes  = arrayMerge(keyBytes, arraySlice(keyBytes, 1, 8));
    newKey = binaryEncode(javacast("byte[]", keyBytes), "base64");

    encrypted = encrypt(input, newKey, "desede", "base64");
    WriteDump("encrypted (CF): "& encrypted);
</cfscript>

C# Code
byte[] input = Encoding.UTF8.GetBytes("DESede (3DES) Encryption in RAILO CFML");
byte[] key = Convert.FromBase64String("ru8femXhTm9jwdGdhb/4Sw==");

TripleDESCryptoServiceProvider algorithm = new TripleDESCryptoServiceProvider();
algorithm.Mode = CipherMode.ECB;
algorithm.BlockSize = 64;
algorithm.KeySize = 128; // 16 byte key
algorithm.Key = key;
ICryptoTransform cipher = algorithm.CreateEncryptor();
byte[] encrypted = cipher.TransformFinalBlock(input, 0, input.Length);
Console.WriteLine("encrypted (.NET): {0}", Convert.ToBase64String(encrypted));

Results:
encrypted (CF):   fMPlk0ZqHDwp2zzZs/Cng7Y6r8Acr55UPJYWJTruEesxkBApsEFo6w==
encrypted (.NET): fMPlk0ZqHDwp2zzZs/Cng7Y6r8Acr55UPJYWJTruEesxkBApsEFo6w==







Update:  Weird. When I MD5 hash the key in .NET I get your first result rather than the "expected result"
    String rawInput = "<xml><PanNumber>6280390027626871</PanNumber><Req_Currency_Code>826</Req_Currency_Code><Card_Pin>1234</Card_Pin><Till_Amount></Till_Amount><Auth_Code></Auth_Code></xml>";
    String rawKey = "06098140901984F95E139F29B479D952CB6545C177D21456";
    byte[] input = Encoding.UTF8.GetBytes(rawInput);
    byte[] key = MD5.Create().ComputeHash(Encoding.UTF8.GetBytes(rawKey));
    // ... rest of code 

Result:    
encrypted (.NET): 26sfwv2DHDj7EHYd5Qao8veDtPbKIcv8rDVhbLPDEaWHO27EUGRF6KrdbXe7NB
UVADYMdGuagfO4Tev584dUcgKGJ2h6kWPZxooNUGMgL2xB7e00YOkLosA8wFD569sZUd1MGKuF9yCjY1
zCsAE4SgohkcuK9YZ7BizQma99/W9yOsIjAfHtAqGiep4tMTQ+eFASYtPybccsgi8H4brIB/HAu0kaDS
Aw          



                        
这篇关于RAILO CFML中的DESede（3DES）加密的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
查看全文
相关文章
C#/.NET最新文章
热门教程
热门工具
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆