在java中解密字符串,它使用php中的AES进行加密 [英] Decrypt string in java which was encrypted using AES in php
本文介绍了在java中解密字符串,它使用php中的AES进行加密的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!
问题描述
<?php
# --- ENCRYPTION ---
# the key should be random binary, use scrypt, bcrypt or PBKDF2 to
# convert a string into a key
# key is specified using hexadecimal
$length = 16;
$key = openssl_random_pseudo_bytes($length);
// echo $key;
// $key = pack('H*', "bcb04b7e103a0cd8b54763051cef08bc55abe029fdebae5e1d417e2ffb2a00a3");
echo $key."<br/>";
echo "<br/>";
# show key size use either 16, 24 or 32 byte keys for AES-128, 192
# and 256 respectively
$key_size = strlen($key);
echo "Key size: " . $key_size;
echo "<br/>";
$plaintext = "This string was AES-256 / CBC / ZeroBytePadding encrypted.";
# create a random IV to use with CBC encoding
$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
$iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
# creates a cipher text compatible with AES (Rijndael block size = 128)
# to keep the text confidential
# only suitable for encoded input that never ends with value 00h
# (because of default zero padding)
$ciphertext = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key,
$plaintext, MCRYPT_MODE_CBC, $iv);
# prepend the IV for it to be available for decryption
$ciphertext = $iv . $ciphertext;
# encode the resulting cipher text so it can be represented by a string
$ciphertext_base64 = base64_encode($ciphertext);
echo "ENCRYPTED DATA =". $ciphertext_base64;
echo "<br/>";
# === WARNING ===
# Resulting cipher text has no integrity or authenticity added
# and is not protected against padding oracle attacks.
# --- DECRYPTION ---
$ciphertext_dec = base64_decode($ciphertext_base64);
# retrieves the IV, iv_size should be created using mcrypt_get_iv_size()
$iv_dec = substr($ciphertext_dec, 0, $iv_size);
# retrieves the cipher text (everything except the $iv_size in the front)
$ciphertext_dec = substr($ciphertext_dec, $iv_size);
# may remove 00h valued characters from end of plain text
$plaintext_dec = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key,
$ciphertext_dec, MCRYPT_MODE_CBC, $iv_dec);
echo "DECRYPTED TEXT = ".$plaintext_dec;
?>
JAVA: -
public static String decryptWithIV(byte[] key, String encrypted)
throws GeneralSecurityException {
if (key.length != 16) {
throw new IllegalArgumentException("Invalid key size.");
}
SecretKeySpec skeySpec = new SecretKeySpec(key, "AES");
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
cipher.init(Cipher.DECRYPT_MODE, skeySpec, new IvParameterSpec(
new byte[16]));
byte[] original = cipher.doFinal(Base64.decodeBase64(encrypted
.getBytes()));
return new String(original);
}
当我运行PHP代码时,我得到下面的2个细节,我复制到我的java代码。
When I run the PHP code I get below 2 details which I copied to my java code.
public static final String KEY = "œ8[,#BÌüïmÕe-<Æ 1^Ž—½R™t3§¡ÚI";
public static final String ENCRYPTED_DATA = "ASfLnSMyfp9vHN2UTO4TRilUIRywzVfJfrfkrp4gPsP0+lENwEHJ3/YzstfuIESgVFfpkxHGTxuiO+aWZObG5aPoZfrcoIDQLVXeRiysA4s=";
问题是我的密钥已经在字节(当在localhost上运行时),但在我的java代码中再次尝试将其转换为字节。我想知道如何初始化字节数组,因为我现在有从localhost的密钥。
The issue is my key already in byte (When run on localhost), but in my java code its again trying to convert it into byte. I would like to know How can I initialize byte array as I have the key with me from localhost as of now.
推荐答案
您的代码有一些问题。
- 您的Java中的键长度只有31个字符,而不是32.字节不能始终表示为字符串,因为有时候是非公开的字符。您可以使用
bin2hex()
或以$ code> base64_encode()作为base64打印您的密钥,并将其转换为Java如此(十六进制)或$ code Base64.decodeBase64()。 - 使用与PHP相同的操作和填充模式。这是使用
AES / CBC / NoPadding
。由于PHP使用ZeroPadding,所以您需要在解密之后删除结尾处的零字节。 - 在PHP中,IV是加密密码,但是不会将IV关闭在Java中。另外,您提供零字节IV。
- Your key in Java is only 31 characters long and not 32. Bytes cannot be always represented as a string, because there are sometimes non-prinable characters. You can print your key as hex with
bin2hex()
or as base64 withbase64_encode()
and reverse the process in Java like this (hex) or withBase64.decodeBase64()
. - Use the same mode of operation and padding like in PHP. That is use
"AES/CBC/NoPadding"
. Since PHP uses ZeroPadding, you will then need to remove the zero bytes at the end after decryption. - The IV is prepended to the ciphertext in PHP, but you don't slice the IV off in Java. Also, you provide a zero byte IV.
public static String decryptWithIV(byte[] key, String encrypted)
throws GeneralSecurityException {
if (key.length != 16) {
throw new IllegalArgumentException("Invalid key size.");
}
byte[] ciphertextBytes = Base64.decodeBase64(encrypted.getBytes());
IvParameterSpec iv = new IvParameterSpec(ciphertextBytes, 0, 16);
ciphertextBytes = Arrays.copyOfRange(ciphertextBytes, 16,
ciphertextBytes.length);
SecretKeySpec skeySpec = new SecretKeySpec(key, "AES");
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
cipher.init(Cipher.DECRYPT_MODE, skeySpec, iv);
byte[] original = cipher.doFinal(ciphertextBytes);
// remove zero bytes at the end
int lastLength = original.length;
for (int i = original.length - 1; i > original.length - 16; i--) {
if (original[i] == (byte) 0) {
lastLength--;
} else {
break;
}
}
return new String(original, 0, lastLength);
}
这篇关于在java中解密字符串,它使用php中的AES进行加密的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!
查看全文