MbedTLS AES 128在Java中加密和解密

huangapple
go评论144阅读模式
英文:

MbedTLS AES 128 encrypt and decrypt in Java

问题

mbedTLS代码段：

  1. unsigned char key[17] = "asdfghjklqwertzu";
  2. unsigned char iv[17] = "qwertzuiopasdfgh";
  3. unsigned char output[1024];
  4. size_t olen;
  5. size_t total_len = 0;
  7. mbedtls_cipher_context_t ctx;
  8. mbedtls_cipher_init(&ctx);
  9. mbedtls_cipher_set_padding_mode(&ctx, MBEDTLS_PADDING_PKCS7);
  10. mbedtls_cipher_setup(&ctx,
  11.                     mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  12.                                                     MBEDTLS_MODE_CBC));
  13. mbedtls_cipher_setkey(&ctx, key, 128, MBEDTLS_ENCRYPT);
  14. mbedtls_cipher_set_iv(&ctx, iv, 16);
  15. mbedtls_cipher_reset(&ctx);
  17. char aa[] = "hello world! test long padd";
  18. for (int offset = 0; offset < strlen(aa); offset += mbedtls_cipher_get_block_size(&ctx)) {
  19.     int ilen = ((unsigned int)strlen(aa) - offset > mbedtls_cipher_get_block_size(&ctx)) ?
  20.                 mbedtls_cipher_get_block_size(&ctx) : (unsigned int)(strlen(aa) - offset);
  22.     char sub[100];
  24.     strncpy(sub, aa + offset, ilen);
  25.     unsigned char *sub2 = reinterpret_cast<unsigned char *>(sub);
  26.     mbedtls_cipher_update(&ctx, sub2, ilen, output, &olen);
  27.     total_len += olen;
  28. }
  29. // 循环结束后
  30. mbedtls_cipher_finish(&ctx, output, &olen);
  31. total_len += olen;
  32. mbedtls_cipher_free(&ctx);

Java代码：

  1. try {
  2.     IvParameterSpec ivParameterSpec = new IvParameterSpec(iv.getBytes());
  3.     SecretKeySpec skey = new SecretKeySpec(encryptionKey.getBytes(), "AES");
  4.     Cipher cipherDecrypt = Cipher.getInstance("AES/CBC/PKCS7Padding");
  5.     cipherDecrypt.init(Cipher.DECRYPT_MODE, skey, ivParameterSpec);
  6.     return Optional.ofNullable(ByteString.copyFrom(cipherDecrypt.doFinal(message.toByteArray())));
  7. } catch (BadPaddingException | IllegalBlockSizeException | InvalidAlgorithmParameterException | InvalidKeyException | NoSuchAlgorithmException | NoSuchPaddingException e) {
  8.     log.error("Error during message decryption: ", e);
  9. }

Java抛出javax.crypto.BadPaddingException: pad block corrupted错误。

// 编辑：

尝试使用一次更新的方法仍然没有成功，仍然出现相同的异常：

  1. unsigned char key[17] = "asdfghjklqwertzu";
  2. unsigned char iv[17] = "qwertzuiopasdfgh";
  3. unsigned char output[1024];
  4. size_t olen;
  6. unsigned char text[] = "abc abc abc abc abc abc abc abc abc abc abc abc abc abc abc";
  8. mbedtls_cipher_context_t ctx;
  9. mbedtls_cipher_init(&ctx);
  10. mbedtls_cipher_set_padding_mode(&ctx, MBEDTLS_PADDING_PKCS7);
  11. mbedtls_cipher_setup(&ctx,
  12.                     mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  13.                                                     MBEDTLS_MODE_CBC));
  14. mbedtls_cipher_setkey(&ctx, key, 128, MBEDTLS_ENCRYPT);
  15. mbedtls_cipher_set_iv(&ctx, iv, 16);
  16. mbedtls_cipher_reset(&ctx);
  17. mbedtls_cipher_update(&ctx, text, strlen((char*) text), output, &olen); // Olen is 48
  18. mbedtls_cipher_finish(&ctx, output, &olen); // Olen is 16
  19. mbedtls_cipher_free(&ctx);
  21. // 48 + 16 = 64，根据https://www.devglan.com/online-tools/aes-encryption-decryption 的信息是正确的
  23. Java得到了64字节的数据，但仍然抛出相同的异常。
  25. Topaco，请你能提供一下update和finish函数的简短用法示例吗？谢谢。
  27. <details>
  28. <summary>英文:</summary>
  30. I am trying to encrypt some text on microprocessor running FreeRTOS with mbedTLS. I am using AES 128 CBC with PKCS7 padding. If I try to encrypt in mbedTLS and decrypt in Java when text is shorter than 16 characters it works. I can decrypt it in Java and the text matches. If it is longer then it no longer works. What am I doing wrong?
  32. mbedTLS code:
  34.     unsigned char key[17] = &quot;asdfghjklqwertzu&quot;;
  35.     unsigned char iv[17] = &quot;qwertzuiopasdfgh&quot;;
  36.     unsigned char output[1024];
  37.     size_t olen;
  38.     size_t total_len = 0;
  39.     
  40.     mbedtls_cipher_context_t ctx;
  41.     mbedtls_cipher_init(&amp;ctx);
  42.     mbedtls_cipher_set_padding_mode(&amp;ctx, MBEDTLS_PADDING_PKCS7);
  43.     mbedtls_cipher_setup(&amp;ctx,
  44.     		mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  45.     				MBEDTLS_MODE_CBC));
  46.     mbedtls_cipher_setkey(&amp;ctx, key, 128, MBEDTLS_ENCRYPT);
  47.     mbedtls_cipher_set_iv(&amp;ctx, iv, 16);
  48.     mbedtls_cipher_reset(&amp;ctx);
  49.     
  50.     char aa[] = &quot;hello world! test long padd&quot;;
  51.     for( int offset = 0; offset &lt; strlen(aa); offset += mbedtls_cipher_get_block_size( &amp;ctx ) ) {
  52.     	int ilen = ( (unsigned int) strlen(aa) - offset &gt; mbedtls_cipher_get_block_size( &amp;ctx ) ) ?
  53.     			mbedtls_cipher_get_block_size( &amp;ctx ) : (unsigned int) ( strlen(aa) - offset );
  55.     	  char sub[100];
  56.     
  57.     	  strncpy ( sub, aa+offset, ilen );
  58.     	  unsigned char* sub2 = reinterpret_cast&lt;unsigned char *&gt;(sub);
  59.     	  mbedtls_cipher_update(&amp;ctx, sub2, ilen, output, &amp;olen);
  60.     	  total_len += olen;
  61.     }
  62.     // After the loop
  63.     mbedtls_cipher_finish(&amp;ctx, output, &amp;olen);
  64.     total_len += olen;
  65.     mbedtls_cipher_free(&amp;ctx);
  68. Java code:
  70.     		try {
  71.     	        IvParameterSpec ivParameterSpec = new IvParameterSpec(iv.getBytes());
  72.     			SecretKeySpec skey = new SecretKeySpec(encryptionKey.getBytes(), &quot;AES&quot;);
  73.     	        Cipher cipherDecrypt = Cipher.getInstance(&quot;AES/CBC/PKCS7Padding&quot;);
  74.     	        cipherDecrypt.init(Cipher.DECRYPT_MODE, skey, ivParameterSpec);
  75.     	        return Optional.ofNullable(ByteString.copyFrom(cipherDecrypt.doFinal(message.toByteArray())));
  76.     		} catch (BadPaddingException | IllegalBlockSizeException | InvalidAlgorithmParameterException | InvalidKeyException | NoSuchAlgorithmException | NoSuchPaddingException e) {
  77.     			log.error(&quot;Error during message decryption: &quot;, e);
  78.     		}
  80. Java throws javax.crypto.BadPaddingException: pad block corrupted
  82. Thanks
  84. // EDIT:
  86. Tried with one update approach and still no luck, the same exception:
  88. 	unsigned char key[17] = &quot;asdfghjklqwertzu&quot;;
  89. 	unsigned char iv[17] = &quot;qwertzuiopasdfgh&quot;;
  90. 	//unsigned char buffer[1024];
  91. 	unsigned char output[1024];
  92. 	size_t olen;
  94. 	unsigned char text[] = &quot;abc abc abc abc abc abc abc abc abc abc abc abc abc abc abc&quot;;
  96. 	mbedtls_cipher_context_t ctx;
  97. 	mbedtls_cipher_init(&amp;ctx);
  98. 	mbedtls_cipher_set_padding_mode(&amp;ctx, MBEDTLS_PADDING_PKCS7);
  99. 	mbedtls_cipher_setup(&amp;ctx,
  100. 			mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  101. 					MBEDTLS_MODE_CBC));
  102. 	mbedtls_cipher_setkey(&amp;ctx, key, 128, MBEDTLS_ENCRYPT);
  103. 	mbedtls_cipher_set_iv(&amp;ctx, iv, 16);
  104. 	mbedtls_cipher_reset(&amp;ctx);
  105. 	mbedtls_cipher_update(&amp;ctx, text, strlen((char*) text), output, &amp;olen); // Olen is 48
  106. 	mbedtls_cipher_finish(&amp;ctx, output, &amp;olen); // Olen is 16
  107. 	mbedtls_cipher_free(&amp;ctx);
  109. 	// 48 + 16 = 64 which is according to https://www.devglan.com/online-tools/aes-encryption-decryption correct
  111. Java gets a 64 bytes of data but still throws the same exception.
  113. Topaco please can you provide short example of usage of update and finish functions? Thank you
  115. </details>
  118. # 答案1
  119. **得分**: 1
  121. Here is the translated content:
  123. 自从在评论中写明仍然不起作用以来，这里是按照@Topaco在评论中建议的更改的代码：
  125. ```c
  126. #include <stdio.h>
  127. #include <string.h>
  128. #include <mbedtls/cipher.h>
  130. int main() {
  131.     unsigned char key[17] = "asdfghjklqwertzu";
  132.     unsigned char iv[17] = "qwertzuiopasdfgh";
  133.     unsigned char output[1024];
  134.     size_t olen;
  135.     size_t total_len = 0;
  137.     mbedtls_cipher_context_t ctx;
  138.     mbedtls_cipher_init(&ctx);
  139.     mbedtls_cipher_set_padding_mode(&ctx, MBEDTLS_PADDING_PKCS7);
  140.     mbedtls_cipher_setup(&ctx,
  141.                          mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  142.                                                          MBEDTLS_MODE_CBC));
  143.     mbedtls_cipher_setkey(&ctx, key, 128, MBEDTLS_ENCRYPT);
  144.     mbedtls_cipher_set_iv(&ctx, iv, 16);
  145.     mbedtls_cipher_reset(&ctx);
  147.     char aa[] = "hello world! test long padd";
  148.     for (int offset = 0; offset < strlen(aa); offset += mbedtls_cipher_get_block_size(&ctx)) {
  149.         int ilen = ((unsigned int) strlen(aa) - offset > mbedtls_cipher_get_block_size(&ctx)) ?
  150.                    mbedtls_cipher_get_block_size(&ctx) : (unsigned int) (strlen(aa) - offset);
  152.         char sub[100];
  154.         strncpy(sub, aa + offset, ilen);
  155.         unsigned char *sub2 = (unsigned char *)(sub);
  156.         mbedtls_cipher_update(&ctx, sub2, ilen, output + total_len, &olen);
  157.         total_len += olen;
  158.     }
  159.     mbedtls_cipher_finish(&ctx, output + total_len, &olen);
  160.     total_len += olen;
  161.     for (int i = 0; i < total_len; i++)
  162.         printf("%02X", output[i]);
  163.     mbedtls_cipher_free(&ctx);
  164.     return 0;
  165. }

测试

我添加了两行额外的代码：

  1. for (int i = 0; i < total_len; i++)
  2.     printf("%02X", output[i]);

这将产生以下输出：

  1. 2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0

如果我稍微修改Java端并传递消息：

  1. byte[] message = hexStringToByteArray("2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0");

其中hexStringToByteArray 是从这个答案中获取的：https://stackoverflow.com/a/140861/2331445

我在Java端得到以下代码：

  1. public Optional<ByteString> test() {
  2.     String encryptionKey = "asdfghjklqwertzu";
  3.     String iv = "qwertzuiopasdfgh";
  4.     byte[] message = hexStringToByteArray("2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0");
  5.     Security.addProvider(new BouncyCastleProvider());
  7.     try {
  8.         IvParameterSpec ivParameterSpec = new IvParameterSpec(iv.getBytes());
  9.         SecretKeySpec skey = new SecretKeySpec(encryptionKey.getBytes(), "AES");
  10.         Cipher cipherDecrypt = Cipher.getInstance("AES/CBC/PKCS7Padding");
  11.         cipherDecrypt.init(Cipher.DECRYPT_MODE, skey, ivParameterSpec);
  12.         return Optional.ofNullable(ByteString.copyFrom(cipherDecrypt.doFinal(message)));
  13.     } catch (BadPaddingException | IllegalBlockSizeException | InvalidAlgorithmParameterException | InvalidKeyException | NoSuchAlgorithmException | NoSuchPaddingException e) {
  14.         System.out.println("Error during message decryption: " + e);
  15.     }
  16.     return null;
  17. }

最终在调试控制台上得到以下输出：

  1. Optional[<ByteString@1e127982 size=27 contents="hello world! test long padd">]

这就是原始消息 - 这样它就能工作了。

英文:

Since it was written in comments that it still doesn't work. Here your code with the changes suggested by @Topaco in the comments:

  1. #include &lt;stdio.h&gt;
  2. #include &lt;string.h&gt;
  3. #include &lt;mbedtls/cipher.h&gt;
  4. int main() {
  5. unsigned char key[17] = &quot;asdfghjklqwertzu&quot;;
  6. unsigned char iv[17] = &quot;qwertzuiopasdfgh&quot;;
  7. unsigned char output[1024];
  8. size_t olen;
  9. size_t total_len = 0;
  10. mbedtls_cipher_context_t ctx;
  11. mbedtls_cipher_init(&amp;ctx);
  12. mbedtls_cipher_set_padding_mode(&amp;ctx, MBEDTLS_PADDING_PKCS7);
  13. mbedtls_cipher_setup(&amp;ctx,
  14. mbedtls_cipher_info_from_values(MBEDTLS_CIPHER_ID_AES, 128,
  15. MBEDTLS_MODE_CBC));
  16. mbedtls_cipher_setkey(&amp;ctx, key, 128, MBEDTLS_ENCRYPT);
  17. mbedtls_cipher_set_iv(&amp;ctx, iv, 16);
  18. mbedtls_cipher_reset(&amp;ctx);
  19. char aa[] = &quot;hello world! test long padd&quot;;
  20. for (int offset = 0; offset &lt; strlen(aa); offset += mbedtls_cipher_get_block_size(&amp;ctx)) {
  21. int ilen = ((unsigned int) strlen(aa) - offset &gt; mbedtls_cipher_get_block_size(&amp;ctx)) ?
  22. mbedtls_cipher_get_block_size(&amp;ctx) : (unsigned int) (strlen(aa) - offset);
  23. char sub[100];
  24. strncpy (sub, aa + offset, ilen);
  25. unsigned char *sub2 = (unsigned char *) (sub);
  26. mbedtls_cipher_update(&amp;ctx, sub2, ilen, output + total_len, &amp;olen);
  27. total_len += olen;
  28. }
  29. mbedtls_cipher_finish(&amp;ctx, output + total_len, &amp;olen);
  30. total_len += olen;
  31. for (int i = 0; i &lt; total_len; i++)
  32. printf(&quot;%02X&quot;, output[i]);
  33. mbedtls_cipher_free(&amp;ctx);
  34. return 0;
  35. }

Test

I added two additional lines:

  1. for (int i = 0; i &lt; total_len; i++)
  2. printf(&quot;%02X&quot;, output[i]);

This gives the output:

  1. 2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0

If I modify Java side a bit and transfer message with:

  1. byte[] message = hexStringToByteArray(&quot;2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0&quot;);

where hexStringToByteArray is taken from this answer: https://stackoverflow.com/a/140861/2331445

I get on Java side the following code:

  1. public Optional&lt;ByteString&gt; test() {
  2. String encryptionKey = &quot;asdfghjklqwertzu&quot;;
  3. String iv = &quot;qwertzuiopasdfgh&quot;;
  4. byte[] message = hexStringToByteArray(&quot;2FE64A72125E30B15C376FD2142D36FA778142DC4FD4A1F36EECDBCDA19BFAA0&quot;);
  5. Security.addProvider(new BouncyCastleProvider());
  6. try {
  7. IvParameterSpec ivParameterSpec = new IvParameterSpec(iv.getBytes());
  8. SecretKeySpec skey = new SecretKeySpec(encryptionKey.getBytes(), &quot;AES&quot;);
  9. Cipher cipherDecrypt = Cipher.getInstance(&quot;AES/CBC/PKCS7Padding&quot;);
  10. cipherDecrypt.init(Cipher.DECRYPT_MODE, skey, ivParameterSpec);
  11. return Optional.ofNullable(ByteString.copyFrom(cipherDecrypt.doFinal(message)));
  12. } catch (BadPaddingException | IllegalBlockSizeException | InvalidAlgorithmParameterException | InvalidKeyException | NoSuchAlgorithmException | NoSuchPaddingException e) {
  13. System.out.println(&quot;Error during message decryption: &quot; + e);
  14. }
  15. return null;
  16. }

which finally gives the following output onto the debug console:

  1. Optional[&lt;ByteString@1e127982 size=27 contents=&quot;hello world! test long padd&quot;&gt;]

That is the original message - so this way it works.

答案2

得分: 0

还有一个问题留在你的代码中。
在设置填充模式之前，您需要设置密码信息。否则，函数mbedtls_cipher_set_padding_mode将返回一个错误。

英文:

There is still one issue left in your code.
You will need to setup cipher info before setting padding mode. Otherwise function
mbedtls_cipher_set_padding_mode will return an error

huangapple
  • 本文由 发表于 2020年8月13日 23:00:48
  • 转载请务必保留本文链接：https://go.coder-hub.com/63397882.html
  • bouncycastle
  • c
  • cryptography
  • java
  • mbedtls
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定