AES CBC算法/填充在Java/Angular中

huangapple
go评论109阅读模式
英文:

AES CBC algorithm/padding in java/angular

问题

我已经在Angular中编写了这段代码以对字符串进行加密：

  1. import { Injectable } from '@angular/core';
  2. import * as CryptoJS from 'crypto-js';
  4. @Injectable({
  5.     providedIn: 'root',
  6. })
  7. export class CryptoService {
  9.   encrypt(message: string, clef: string): string {
  11.     const salt = CryptoJS.SHA256("123456789123");
  13.     const key = CryptoJS.PBKDF2(clef, salt, {
  14.       keySize: 128 / 32,
  15.       iterations: 1000
  16.     });
  18.     let iv = CryptoJS.enc.Utf8.parse(clef);
  19.     let encrypted = CryptoJS.AES.encrypt(CryptoJS.enc.Utf8.parse(message.toString()), key,
  20.     {
  21.         keySize: 128 / 8,
  22.         iv: iv,
  23.         mode: CryptoJS.mode.CBC,
  24.         padding: CryptoJS.pad.Pkcs7
  25.     });
  27.     return encrypted.toString();
  28.   }
  30.   generateKey(): string {
  31.       let result = '';
  32.       const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
  33.       const charactersLength = characters.length;
  34.       let counter = 0;
  35.       while (counter < 16) {
  36.         result += characters.charAt(Math.floor(Math.random() * charactersLength));
  37.         counter += 1;
  38.       }
  39.       return result;
  40.   }
  41. }

我将密钥和加密后的消息传递到后端进行解密。

在Java中，我编写了以下代码：

  1. import java.security.InvalidAlgorithmParameterException;
  2. import java.security.InvalidKeyException;
  3. import java.security.NoSuchAlgorithmException;
  4. import java.security.spec.InvalidKeySpecException;
  5. import java.security.spec.KeySpec;
  6. import java.util.Base64;
  8. import javax.crypto.BadPaddingException;
  9. import javax.crypto.Cipher;
  10. import javax.crypto.IllegalBlockSizeException;
  11. import javax.crypto.NoSuchPaddingException;
  12. import javax.crypto.SecretKey;
  13. import javax.crypto.SecretKeyFactory;
  14. import javax.crypto.spec.IvParameterSpec;
  15. import javax.crypto.spec.PBEKeySpec;
  17. public class AESUtilService {
  19.     protected static final String salt = "123456789123";
  21.     public SecretKey getKeyFromPassword(String password)
  22.         throws NoSuchAlgorithmException, InvalidKeySpecException {
  23.         
  24.         SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256");
  25.         KeySpec spec = new PBEKeySpec(password.toCharArray(), salt.getBytes(), 1000, 128/32);
  26.         SecretKey secret = factory.generateSecret(spec);
  27.         return secret;
  28.     }
  30.     public String decrypt(String cipherText, SecretKey key)
  31.         throws NoSuchPaddingException, NoSuchAlgorithmException,
  32.         InvalidAlgorithmParameterException, InvalidKeyException,
  33.         BadPaddingException, IllegalBlockSizeException {
  34.             
  35.         String algorithm = "AES/CBC/PKCS7Padding";
  36.         IvParameterSpec iv = new IvParameterSpec("MnTQLHcWumIKTXpQ".getBytes());
  37.         
  38.         Cipher cipher = Cipher.getInstance(algorithm);
  39.         cipher.init(Cipher.DECRYPT_MODE, key, iv);
  40.         byte[] plainText = cipher.doFinal(Base64.getDecoder().decode(cipherText));
  41.         return new String(plainText);
  42.     }
  43. }

我的问题如下：
在Java中，如果我使用 String algorithm = "AES/CBC/PKCS7Padding"; 这一行代码会导致程序崩溃。但是如果我使用 String algorithm = "AES/CBC/PKCS5Padding"; 则会通过，但这时在Angular中会崩溃。 padding: CryptoJS.pad.Pkcs5

我找不到这个问题的解决方案，所以我请求您的帮助。

英文:

I have written this code in Angular to encrypt a string:

  1. import { Injectable } from &#39;@angular/core&#39;;
  2. import * as CryptoJS from &#39;crypto-js&#39;;
  4. @Injectable({
  5.     providedIn: &#39;root&#39;,
  6.   })
  7. export class CryptoService {
  8.   
  9.   encrypt(message: string, clef: string): string {
  11.     const salt = CryptoJS.SHA256(&quot;123456789123&quot;);
  13.     const key = CryptoJS.PBKDF2(clef, salt, {
  14.       keySize: 128 / 32,
  15.       iterations: 1000
  16.   });
  18.     // var key = CryptoJS.enc.Utf8.parse(clef);
  19.     let iv = CryptoJS.enc.Utf8.parse(clef);
  20.     let encrypted = CryptoJS.AES.encrypt(CryptoJS.enc.Utf8.parse(message.toString()), key,
  21.     {
  22.         keySize: 128 / 8,
  23.         iv: iv,
  24.         mode: CryptoJS.mode.CBC,
  25.         padding: CryptoJS.pad.Pkcs7
  26.     });
  29.     // var encryptedMessage = CryptoJS.AES.encrypt(message.trim(), key).toString();
  31.     return encrypted.toString();
  32.   }
  34.   generateKey(): string {
  35.       let result = &#39;&#39;;
  36.       const characters = &#39;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789&#39;;
  37.       const charactersLength = characters.length;
  38.       let counter = 0;
  39.       while (counter &lt; 16) {
  40.       result += characters.charAt(Math.floor(Math.random() * charactersLength));
  41.       counter += 1;
  42.       }
  43.       return result;
  44.   }
  45. }

I transfer my key and encriptedMessage to the back for the decryption.

I code dat on java:

  1. import java.security.InvalidAlgorithmParameterException;
  2. import java.security.InvalidKeyException;
  3. import java.security.NoSuchAlgorithmException;
  4. import java.security.spec.InvalidKeySpecException;
  5. import java.security.spec.KeySpec;
  6. import java.util.Base64;
  8. import javax.crypto.BadPaddingException;
  9. import javax.crypto.Cipher;
  10. import javax.crypto.IllegalBlockSizeException;
  11. import javax.crypto.NoSuchPaddingException;
  12. import javax.crypto.SecretKey;
  13. import javax.crypto.SecretKeyFactory;
  14. import javax.crypto.spec.IvParameterSpec;
  15. import javax.crypto.spec.PBEKeySpec;
  17. public class AESUtilService {
  18. 	
  19. 	protected static final String salt = &quot;123456789123&quot;;
  20. 	
  21. 	public SecretKey getKeyFromPassword(String password)
  22. 		throws NoSuchAlgorithmException, InvalidKeySpecException {
  23. 	    
  24. 	    SecretKeyFactory factory = SecretKeyFactory.getInstance(&quot;PBKDF2WithHmacSHA256&quot;);
  25. 	    KeySpec spec = new PBEKeySpec(password.toCharArray(), salt.getBytes(), 1000, 128/32);
  26. 	    SecretKey secret = factory.generateSecret(spec);
  27. 	    return secret;
  28. 	}
  29.     public String decrypt(String cipherText, SecretKey key)
  30. 		throws NoSuchPaddingException, NoSuchAlgorithmException,
  31. 		InvalidAlgorithmParameterException, InvalidKeyException,
  32. 		BadPaddingException, IllegalBlockSizeException {
  33. 		    
  34. 		String algorithm = &quot;AES/CBC/PKCS7Padding&quot;;
  35. 		IvParameterSpec iv = new IvParameterSpec(&quot;MnTQLHcWumIKTXpQ&quot;.getBytes());
  36. 		
  37. 		Cipher cipher = Cipher.getInstance(algorithm);
  38. 		cipher.init(Cipher.DECRYPT_MODE, key, iv);
  39. 		byte[] plainText = cipher.doFinal(Base64.getDecoder().decode(cipherText));
  40. 		return new String(plainText);
  41. 	}
  42. 	
  43. }

My issue is the following.
The part of the code Cipher cipher = Cipher.getInstance(algorithm); crashes in java, if I use String algorithm = &quot;AES/CBC/PKCS7Padding&quot;;
However it would pass with String algorithm = &quot;AES/CBC/PKCS5Padding&quot;;, but this time it's angular that would crash. padding: CryptoJS.pad.Pkcs5

I can't find a solution for this problem, and that's why I ask for your help.

答案1

得分: 1

  1. 根据您的代码，似乎存在与PBEKeySpec和密钥长度规范有关的问题。
  2. **JAVA**：您必须使用"AES/CBC/PKCS5Padding"而不是"AES/CBC/PKCS7Padding"
  3. **Angular**：在密钥长度和PBEKeySpec上进行更改
  4.   let encrypted = CryptoJS.AES.encrypt(CryptoJS.enc.Utf8.parse("hasan test"), key,
  5.   {
  6.       keySize: 16,
  7.       iv: iv,
  8.       mode: CryptoJS.mode.CBC,
  9.       padding: CryptoJS.pad.Pkcs7
  10.   }).toString();
英文:

As per your code seems like, There is a issue with your PBEKeySpec and key length specification.
JAVA: you must need to use "AES/CBC/PKCS5Padding" instead of "AES/CBC/PKCS7Padding"
Angular: Make changes on key length and PBEKeySpec
let encrypted = CryptoJS.AES.encrypt(CryptoJS.enc.Utf8.parse("hasan test"), key,
{
keySize: 16,
iv: iv,
mode: CryptoJS.mode.CBC,
padding: CryptoJS.pad.Pkcs7
}).toString();

答案2

得分: 0

我终于找到一篇帖子说 Java 中的 PKCS5 与 Angular 中的 PKCS7 是相同的 --> 填充（128）。
来源：https://crypto.stackexchange.com/questions/9043/what-is-the-difference-between-pkcs5-padding-and-pkcs7-padding

英文:

I finaly find a post who sayd they pkcs5 in java are the same as pkcs7 in angular
-->padding (128)

source:
https://crypto.stackexchange.com/questions/9043/what-is-the-difference-between-pkcs5-padding-and-pkcs7-padding

huangapple
  • 本文由 发表于 2023年2月10日 16:56:28
  • 转载请务必保留本文链接：https://go.coder-hub.com/75408841.html
  • aes
  • algorithm
  • angular
  • cbc-mode
  • java
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定