密码箱 3 AES 128 加密 PLSQL dbms_crypto 解密

Question

我在获取 Delphi 和 Oracle 之间返回的相同加密值时遇到问题，我们将不胜感激。可能是填充导致了差异，不幸的是我不确定。

密码箱 3 Delphi RAD Studio 东京 10.2

//uses uTPLb_Constants,uTPLb_BaseNonVisualComponent, uTPLb_Codec, uTPLb_CryptographicLibrary, IdHashMessageDigest, idHash
var cipher64, CipherText : string;
  plainText: utf8string;
  keyText: utf8string;
  FLibrary: TCryptographicLibrary;
  FCodec: TCodec;
  bytes, cipher: TBytes;
  workHash : TIdHashMessageDigest5;
  Result : String;
begin
 plainText := 'test-data';
 keyText := 'test_key';

 try
   workHash := TIdHashMessageDigest5.Create;
   Result   := workHash.HashStringAsHex(keyText);
 finally
   FreeAndNil(workHash);
 end;
  memoOutput.Lines.Add('plaintext = ' + plainText);
  memoOutput.Lines.Add('key hash = ' + Result);

  FLibrary := TCryptographicLibrary.Create(Self);
  try
    FCodec := TCodec.Create(Self);
    try
     FCodec.CryptoLibrary := FLibrary;
     FCodec.StreamCipherId := BlockCipher_ProgId;
     FCodec.BlockCipherId := Format(AES_ProgId, [128]);
     FCodec.ChainModeId := ECB_ProgId;
     FCodec.password := Result;
     FCodec.EncryptString( plainText, CipherText, Tencoding.UTF8 );
     FCodec.Burn;

   finally
     FCodec.Free;
   end;
 finally
   FLibrary.Free;
 end;

结果：

key hash = 8C32D1183251DF9828F929B935AE0419   MD5 Hash of text "test_key"
ciphertext = FJRXv9zMbypUmYnzzEHLnA==        Base64 Result from Lockbox

甲骨文 XE

    declare
      raw_key raw(200);
      encryption_type number;
      encrypted_result varchar2(4000);
      decrypted_result varchar2(4000);
    begin
      raw_key := DBMS_CRYPTO.Hash (UTL_I18N.STRING_TO_RAW ('test_key', 'AL32UTF8'), DBMS_CRYPTO.HASH_MD5);

      -- Initialize the encrypted result
      encryption_type:= DBMS_CRYPTO.ENCRYPT_AES128 + DBMS_CRYPTO.CHAIN_ECB + DBMS_CRYPTO.PAD_PKCS5;

      -- Then the data is being encrypted with AES:
      encrypted_result := DBMS_CRYPTO.ENCRYPT(UTL_I18N.STRING_TO_RAW('test-data', 'AL32UTF8'), encryption_type, raw_key);

      decrypted_result := DBMS_CRYPTO.DECRYPT(encrypted_result, encryption_type, raw_key); 


      dbms_output.put_line(raw_key);

      dbms_output.put_line(encrypted_result);
      dbms_output.put_line(UTL_RAW.CAST_TO_VARCHAR2 (decrypted_result));
      dbms_output.put_line(utl_raw.cast_to_varchar2(utl_encode.BASE64_ENCODE(encrypted_result)));

    end;

结果：

 Key Hash : 8C32D1183251DF9828F929B935AE0419
 Encrypt : 8FCA326C25C8908446D28884394F2E22   Hex value returned 
 Base 64 : j8oybCXIkIRG0oiEOU8uIg==

Answer 1

是的，Lockbox 正在使用密文窃取来填充。您的 Oracle 代码正在使用 PKCS5 填充。

密码箱 3 AES 128 加密 PLSQL dbms_crypto 解密

Lockbox 3 AES 128 Encrypt PLSQL dbms_crypto Decrypt

encryption

plsql

lockbox-3

dbms-crypto