.Net core 1.1 中没有 RijndaelManaged 的​​ AES256 加密

Question

我想在 .net core 1.1 中进行 AES256 加密。 RijndaelManaged 不支持 .net core 1.1。所以我在这里使用 AES aes = new AES.create()

这部分代码创建用于加密的随机私钥

public string GenaratePassPharse()
    {
        RandomNumberGenerator rngCryptoServiceProvider = RandomNumberGenerator.Create();
        byte[] randomBytes = new byte[KEY_SIZE];
        rngCryptoServiceProvider.GetBytes(randomBytes);
        string plainPassPharse = Convert.ToBase64String(randomBytes);

        return plainPassPharse;
    }

这里是 AES() 加密方法。我想要做的是传递我生成的密钥（即上述方法中的 return）而不是 aesAlg.Key 作为加密密钥。

 static byte[] EncryptStringToBytes_Aes(string plainText, byte[] Key, byte[] IV)
    {
        // Check arguments.
        if (plainText == null || plainText.Length <= 0)
            throw new ArgumentNullException("plainText");
        if (Key == null || Key.Length <= 0)
            throw new ArgumentNullException("Key");
        if (IV == null || IV.Length <= 0)
            throw new ArgumentNullException("IV");
        byte[] encrypted;

        // Create an Aes object
        // with the specified key and IV.
        using (Aes aesAlg = Aes.Create())
        {
            aesAlg.Key = Key;
            aesAlg.IV = IV;
            aesAlg.BlockSize = 128;
            aesAlg.KeySize = 128;



            // Create an encryptor to perform the stream transform.
            ICryptoTransform encryptor = aesAlg.CreateEncryptor(aesAlg.Key, aesAlg.IV);

            // Create the streams used for encryption.
            using (MemoryStream msEncrypt = new MemoryStream())
            {
                using (CryptoStream csEncrypt = new CryptoStream(msEncrypt, encryptor, CryptoStreamMode.Write))
                {
                    using (StreamWriter swEncrypt = new StreamWriter(csEncrypt))
                    {
                        //Write all data to the stream.
                        swEncrypt.Write(plainText);
                    }
                    encrypted = msEncrypt.ToArray();
                }
            }
        }


        // Return the encrypted bytes from the memory stream.
        return encrypted;

    }

还有其他使用 AES256 加密算法的方法吗？

Answer 1

完整代码应该是：

public static byte[] EncryptStringToBytes_Aes(string plainText, byte[] key, byte[] iv = null)
{
    // Check arguments.
    if (plainText == null)
    {
        throw new ArgumentNullException("plainText");
    }

    if (key == null || key.Length == 0)
    {
        throw new ArgumentNullException("Key");
    }

    // Create an Aes object
    // with the specified key and IV.
    using (Aes aes = Aes.Create())
    {
        aes.Key = key;

        if (iv == null)
        {
            iv = new byte[aes.BlockSize / 8];

            using (RandomNumberGenerator rngCryptoServiceProvider = RandomNumberGenerator.Create())
            {
                rngCryptoServiceProvider.GetBytes(iv);
            }
        }

        // Note that we are setting IV, Mode, Padding
        aes.IV = iv;
        aes.Mode = CipherMode.CBC;
        aes.Padding = PaddingMode.PKCS7;

        // Create an encryptor to perform the stream transform.
        using (ICryptoTransform encryptor = aes.CreateEncryptor())
        using (MemoryStream ms = new MemoryStream())
        using (CryptoStream cs = new CryptoStream(ms, encryptor, CryptoStreamMode.Write))
        {
            // Prepend the IV
            cs.Write(iv, 0, iv.Length);

            // Here we are setting the Encoding
            using (StreamWriter sw = new StreamWriter(cs, Encoding.UTF8))
            {
                // Write all data to the stream.
                sw.Write(plainText);
            }

            byte[] encrypted = ms.ToArray();
            return encrypted;
        }
    }
}

public static string DecryptBytesToString_Aes(byte[] encrypted, byte[] key)
{
    // Check arguments.
    if (encrypted == null || encrypted.Length == 0)
    {
        throw new ArgumentNullException("plainText");
    }

    if (key == null || key.Length == 0)
    {
        throw new ArgumentNullException("Key");
    }

    // Create an Aes object
    // with the specified key and IV.
    using (Aes aes = Aes.Create())
    {
        aes.Key = key;

        using (MemoryStream ms = new MemoryStream(encrypted))
        {
            // Read the prepended IV
            var iv = new byte[aes.BlockSize / 8];
            ms.Read(iv, 0, iv.Length);

            // Note that we are setting IV, Mode, Padding
            aes.IV = iv;
            aes.Mode = CipherMode.CBC;
            aes.Padding = PaddingMode.PKCS7;

            // Create an encryptor to perform the stream transform.
            using (ICryptoTransform decrytor = aes.CreateDecryptor())
            using (CryptoStream cs = new CryptoStream(ms, decrytor, CryptoStreamMode.Read))
            // Here we are setting the Encoding
            using (StreamReader sr = new StreamReader(cs, Encoding.UTF8))
            {
                // Read all data from the stream.
                string plainText = sr.ReadToEnd();
                return plainText;
            }
        }
    }
}

public static byte[] GenerateAesKey(int bits)
{
    using (RandomNumberGenerator rngCryptoServiceProvider = RandomNumberGenerator.Create())
    {
        byte[] key = new byte[bits / 8];
        rngCryptoServiceProvider.GetBytes(key);
        return key;
    }
}

public static void Main()
{
    var key = GenerateAesKey(256);
    var encrypted = EncryptStringToBytes_Aes("Hello", key);
    var decrypted = DecryptBytesToString_Aes(encrypted, key);
}

此代码将随机 IV 添加到加密流中，然后从加密流中恢复它以解密流。

非常重要的是，当您谈到加密时，您设置了所有可以设置的内容。不得有未解决的问题。加密Mode、Padding、Encoding明文必须加密。一切！