使用 AES 和密码将 java 代码转换为 php

Question

我发现很难将一段代码从 java 转换为 php。我在 Internet 上搜索了我的 java 代码示例中编写的每一行代码的含义，但没有找到任何内容。我想了解每一行在此特定示例中的作用。

这是我试过的。

function my_aes_encrypt($key, $data) {
 if(16 !== strlen($key)) $key = hash('MD5', $key, true);
 $padding = 16 - (strlen($data) % 16);
     $data .= str_repeat(chr($padding), $padding);
     return base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, $data, MCRYPT_MODE_ECB, str_repeat("[=12=]", 16)));
 }
function my_aes_decrypt($str, $key){ 
     $str = base64_decode($str);
     $str = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, $str, MCRYPT_MODE_ECB);
     $block = mcrypt_get_block_size('rijndael_128', 'ecb');
     $pad = ord($str[($len = strlen($str)) - 1]);
     $len = strlen($str);
     $pad = ord($str[$len-1]);
     return substr($str, 0, strlen($str) - $pad);
}

从 Java 转换为 PHP

//provided key 
byte[] keyBinary = DatatypeConverter.parseBase64Binary("r/RloSflFkLj3Pq2gFmdBQ==");  
SecretKey secret = new SecretKeySpec(keyBinary, "AES");    

// encrypted string   
byte[] bytes = DatatypeConverter.parseBase64Binary("IKWpOq9rhTAz/K1ZR0znPA=="); 

// iv 
byte[] iv = DatatypeConverter.parseBase64Binary("yzXzUhr3OAt1A47g7zmYxw==");       
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding"); 
cipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv)); 
String msisdn = new String(cipher.doFinal(bytes), "UTF-8");

如果你们能告诉我Java中每一行的详细信息就太好了。

Answer 1

Java- 和 PHP- 代码的功能有很大不同。首先，Java-代码仅包含解密部分，而PHP-部分包含加密和解密部分。与 Java 代码相反，在 PHP-my_aes_decrypt 方法中使用了不安全的 ECB 模式 (https://crypto.stackexchange.com/questions/20941/why-shouldnt-i-use-ecb-encryption) seems to be used instead of the CBC-mode and thus, no IV is involved. Less important, but nonetheless different, the key doesn't seem to be base64-encoded because it's not decoded anywhere. In addition, in the PHP-code deprecated methods like mcrypt_encrypt (http://php.net/manual/de/function.mcrypt-encrypt.php) or cryptographic weak algorithms like MD5 (https://en.wikipedia.org/wiki/MD5)。

如果我没记错的话，Java 代码是参考代码，您需要 PHP-对应代码。因此，我专注于 Java-code 而完全忽略不同的和过时的 PHP-code。

在Java代码中，密钥、数据和IV，所有base64编码，被解码，然后使用这些解码数据解密加密数据。

一个可能的 PHP-解密对应物可能是：

<?php
$keyBinary = base64_decode('r/RloSflFkLj3Pq2gFmdBQ==');                                 // decode base64-encoded key in a string (internally, PHP strings are byte arrays)
$bytes = base64_decode('IKWpOq9rhTAz/K1ZR0znPA==');                                     // decode base64-encoded encrypted data in a string
$iv = base64_decode('yzXzUhr3OAt1A47g7zmYxw==');                                        // decode base64-encoded IV in a string   
$msisdn = openssl_decrypt($bytes, 'AES-128-CBC', $keyBinary, OPENSSL_RAW_DATA, $iv);    // decrypt data using AES-128, CBC-mode and PKCS7-Padding (default-padding)
                                                                                        // - when OPENSSL_RAW_DATA is specified raw data are returned, otherwise base64-encoded data (= default)
                                                                                        // - when OPENSSL_ZERO_PADDING is specified no padding is used, otherwise PKCS7-padding (= default)
                                                                                        // - The value XXX in AES-XXX-CBC is determined by the length of the key in Bit used in the Java-code,
                                                                                        //   e.g. for a 32 Byte (256 Bit)-key AES-256-CBC has to be used.  
print $msisdn."\n"; // Output: 1234567                                                  // print decrypted data

Java 代码所需的解释可以在评论中找到：

//provided key 
byte[] keyBinary = DatatypeConverter.parseBase64Binary("r/RloSflFkLj3Pq2gFmdBQ==");     // decode base64-encoded key in a byte-array
SecretKey secret = new SecretKeySpec(keyBinary, "AES");                                 // create AES-key from byte-array (currently 16 Byte = 128 Bit long) 

// encrypted string    
byte[] bytes = DatatypeConverter.parseBase64Binary("IKWpOq9rhTAz/K1ZR0znPA==");         // decode base64-encoded encrypted data in a byte-array

// iv
byte[] iv = DatatypeConverter.parseBase64Binary("yzXzUhr3OAt1A47g7zmYxw==");            // decode base64-encoded IV in a byte-array     
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");                             // create cipher-instance for using AES in CBC-mode with PKCS5-Padding (Java counterpart to PKCS7)
cipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv));                      // initialize cipher-instance for decryption with specified AES-key and IV (the latter created from corresponding byte-array) 
String msisdn = new String(cipher.doFinal(bytes), "UTF-8");                             // decrypt data using AES-128 (128 determined by length of used key in Bit), CBC-mode and PKCS5-Padding, 
                                                                                        // and put them in a UTF-8 string
System.out.println(msisdn); // Output: 1234567                                          // print decrypted data

PHP-加密部分可以是：

<?php
$keyBinary = base64_decode('r/RloSflFkLj3Pq2gFmdBQ==');                                 
$msisdn = '1234567';                                                                    // plain text
$iv = openssl_random_pseudo_bytes(16);                                                  // generate random IV
//$iv = base64_decode('yzXzUhr3OAt1A47g7zmYxw==');                                      // use this line for tests with your base64-encoded test-IV yzXzUhr3OAt1A47g7zmYxw==   
$bytes = openssl_encrypt($msisdn, 'AES-128-CBC', $keyBinary, OPENSSL_RAW_DATA, $iv);    // encrypt data using AES-128, CBC-mode and PKCS7-Padding (default-padding) 
$ivBase64 = base64_encode($iv);                                                         // base64-encode IV
$bytesBase64 = base64_encode($bytes);                                                   // base64-encode encrypted data
print $ivBase64."\n".$bytesBase64."\n";                                                 // print base64-encoded IV and encrypted data

使用 AES 和密码将 java 代码转换为 php

Coverting java code to php with AES and Cipher

java

php

encryption

aes

caesar-cipher