加密存储在我的数据库中的数据

Question

我目前使用 nodejs 作为我的后端，sequelize ORM 和 postgres 作为我的数据库。

当我的用户注册时，我正在尝试使用内置加密模块加密数据。

一切正常，但由于我正在生成自定义 IV，因此加密数据都采用相同的 IV，因为它在每次节点重新启动时都会呈现。如何为每个字段指定不同的 IV？

这是我第一次加密数据，有人可以告诉我我做的是否正确吗？

let key ="12345678123456781234567812345678";
let iv = crypto.randomBytes(16);

router.post(
 "/register",
 (req, res) => {
                                  
 let cipher1 = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);
 let cipher2 = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);
 let cipher3 = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);
 let cipher4 = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);
 let cipher5 = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);

 let mobilenumber = cipher1.update(req.body.mobilenumber);
 const encrypted_mobilenumber = Buffer.concat([mobilenumber, cipher1.final()]);

 let firstname = cipher2.update(req.body.firstname);
 const encrypted_firstname = Buffer.concat([firstname, cipher2.final()]);

 let lastname = cipher3.update(req.body.lastname);
 const encrypted_lastname = Buffer.concat([lastname, cipher3.final()]);

 let dob = cipher4.update(req.body.dob);
 const encrypted_dob = Buffer.concat([dob, cipher4.final()]);

 const fullAddress= req.body.housenumber + ', ' + req.body.address1 + 
                    (req.body.address2===''?'': ', ' + req.body.address2 ) + 
                   ', ' + req.body.city + ', ' + req.body.postcode + ', ' + req.body.country

 let address = cipher5.update(fullAddress);
 const encrypted_address = Buffer.concat([address, cipher5.final()]);
                                  
              User.create({
                            email: req.body.email,
                            mobilenumber:iv.toString('hex') + ':' + encrypted_mobilenumber.toString('hex'),
                            passcode: req.body.passcode,
                            firstname:iv.toString('hex') + ':' + encrypted_firstname.toString('hex'),
                            lastname:iv.toString('hex') + ':' + encrypted_lastname.toString('hex'),
                            dob:iv.toString('hex') + ':' + encrypted_dob.toString('hex'),
                            address:iv.toString('hex') + ':' + encrypted_address.toString('hex')
                          })

Answer 1

我认为我们可以通过引入一个新函数 encryptField() 来简化此代码，该函数将使用提供的密钥加密给定字段，并在返回前将 iv 添加到它前面。

我还建议创建一个 getFullAddress 函数来将地址组件转换为完整地址。

所有这些都应该显着减少代码长度和重复：

const key = "12345678123456781234567812345678";

function encryptField(data, key) {
    const iv = crypto.randomBytes(16);
    const cipher = crypto.createCipheriv('aes-256-cbc', Buffer.from(key), iv);
    return iv.toString('base64') + ':' + Buffer.concat([cipher.update(data),cipher.final()]).toString("base64");
}

function getFullAddress({housenumber, address1, address2, city, postcode, country}) {
    return [housenumber, address1, ...(address2 ? [address2]: []), city, postcode, country].join(", ");
}

router.post(
    "/register",
    (req, res) => {
        User.create({
            email: encryptField(req.body.email, key),
            mobilenumber: encryptField(req.body.mobilenumber, key),
            passcode: req.body.passcode,
            firstname: encryptField(req.body.firstname, key),
            lastname: encryptField(req.body.lastname, key),
            dob: encryptField(req.body.dob, key),
            address: encryptField(getFullAddress(req.body), key)
        })
    }
)

加密存储在我的数据库中的数据

encrypting the data being stored in my database

encryption

node.js

cryptojs