在c#和PHP之间使用AES加密/解密数据-解密数据以255254开头

Question

我必须从一个用C#编写的外部现有webservice请求数据。此web服务要求加密一些数据(连接使用SSL连接，一些数据是aes加密的)

在php站点上，openssl用于解密。

c# 站点上使用以下设置（这是 AesCrypto 服务提供程序的默认值）：

< li >算法:AES < li >填充:PKCS7 < li >模式:CBC < li>Keysize: 256

PKCS7的填充工作如下：01如果缺少1个字节02如果缺少2个字节，依此类推

所以这个值不是由填充添加的。

我做错了什么？

我已经用c#、php和ruby检查过了——解密的数据以255、254开头

要再现，请使用以下参数:

数据：1234567890123456关键：第一个盐（四）：数据

using System;
using System.Security.Cryptography;
using System.Text;
using System.IO;

namespace crypto_test
{
    class MainClass
    {
        public static void Main(string[] args)
        {

                bool running = true;
                while (running)
                {
                    Console.WriteLine("Enter data:");
                    var data = Console.ReadLine();
                    Console.WriteLine("Enter key:");
                    var key = Console.ReadLine();
                    Console.WriteLine("Enter iv:");
                    var iv = Console.ReadLine();
                    Console.WriteLine("Enter d for decode");
                    var decode = (Console.ReadLine() == "d");

                    string encoded=Crypt(data, key, iv, decode);
                    Console.WriteLine(encoded);
                    if (!decode)
                    {
                        encoded=  Crypt(encoded, key, iv, true);
                        Console.WriteLine(encoded);
                    }

                    Console.WriteLine("quit to exit");
                    running = !(Console.ReadLine() == "quit");
                }

        }

        public static string Crypt(string value, string password, string salt, bool decrypt)
        {
            DeriveBytes rgb = new Rfc2898DeriveBytes(password, Encoding.Unicode.GetBytes(salt));
            SymmetricAlgorithm algorithm = new AesCryptoServiceProvider();
            byte[] rgbKey = rgb.GetBytes(algorithm.KeySize >> 3);
            byte[] rgbIV = rgb.GetBytes(algorithm.BlockSize >> 3);

            Console.WriteLine("rbKey: size:{0} key:{1}", (algorithm.KeySize >> 3), GetHex(rgbKey));
            Console.WriteLine("rgbIV: size:{0} key:{1}", (algorithm.BlockSize >> 3), GetHex(rgbIV));

            ICryptoTransform transform = decrypt ? algorithm.CreateDecryptor(rgbKey, rgbIV) : algorithm.CreateEncryptor(rgbKey, rgbIV);
            Console.WriteLine("Mode {0}", algorithm.Mode);
            Console.WriteLine("PAdding {0}", algorithm.Padding);

            using (MemoryStream buffer = new MemoryStream())
            {
                using (CryptoStream stream = new CryptoStream(buffer, transform, CryptoStreamMode.Write))
                {
                    try
                    {
                        if (decrypt)
                        {
                            byte[] data = Convert.FromBase64String(value);
                            stream.Write(data,0,data.Length);
                        }
                        else
                        {
                            using (StreamWriter writer = new StreamWriter(stream, Encoding.Unicode))
                            {
                                writer.Write(value);
                            }
                        }
                    }
                    catch (Exception e)
                    {
                        Console.WriteLine(e.ToString());
                    }
                }

                byte[] buff = buffer.ToArray();
                if (decrypt)
                {
                    return Encoding.Unicode.GetString(buff) + "\r\n" + GetHex(buff);
                }
                else
                    return Convert.ToBase64String(buff);
            }
        }

        public static string GetHex(byte[] data)
        {
            StringBuilder sb = new StringBuilder();
            for (int i = 0; i < data.Length; ++i)
                sb.Append(data[i].ToString("X2"));
            return sb.ToString();
        }
    }
}

到目前为止，我还没有找到Rfc2898DeriveBytes的等价物，所以我复制了key和iv

php公司

<?php

$salt='Data';
$pass='First1';
$data='1234567890123456';

$encrypted_base64='VKNd9Pi+cttaM6ne8pzAuFbH1U0gJiJ2Wlbbr1rU5z8vbIfAS6nb0/5py4p54aK7';
$encrypted=base64_decode($encrypted_base64);
$key = pack('H*', "30EE7F95F0EF4835F048A481424F2F52EE21B7CEB97F8CC437E5949DB53797D9");
$iv = pack('H*', "B29F5ECF7057065758102385509F0637");
$cipher='AES-256-CBC';
$decrypted = openssl_decrypt($encrypted,$cipher, $key,true,$iv);
for($i =0; $i<strlen($decrypted);++$i)
{
    echo "char:" . ord($decrypted[$i])."<br/>";
}
echo $decrypted
?>

红宝石:

require ('openssl')
require ('base64')

while true


enc_data='VKNd9Pi+cttaM6ne8pzAuFbH1U0gJiJ2Wlbbr1rU5z8vbIfAS6nb0/5py4p54aK7'

data = Base64.decode64(enc_data)

key_hex='30EE7F95F0EF4835F048A481424F2F52EE21B7CEB97F8CC437E5949DB53797D9'
iv_hex='B29F5ECF7057065758102385509F0637'


key = [key_hex].pack('H*')
iv = [iv_hex].pack('H*')

decipher = OpenSSL::Cipher::AES.new(256, :CBC)
decipher.decrypt
decipher.key = key
decipher.iv = iv
plain = decipher.update(data) + decipher.final

puts plain
puts plain.bytes

end

Answer 1

好消息，你的解密似乎工作正常。

你在解密的密文中看到的是UTF-16 LE的字节顺序标记，它被微软(错误地)表示为< code >编码。Unicode。你需要做两件事情中的任何一件:

< li >使用搜索UTF-16 LE(包括字节顺序标记)的解码器解码文本； < li >使用更合理的UTF-8编码(在C#代码中)进行编码。

就个人而言，我会强烈偏爱（2）。