正在寻找Java实现来解密使用openssl-aes-256-cbc-a-salt命令加密的消息？

Question

我正在寻找任何将解密使用“openssl enc-aes-256-cbc)-a-salt”命令加密的消息的示例java代码，前提是密钥已知。

Encrypt the message using the code >

Decrypt（“i+5zkppgnddv7fr/w8uhkw==”,“test$password”）=“示例文本”

Decrypt the message using openssl >

F:\cipher>echo i+5zkppgnddv7fr/w8uhkw==openssl AES-256-CBC-A-salt-d

坏幻数

import java.security.spec.KeySpec;
import java.util.Base64;
import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.SecretKeySpec;


public class AES {

    private static final byte[] SALT = {
        (byte) 0xA9, (byte) 0x9B, (byte) 0xC8, (byte) 0x32,
        (byte) 0x56, (byte) 0x35, (byte) 0xE3, (byte) 0x03
    };
    private static final int ITERATION_COUNT = 65536;
    private static final int KEY_LENGTH = 256;
    private Cipher ecipher;
    private Cipher dcipher;

    AES(String passPhrase) throws Exception {
        SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
        KeySpec spec = new PBEKeySpec(passPhrase.toCharArray(), SALT, ITERATION_COUNT, KEY_LENGTH);
        SecretKey tmp = factory.generateSecret(spec);
        SecretKey secret = new SecretKeySpec(tmp.getEncoded(), "AES");

        ecipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        ecipher.init(Cipher.ENCRYPT_MODE, secret);

        dcipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        byte[] iv = ecipher.getParameters().getParameterSpec(IvParameterSpec.class).getIV();
        dcipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv));
    }

    public String encrypt(String encrypt) throws Exception {
        byte[] bytes = encrypt.getBytes("UTF8");
        byte[] encrypted = encrypt(bytes);
        return Base64.getEncoder().encodeToString(encrypted);
    }

    public byte[] encrypt(byte[] plain) throws Exception {
        return ecipher.doFinal(plain);
    }

    public String decrypt(String encrypt) throws Exception {
        byte[] bytes = Base64.getDecoder().decode(encrypt);
        byte[] decrypted = decrypt(bytes);
        return new String(decrypted, "UTF8");
    }

    public byte[] decrypt(byte[] encrypt) throws Exception {
        return dcipher.doFinal(encrypt);
    }

    public static void main(String[] args) throws Exception {

        String message = "sample text";
        String password = "test$password";

        AES encrypter = new AES(password);
        String encrypted = encrypter.encrypt(message);        
        String decrypted = encrypter.decrypt(encrypted);

        System.out.println("Encrypt(\"" + message + "\", \"" + password + "\") = \"" + encrypted + "\"");
        System.out.println("Decrypt(\"" + encrypted + "\", \"" + password + "\") = \"" + decrypted + "\"");
    }
}

Answer 1

您可能会在stackoverflow中搜索许多类似的问题。

您的代码中有多个问题：

1. 您使用不同的密钥:

8字节盐是一个随机字节数组，用于根据提供的密码生成加密密钥和IV。使用-p参数尝试使用openssl加密，它将打印生成的salt、IV和密钥，以便您检查和比较

建议：

• 您可以找到一个openssl java库来实现相同的要求(EVP_BytesToKey)
• 您可以自己实现EVP_BytesToKey
• 您可以直接使用提供加密密钥和IV（十六进制格式）而不是密码的-k/-IV参数的openssl，那么openssl需要纯密文（输入中没有Salted_或salt)