使用Blowfish与Coldfusion和.NET/BouncyCastle加密和解密数据

Question

string keyString = "TEST";
BlowfishEngine engine = new BlowfishEngine();
PaddedBufferedBlockCipher cipher = new PaddedBufferedBlockCipher(engine);
cipher.Init(false, new KeyParameter(Convert.FromBase64String(keyString)));
byte[] out1 = Hex.Decode(hexstring);
byte[] out2 = new byte[cipher.GetOutputSize(out1.Length)];
int len2 = cipher.ProcessBytes(out1, 0, out1.Length, out2, 0);
cipher.DoFinal(out2, len2);
string myval = Encoding.UTF8.GetString(out2);

加密（不工作）：

string keyString = "TEST";
string stringToEncrypt = "0123456";
stringToEncrypt = stringToEncrypt + "=";
BlowfishEngine engine2 = new BlowfishEngine();
PaddedBufferedBlockCipher cipher2 = new PaddedBufferedBlockCipher(engine2);
cipher2.Init(true, new KeyParameter(Convert.FromBase64String(keyString)));
byte[] inB = Hex.Encode(Convert.FromBase64String(stringToEncrypt));
byte[] outB = new byte[cipher2.GetOutputSize(inB.Length)];
int len1 = cipher2.ProcessBytes(inB, 0, inB.Length, outB, 0);
cipher2.DoFinal(outB, len1);
var myval2 = BitConverter.ToString(outB).Replace("-", "");

“dost't work”的意思是-它返回一个加密的字符串，该字符串绝不是CF加密的字符串的镜像。最重要的是，当使用上述方法解密时，返回的字符串与最初输入的字符串不匹配（使用.NET/BouncyCastle加密）

Answer 1

C#代码将输入解码为base64，而实际上它只是纯文本。所以您加密的值是错误的。这就是为什么结果与来自CF的加密字符串不匹配的原因。由于CF始终使用UTF8，请使用以下内容：

byte[] inB = Encoding.UTF8.GetBytes(stringToEncrypt);

而不是：

byte[] inB = Hex.Encode(Convert.FromBase64String(stringToEncrypt));

其他安全提示：