AndroidAES解密文件：BadPaddingException:EVP\u CipherFinal\u ex

Question

我最近正在研究文件加密/解密。

当我尝试用相同的密钥解密文件时，总是会发生EVP_CipherFinal_ex。

代码片段将在下面发布。

我做错什么了吗？

谢谢你的帮助。

加密

public static void encryptFile() {
    File file = new File(Environment.getExternalStorageDirectory().getPath() + "/" + TARGET_FILE);

    FileInputStream fileInputStream;
    FileOutputStream fileOutputStream;

    byte[] buffer = new byte[1024 * 8];

    IvParameterSpec ivParameterSpec = new IvParameterSpec("1234567890123456".getBytes());

    byte[] key = "only for testing".getBytes();
    MessageDigest sha;
    try {
        sha = MessageDigest.getInstance("SHA-1");
        key = sha.digest(key);
    } catch (NoSuchAlgorithmException e) {
        e.printStackTrace();
    }
    key = Arrays.copyOf(key, 16); // use only first 128 bit

    SecretKeySpec secretKeySpec = new SecretKeySpec(key, "AES");

    try {
        fileInputStream = new FileInputStream(file);
        fileOutputStream = new FileOutputStream(Environment.getExternalStorageDirectory().getPath() + "/" + ENCRYPT_FILE);

        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.ENCRYPT_MODE, secretKeySpec, ivParameterSpec);

        //CipherOutputStream cipherOutputStream = new CipherOutputStream(fileOutputStream, cipher);

        int read;

        while ((read = fileInputStream.read(buffer)) > 0) {
            Log.i(TAG, "encrypt read= " + read);

            byte[] encryptedData = cipher.doFinal(buffer);
            if (encryptedData != null) {
                Log.i(TAG, "encrypted size= " + encryptedData.length);
                fileOutputStream.write(encryptedData, 0, read);
            }

            //cipherOutputStream.write(buffer, 0, buffer.length);
        }
        //cipherOutputStream.flush();
        //cipherOutputStream.close();
        fileInputStream.close();
        fileOutputStream.close();

    } catch (IOException | NoSuchAlgorithmException | NoSuchPaddingException
            | IllegalBlockSizeException | BadPaddingException
            | InvalidAlgorithmParameterException | InvalidKeyException e) {
        e.printStackTrace();
    }
}

解密

public static void decryptFile() {
    File file = new File(Environment.getExternalStorageDirectory().getPath() + "/" + ENCRYPT_FILE);

    FileInputStream fileInputStream;
    FileOutputStream fileOutputStream;

    byte[] buffer = new byte[1024 * 8];

    IvParameterSpec ivParameterSpec = new IvParameterSpec("1234567890123456".getBytes());

    byte[] key = "only for testing".getBytes();
    MessageDigest sha;
    try {
        sha = MessageDigest.getInstance("SHA-1");
        key = sha.digest(key);
    } catch (NoSuchAlgorithmException e) {
        e.printStackTrace();
    }
    key = Arrays.copyOf(key, 16); // use only first 128 bit

    SecretKeySpec secretKeySpec = new SecretKeySpec(key, "AES");

    try {
        fileInputStream = new FileInputStream(file);
        fileOutputStream = new FileOutputStream(Environment.getExternalStorageDirectory().getPath() + "/" + DECRYPT_FILE);

        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.DECRYPT_MODE, secretKeySpec, ivParameterSpec);

        //CipherInputStream cipherInputStream = new CipherInputStream(fileInputStream, cipher);

        int read;

        while ((read = fileInputStream.read(buffer)) > 0) {
            Log.i(TAG, "decrypt read= " + read);

            byte[] decryptedData = cipher.doFinal(buffer);
            if (decryptedData != null) {
                Log.i(TAG, "decrypted size= " + decryptedData.length);
                fileOutputStream.write(decryptedData, 0, read);
            }

            //fileOutputStream.write(buffer, 0, buffer.length);
        }
        fileOutputStream.flush();
        fileOutputStream.close();
        //cipherInputStream.close();
        fileInputStream.close();

    } catch (IOException | NoSuchAlgorithmException | NoSuchPaddingException
            | IllegalBlockSizeException | BadPaddingException
            | InvalidAlgorithmParameterException | InvalidKeyException e) {
        e.printStackTrace();
    }
}

顺便说一句：当我使用CipherInputStream/CipherOutStream时，它会正常工作。我想知道是否可以只使用FileInputStream/FileOutputStream？非常感谢。

编辑：加密功能将扩大字节数组约16字节，我已尝试增加解密的缓冲区大小，但仍然无法使其工作。

byte[] buffer = new byte[1024 * 8 + 16];

日志：

I/#_：解密读取=8208

javax。加密。BadPaddingException:执行副总裁

在com.Android组织。康斯克里特。NativeCrypto。执行副总裁（本地方法）

在com.android.org.conscrypt.OpenSSLCipher.doFinal内部（OpenSSLCipher.java:430）

com.android.org.conscrypt.OpenSSLCipher.engineDoLast（OpenSSLCipher.java:466）

在javax。加密。密码doFinal（Cipher.java:1340）

在加密助手。解密文件（CryptoHelper.java:128）

根据#Robert的答案编辑了这里的更新代码，适用于遇到与我相同问题的任何人。

加密：

int read;

        while ((read = fileInputStream.read(buffer)) > 0) {
            Log.i(TAG, "encrypt read= " + read);
            byte[] encryptedData = cipher.update(buffer, 0, read);
            //byte[] encryptedData = cipher.doFinal(buffer);
            if (encryptedData != null) {
                Log.i(TAG, "encrypted size= " + encryptedData.length);
                fileOutputStream.write(encryptedData, 0, encryptedData.length);
            }

            //cipherOutputStream.write(buffer, 0, buffer.length);
        }
        byte[] finals = cipher.doFinal();
        Log.i(TAG, "encrypted finals = " + finals.length);
        fileOutputStream.write(finals, 0, finals.length);

解密：

int read;

        while ((read = fileInputStream.read(buffer)) > 0) {
            Log.i(TAG, "decrypt read= " + read);

            //byte[] decryptedData = cipher.doFinal(buffer);
            byte[] decryptedData = cipher.update(buffer, 0, read);
            if (decryptedData != null) {
                Log.i(TAG, "decrypted size= " + decryptedData.length);
                fileOutputStream.write(decryptedData, 0, decryptedData.length);
            }

            //fileOutputStream.write(buffer, 0, buffer.length);
        }
        byte[] finals = cipher.doFinal();
        Log.i(TAG, "decrypted finals = " + finals.length);
        fileOutputStream.write(finals, 0, finals.length);

再次感谢罗伯特的帮助。

Answer 1

你的问题是，你总是调用cipher.dofint（）为每个错误的数据块，因为每个块将被填充。

如果您正在加密/解密数据块，请使用密码。更新（…） 并且在处理最后一个块之后，只调用密码。doFinal（）一次。

更简单的方法是使用CipherInputStream/CipherOutputStream——它完全符合我为您描述的内容（关闭流时调用doFinal）。