java - iOS 和 Android 中的 PBEWithMD5AndDES

Question

我有很多由 Java 使用 PBEWithMD5AndDES 算法编码的字符串。现在我正在将代码移植到 Objective-C 中。但我无法正确解密数据。我正在使用编写的所有代码 here .我在 Java 中使用这个函数来加密/解密数据:

@Override
protected void onCreate(Bundle savedInstanceState) {
    // TODO Auto-generated method stub
    super.onCreate(savedInstanceState);
    setContentView(R.layout.amain);

    try {
        viewKey();
    } catch (Exception e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
        Log.d("checkingthevalue",e.toString());
    }
}

 private void viewKey() {
        // TODO Auto-generated method stub
         String pass = "password";
         String testStr = "TheSecretString";
         final byte[] SALT = {
                (byte) 0xaa, (byte) 0xaa, (byte) 0xce, (byte) 0xce,
                (byte) 0xaa, (byte) 0xaa, (byte) 0xce, (byte) 0xce,
            };
         try{
             SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("PBEWithMD5AndDES");
             SecretKey key = keyFactory.generateSecret(new PBEKeySpec(pass.toCharArray()));
             Cipher pbeCipher = Cipher.getInstance("PBEWithMD5AndDES");
             pbeCipher.init(Cipher.ENCRYPT_MODE, key, new PBEParameterSpec(SALT, 20));
             String strEnc = base64Encode(pbeCipher.doFinal(testStr.getBytes("UTF-8")));
             Log.d("ViewKey", "strEnc :: " + strEnc);
         }catch (Exception e)
         {
             Log.d("ViewKey","ERROR");
         }
    }
 private static String base64Encode(byte[] bytes) {
final int asd = Base64.URL_SAFE | Base64.NO_PADDING | Base64.NO_WRAP ;
            return Base64.encodeToString(bytes,asd);
        }

结果字符串 ( String strEnc ) 是 "6_O6V3327e5vnNpMB7_wNg"

据我了解，我可以使用此类使用 OpenSSL 在 iOS 中加密/解密数据:

    - (void)viewDidLoad
    {
        [super viewDidLoad];
        [self testSSL3];
    }

    -(void) testSSL{
        PS_PBEwithMD5andDes *PBE = [[PS_PBEwithMD5andDes alloc] init];
        NSString *password = @"password";

        NSString *message = @"TheSecretString";
        int it = 20;
        {
            NSData *inData = [message dataUsingEncoding:NSUTF8StringEncoding];
            NSData *encData = [PBE encryptPBEWithMD5AndDESData:inData password:password iterations:it];
            NSString *encString = [encData base64EncodedString];

         NSLog(@":: %@",encString);
        }
    }

类 PS_PBEwithMD5andDes:

PS_PBEwithMD5andDes.h
//
//  PS_PBEwithMD5andDes.h
//  
//
//  Created by Admin on 11.06.14.
//  Copyright (c) 2014 PS. All rights reserved.
//

#import <Foundation/Foundation.h>

@interface PS_PBEwithMD5andDes : NSObject

- (NSData *)encryptPBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password iterations:(int)iterations;
- (NSData *)decryptPBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password iterations:(int)iterations;
- (NSData *)encodePBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password direction:(int)direction iterations:(int)iterations;

@end


PS_PBEwithMD5andDes.m

//
//  PS_PBEwithMD5andDes.m
//  
//
//  Created by Admin on 11.06.14.
//  Copyright (c) 2014 PS. All rights reserved.
//

#import "PS_PBEwithMD5andDes.h"
#import "libs/include_openssl/openssl/md5.h"
#import "libs/include_openssl/openssl/sha.h"
#import "libs/include_openssl/openssl/x509.h"
#import "libs/include_openssl/openssl/err.h"
#import "libs/include_openssl/openssl/evp.h"

@implementation PS_PBEwithMD5andDes


- (NSData *)encryptPBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password  iterations:(int)iterations{
    return [self encodePBEWithMD5AndDESData:inData password:password direction:1 iterations:iterations];
}

- (NSData *)decryptPBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password  iterations:(int)iterations {
    return [self encodePBEWithMD5AndDESData:inData password:password direction:0 iterations:iterations];
}

- (NSData *)encodePBEWithMD5AndDESData:(NSData *)inData password:(NSString *)password direction:(int)direction iterations:(int)iterations
{

    // Change salt and number of iterations for your project !!!

    static const char gSalt[] =
    {

(unsigned char) 0xaa, (unsigned char) 0xaa, (unsigned char) 0xce, (unsigned char) 0xce,
        (unsigned char) 0xaa, (unsigned char) 0xaa, (unsigned char) 0xce, (unsigned char) 0xce
    };

    unsigned char *salt = (unsigned char *)gSalt;
    int saltLen = strlen(gSalt);


    EVP_CIPHER_CTX cipherCtx;


    unsigned char *mResults;         // allocated storage of results
    int mResultsLen = 0;

    const char *cPassword = [password UTF8String];

    unsigned char *mData = (unsigned char *)[inData bytes];
    int mDataLen = [inData length];

    SSLeay_add_all_algorithms();
    X509_ALGOR *algorithm = PKCS5_pbe_set(NID_pbeWithMD5AndDES_CBC, iterations, salt, saltLen);




    memset(&cipherCtx, 0, sizeof(cipherCtx));

    if (algorithm != NULL)
    {
        EVP_CIPHER_CTX_init(&(cipherCtx));

        if (EVP_PBE_CipherInit(algorithm->algorithm, cPassword, strlen(cPassword),
                               algorithm->parameter, &(cipherCtx), direction))
        {

            EVP_CIPHER_CTX_set_padding(&cipherCtx, 1);

            int blockSize = EVP_CIPHER_CTX_block_size(&cipherCtx);
            int allocLen = mDataLen + blockSize + 1; // plus 1 for null terminator on decrypt
            mResults = (unsigned char *)OPENSSL_malloc(allocLen);


            unsigned char *in_bytes = mData;
            int inLen = mDataLen;
            unsigned char *out_bytes = mResults;
            int outLen = 0;



            int outLenPart1 = 0;
            if (EVP_CipherUpdate(&(cipherCtx), out_bytes, &outLenPart1, in_bytes, inLen))
            {
                out_bytes += outLenPart1;
                int outLenPart2 = 0;
                if (EVP_CipherFinal(&(cipherCtx), out_bytes, &outLenPart2))
                {
                    outLen += outLenPart1 + outLenPart2;
                    mResults[outLen] = 0;
                    mResultsLen = outLen;
                }
            } else {
                unsigned long err = ERR_get_error();
                ERR_load_crypto_strings();
                ERR_load_ERR_strings();
                char errbuff[256];
                errbuff[0] = 0;
                ERR_error_string_n(err, errbuff, sizeof(errbuff));
                NSLog(@"OpenSLL ERROR:\n\tlib:%d\n\tfunction:%d\n\treason:%d\n",
                      ERR_lib_error_string(err),
                      ERR_func_error_string(err),
                      ERR_reason_error_string(err));
                ERR_free_strings();
            }


            NSData *encryptedData = [NSData dataWithBytes:mResults length:mResultsLen]; 


            return encryptedData;
        }
    }
    return nil;

}
@end

iOS 情况下的结果 (NSString *encString) 是 @"h1wZWAuxI71flGJKGcwCOg=="

总结，结果:

在 Java 中:“6_O6V3327e5vnNpMB7_wNg”在 Objective-C 中:@"h1wZWAuxI71flGJKGcwCOg=="

问题:1).为什么他们给出不同的结果？2).如何解决问题？3).为什么在 Objective-C 中的所有情况下，最后两个字母都是 "=="？在 Objective-C 中，我使用 OpenSSL 库。

Answer 1

我和你有同样的问题；但我想我已经解决了；

PBEWithMD5AndDES Encryption in iOS我用它来加密 ios 中的字符串；我将加密盐修改为:

static const char gSalt[] =
{
    (unsigned char)0x18, (unsigned char)0x79, (unsigned char)0x6D, (unsigned char)0x6D,
    (unsigned char)0x35, (unsigned char)0x3A, (unsigned char)0x6A, (unsigned char)0x60,
    (unsigned char)0x00
};

然后我将 android 的加密盐设置为:

private static byte[] salt = new byte[] {24, 121, 109, 109, 53, 58, 106, 96};

ios的salt值必须在0-128之间(因为它的类型是unsigned char，android的salt是byte类型)

final byte[] SALT = {
            (byte) 0xaa, (byte) 0xaa, (byte) 0xce, (byte) 0xce,
            (byte) 0xaa, (byte) 0xaa, (byte) 0xce, (byte) 0xce,
        };

这是你的盐，0xaa 是 170 >128 所以当你将它转换为 byte 时，值会改变；所以你在 android 中加盐与在 ios 中加盐不同；所以这就是为什么你在 android 和 ios 中得到不同的 base64 字符串；