Js、Java 实现AES加密 ECB模式 PKCS7Padding填充

清疚 2023-10-04 12:59 1阅读 0赞

最近在跟一个APP做对接，用到AES加密，他们是在JS里进行加密发给我们，然后我们后端需要在Java里解密，AES加密又分为好多模式，终于调通了。

AES加密有很多种，这里说一下我用的：

*  加密模式：ECB
 *  填充：PKCS7Padding
 *  字符集：UTF-8
 *  输出结果：转换base64（Java代码部分也可以改成Hex）
 *  JDK1.8(1.7也能用)

###  ###

### 1.JS示例代码 ###

需要引入crypto-js.js和pad-pkcs7.js，

我的示例代码里也有，在这里下载：[https://download.csdn.net/download/jiuweihu521/18550375][https_download.csdn.net_download_jiuweihu521_18550375]

谷歌官方的下载和说明：[https://code.google.com/p/crypto-js/][https_code.google.com_p_crypto-js] 。

<!DOCTYPE html>
    <html lang=zh-CN>
    <head>
    <meta charset=utf-8>
    <meta http-equiv=X-UA-Compatible content="IE=edge">
    <title>AES加密解密测试</title>
    <script>
    	
    	function encryptText() {
    		var decryptKey = document.getElementById("key").value;
    		var plain = document.getElementById("plain").value;
    		console.log("plain: " + plain);
    		var encrypted = encrypt(plain,decryptKey);
    		console.log("encrypted: " + encrypted);
    		document.getElementById("encrypted").value = encrypted;
    	}
    
    	function decryptText() {
    		var decryptKey = document.getElementById("key").value;
    		var encrypted = document.getElementById("todecrypt").value;
    		console.log("encrypted: " + encrypted);
    		var decrypted = decrypt(encrypted,decryptKey);
    		console.log("decrypted: " + decrypted);
    		document.getElementById("decrypted").value = decrypted;
    	}
    
    	function encrypt(text, key) {
    		if (typeof text !== 'string') {
    			text = JSON.stringify(text)
    		}
    		const _key = CryptoJS.enc.Utf8.parse(key)// token 只能16位
    		const srcs = CryptoJS.enc.Utf8.parse(text)
    		const encrypted = CryptoJS.AES.encrypt(srcs, _key, {
    			mode : CryptoJS.mode.ECB,
    			padding : CryptoJS.pad.Pkcs7
    		})
    		return encrypted.toString()
    	}
    
    	function decrypt(text) {
    		var decryptKey = document.getElementById("key").value;
    		if (typeof text !== 'string') {
    			text = JSON.stringify(text)
    		}
    		const _key = CryptoJS.enc.Utf8.parse(decryptKey)
    		const decrypt = CryptoJS.AES.decrypt(text, _key, {
    			mode : CryptoJS.mode.ECB,
    			padding : CryptoJS.pad.Pkcs7
    		})
    		return CryptoJS.enc.Utf8.stringify(decrypt).toString()
    	}
    </script>
    
    </head>
    <body>
    
    	<div id=app></div>
    	<script src=./crypto-js.js></script>
    	<script src=./pad-pkcs7.js></script>
    
    
    	<h1>AES加密解密测试</h1>
    	
    	<h2>AES加密 模式:ECB 填充:Pkcs7</h2>
    	秘钥  <input id="key" type="text" style="width: 400px; height: 20px;" value="test_abcd_202105" />
    	<br><br>
    	
    	<br>
    	<input id="plain" type="text" style="width: 500px; height: 20px;" />
    	<button type="button" onclick="encryptText()">加密</button>
    	<input id="encrypted" type="text" style="width: 500px; height: 20px;" />
    	<br>
    	<br>
    	<br>
    	<input id="todecrypt" type="text" style="width: 500px; height: 20px;" />
    	<button type="button" onclick="decryptText()">解密</button>
    	<input id="decrypted" type="text" style="width: 500px; height: 20px;" />
    </body>
    </body>
    </html>

运行后就这样：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ppdXdlaWh1NTIx_size_16_color_FFFFFF_t_70][]

### 2.Java示例代码 ###

秘钥key的长度只能是16/24/32个字符。否则会报错：Key length not 128/192/256 bits.

需要在pom.xml里加入jar：

<dependency>
    	<groupId>org.bouncycastle</groupId>
    	<artifactId>bcprov-jdk15</artifactId>
    	<version>1.44</version>
    </dependency>

工具类代码：

package test.utils;
    
    import java.security.NoSuchAlgorithmException;
    import java.security.Security;
    
    import javax.crypto.Cipher;
    import javax.crypto.spec.SecretKeySpec;
    
    import org.apache.commons.codec.binary.Base64;
    import org.bouncycastle.jce.provider.BouncyCastleProvider;
    //import org.apache.commons.codec.binary.Hex;
    
    public class AESUtil {
    
    	public static final String AES = "AES";
    
    	private static final String ALGORITHMSTR = "AES/ECB/PKCS7Padding";
    
    	static {
    		Security.addProvider(new BouncyCastleProvider());
    	}
    
    	/**
    	 * encrypt input text
    	 *
    	 * @param input
    	 * @param key
    	 * @return
    	 * @throws Exception
    	 * @throws NoSuchAlgorithmException
    	 */
    	public static String encrypt(String input, String key) throws Exception {
    
    		SecretKeySpec skey = new SecretKeySpec(key.getBytes(), AES);
    		Cipher cipher = Cipher.getInstance(ALGORITHMSTR);
    		cipher.init(Cipher.ENCRYPT_MODE, skey);
    		byte[] crypted = cipher.doFinal(input.getBytes());
    
    		return new String(Base64.encodeBase64(crypted));
    //		return new String(Hex.encodeHex(crypted)).toUpperCase();
    	}
    
    	/**
    	 * decrypt input text
    	 *
    	 * @param input
    	 * @param key
    	 * @return
    	 */
    	public static String decrypt(String input, String key) throws Exception {
    
    		SecretKeySpec skey = new SecretKeySpec(key.getBytes(), AES);
    		Cipher cipher = Cipher.getInstance(ALGORITHMSTR);
    		cipher.init(Cipher.DECRYPT_MODE, skey);
    		byte[] output = cipher.doFinal(Base64.decodeBase64(input));
    //		byte[] output = cipher.doFinal(Hex.decodeHex(input.toCharArray()));
    
    		return new String(output);
    	}
    
    	public static void main(String[] args) throws Exception {
    
    		// encryption key should be multiple of 16 character long
    		String key = "test_abcd_202105";
    		String content = "测试test123[] {}/@!";
    
    		String encrypted = encrypt(content, key);
    		System.out.println("加密后:" + encrypted);
    		String decrypted = decrypt(encrypted, key);
    		System.out.println("解密后:" + decrypted);
    	}
    }

现在java代码输出是base64编码的，因为js也是这么输出的。如果想让改成Hex编码，就把代码里已经注释掉的解开就行了。

输出结果跟js的一致的：

加密后:VsaOd62e1OrMDZ+zSB5AVlElCqj6dGf9mr4DMsN4GnA=
    解密后:测试test123[] {}/@!

[https_download.csdn.net_download_jiuweihu521_18550375]: https://download.csdn.net/download/jiuweihu521/18550375
[https_code.google.com_p_crypto-js]: https://code.google.com/p/crypto-js/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ppdXdlaWh1NTIx_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20210510145918779.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ppdXdlaWh1NTIx,size_16,color_FFFFFF,t_70