Java中的AES加密无法在Javascript中解密答案

【问题标题】：AES encryption in Java unable to decrypt in JavascriptJava中的AES加密无法在Javascript中解密
【发布时间】：2018-11-13 17:27:42
【问题描述】：

我正在使用 AES-256 (AES/CBC/PKCS5Padding) 使用基于密码的加密 (PBKDF2WithHmacSHA1)。

在 Java 中，我使用以下加密和解密代码，它工作正常。

String password = "MyPassword1";
String salt = "MysaltString"; //Will switch to random salt generation.
String plainText = "Quick Brown Fox";


SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
KeySpec spec = new PBEKeySpec(password.toCharArray(), salt.getBytes(), 1024, 256);
SecretKey tmp = factory.generateSecret(spec);
SecretKey secret = new SecretKeySpec(tmp.getEncoded(), "AES");

/* Encrypt the message. */
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
cipher.init(Cipher.ENCRYPT_MODE, secret);
AlgorithmParameters params = cipher.getParameters();
byte[] iv = params.getParameterSpec(IvParameterSpec.class).getIV();
byte[] ciphertext = cipher.doFinal(plainText.getBytes("UTF-8"));

/* Decrypt the message, given derived key and initialization vector. */
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
cipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv));
String plaintext = new String(cipher.doFinal(ciphertext), "UTF-8");

现在，对于互操作，我需要在 Javascript 中解密加密字符串。我尝试使用 forge (https://github.com/digitalbazaar/forge) 无法解密。

var password = "MyPassword1";
var salt = "MysaltString"; //Will switch to random salt generation.

var derivedKey = forge.pkcs5.pbkdf2(password, salt, 1024, 32);
input = forge.util.createBuffer(encrypted);
var decipher = forge.cipher.createDecipher('AES-CBC', derivedKey);
decipher.start({iv: iv});
decipher.update(input);
res = decipher.finish();

我的猜测是它与提供给 JS 的输入格式（密码、盐、IV、加密文本）有关，我只是无法弄清楚它是否必须是 base64、十六进制等...

【问题讨论】：

AES encryption in javascript and decrypting in java的可能重复
@GauravTyagi 它与您引用的问题无关。我正在尝试在 javascript 中使用 forge 和 decrpt。
如何将数据发送到 javascript ？您应该对数据和 IV 使用 base64 或十六进制表示。

标签： javascript java android encryption aes

【解决方案1】：

原因是 Java 使用有符号字节。您应该在 IV 和密文的 JavaScript 端使用二进制补码。您的 JS 代码应如下所示：

var password = "MyPassword1";
var salt = "MysaltString";
var derivedKey = forge.pkcs5.pbkdf2(password, salt, 1024, 32);

for (var i = 0; i < iv_in.length; i++) {
    iv_in[i] = (iv_in[i] & 0xFF);
}

var iv = String.fromCharCode.apply(String, iv_in);

for (var i = 0; i < encrypted.length; i++) {
    encrypted[i] = (encrypted[i] & 0xFF);
}

var input_c = String.fromCharCode.apply(String, encrypted)

var input = forge.util.createBuffer(input_c);
var decipher = forge.cipher.createDecipher('AES-CBC', derivedKey);
decipher.start({iv: iv});
decipher.update(input);
var res = decipher.finish();

if (res) {
    console.log(decipher.output.toString('utf8'));
}

其中iv_in 和encrypted 是您从Java 接收的输入字节数组，例如：

var iv_in = [24, -54, -15, 5, 106, -44, 20, 10, 103, -62, -88, 28, 75, -68, -12, -14];

和

var encrypted = [20, -56, 117, 80, -91, -104, 22, -43, -127, -87, 7, 113, 66, 85, 105, -25]

【讨论】：