我正在为三个平台(Android、ios 和 WP8)开发一个应用程序。此应用与服务器连接并使用 AES 来确保安全。

我已经为 android 和 Windows Phone 准备了一个运行良好的测试版本，并且使用 android 生成的代码(在 base64 中)使用 wp 代码解码，反之亦然。

但是，在 iOs 上，我得到的其他响应具有相同的 SALT、KEY 和 IV。这是我的安卓代码:

public static SecretKeySpec generateKey(char[] password, byte[] salt) throws Exception {
        SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
        KeySpec spec = new PBEKeySpec(password, salt, 1024, 128);
        SecretKey tmp = factory.generateSecret(spec);
        SecretKeySpec secret = new SecretKeySpec(tmp.getEncoded(), "AES");
        return secret;
    }

public static Map encrypt(String cleartext, byte[] iv, SecretKeySpec secret) throws Exception {
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    // If the IvParameterSpec argument is omitted (null), a new IV will be
    // created
    cipher.init(Cipher.ENCRYPT_MODE, secret, iv == null ? null : new IvParameterSpec(iv));
    AlgorithmParameters params = cipher.getParameters();
    byte[] usediv = params.getParameterSpec(IvParameterSpec.class).getIV();
    byte[] ciphertext = cipher.doFinal(cleartext.getBytes("UTF-8"));
    Map result = new HashMap();
    result.put(IV, usediv);
    result.put(CIPHERTEXT, ciphertext);
    return result;
}


public static String decrypt(byte[] ciphertext, byte[] iv, SecretKeySpec secret) throws Exception {
    Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
    cipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv));
    String plaintext = new String(cipher.doFinal(ciphertext), "UTF-8");
    return plaintext;
}

public static void main(String arg) throws Exception {
    byte[] salt = new byte[] { -11, 84, 126, 65, -87, -104, 120, 33, -89, 19, 57, -6, -27, -19, -101, 107 };



    byte[] interop_iv = Base64.decode("xxxxxxxxxxxxxxx==", Base64.DEFAULT);
    byte[] iv = null;
    byte[] ciphertext;
    SecretKeySpec secret; 
    secret = generateKey("xxxxxxxxxxxxxxx".toCharArray(), salt);
    Map result = encrypt(arg, iv, secret);
    ciphertext = (byte[]) result.get(CIPHERTEXT);
    iv = (byte[]) result.get(IV);
    System.out.println("Cipher text:" + Base64.encode(ciphertext, Base64.DEFAULT));
    System.out.println("IV:" + Base64.encode(iv, Base64.DEFAULT) + " (" + iv.length + "bytes)");
    System.out.println("Key:" + Base64.encode(secret.getEncoded(), Base64.DEFAULT));
    System.out.println("Deciphered: " + decrypt(ciphertext, iv, secret));

    // Interop demonstration. Using a fixed IV that is used in the C#
    // example
    result = encrypt(arg, interop_iv, secret);
    ciphertext = (byte[]) result.get(CIPHERTEXT);
    iv = (byte[]) result.get(IV);

    String text = Base64.encodeToString(ciphertext, Base64.DEFAULT);

    System.out.println();
    System.out.println("--------------------------------");
    System.out.println("Interop test - using a static IV");
    System.out.println("The data below should be used to retrieve the secret message by the receiver");
    System.out.println("Cipher text:  " + text);
    System.out.println("IV:           " + Base64.encodeToString(iv, Base64.DEFAULT));
    decrypt(Base64.decode(text, Base64.DEFAULT), iv, secret);
}

这是我的 ios 代码...我像在 Android 代码中一样设置了静态 IV 和 SALT...但未找到:

- (NSData*)encryptData:(NSData*)data :(NSData*)key :(NSData*)iv
{
    size_t bufferSize = [data length]*2;
    void *buffer = malloc(bufferSize);
    size_t encryptedSize = 0;
    CCCryptorStatus cryptStatus = CCCrypt(kCCEncrypt, kCCAlgorithmAES128, kCCOptionPKCS7Padding,
                                          [key bytes], [key length], [iv bytes], [data bytes], [data length],
                                          buffer, bufferSize, &encryptedSize);
    if (cryptStatus == kCCSuccess)
        return [NSData dataWithBytesNoCopy:buffer length:encryptedSize];
    else
        free(buffer);
    return NULL;
}

// ===================

- (NSData *)encryptedDataForData:(NSData *)data
                        password:(NSString *)password
                              iv:(NSData *)iv
                            salt:(NSData *)salt
                           error:(NSError *)error {

    NSData *key = [self AESKeyForPassword:password salt:salt];
    size_t outLength = 0;
    NSMutableData *
    cipherData = [NSMutableData dataWithLength:data.length +
                  kAlgorithmBlockSize];

    const unsigned char iv2[] = {68, 55, -98, -59, 22, -25, 55, -50, -101, -25, 53, 30, 42, -20, -107, 4};

    CCCryptorStatus
    result = CCCrypt(kCCEncrypt, // operation
                     kAlgorithm, // Algorithm
                     kCCOptionPKCS7Padding, // options
                     key.bytes, // key
                     key.length, // keylength
                     iv2,// iv
                     data.bytes, // dataIn
                     data.length, // dataInLength,
                     cipherData.mutableBytes, // dataOut
                     cipherData.length, // dataOutAvailable
                     &outLength); // dataOutMoved

    if (result == kCCSuccess) {
        cipherData.length = outLength;
    }
    else {
        if (error) {
            error = [NSError errorWithDomain:kRNCryptManagerErrorDomain
                                         code:result
                                     userInfo:nil];
        }
        return nil;
    }

    return cipherData;
}

// ===================

- (NSData *)randomDataOfLength:(size_t)length {
    NSMutableData *data = [NSMutableData dataWithLength:length];

    int result = SecRandomCopyBytes(kSecRandomDefault,
                                    length,
                                    data.mutableBytes);
    NSAssert(result == 0, @"Unable to generate random bytes: %d",
             errno);

    return data;
}

// ===================

// Replace this with a 10,000 hash calls if you don't have CCKeyDerivationPBKDF
- (NSData *)AESKeyForPassword:(NSString *)password
                         salt:(NSData *)salt {
    NSMutableData *
    derivedKey = [NSMutableData dataWithLength:kAlgorithmKeySize];

    int
    result = CCKeyDerivationPBKDF(kCCPBKDF2,            // algorithm
                                  password.UTF8String,  // password
                                  [password lengthOfBytesUsingEncoding:NSUTF8StringEncoding],  // passwordLength
                                  salt.bytes,           // salt
                                  salt.length,          // saltLen
                                  kCCPRFHmacAlgSHA1,    // PRF
                                  kPBKDFRounds,         // rounds
                                  derivedKey.mutableBytes, // derivedKey
                                  derivedKey.length); // derivedKeyLen
    // Do not log password here
    NSAssert(result == kCCSuccess,
             @"Unable to create AES key for password: %d", result);

    return derivedKey;
}

我将数据转换为 base64 如下:

NSString* dataStr = [encryptedData base64EncodedStringWithOptions:0];
    NSLog(@"%@", dataStr);

解决方案

最后，我在 android 和 wp 上使用了这段代码:http://www.dfg-team.com/en/secure-data-on-windows-phone-with-aes-256-encryption/

最佳答案

我以前遇到过和你一样的问题。我刚刚找到了使用这个库的解决方案:https://github.com/dev5tec/FBEncryptor

不要忘记验证文件 FBEncryptorAES.h 中的算法配置

关于java - AES 加密 Java 到 iOs - 带密码、iv 和盐，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/26182593/