AES CBC加解密

项目中用到AES-128-CBC加密模式，服务端客户端采用不同语言开发，记录不同语言AES的实现。

AES加密数据块分组长度必须为128比特，密钥长度可以是128比特、192比特、256比特中的任意一个（如果数据块及密钥长度不足时，会补齐，补齐的是size，不是'\0'）。

 

1. NodeJS

var crypto = require('crypto')

// AES 加密
function encryptstring(str) {
  var cipher = crypto.createCipheriv('aes-128-cbc', '1234567812345678', '1234567812345678'),
  encrypted = cipher.update(str, 'utf-8', 'base64');
  encrypted += cipher.final('base64');
  return encrypted;
}

console.log(encryptstring("hello world"))

$ node aes.js
a2SpM37nvVYtBnVHonX86w==

 

2. Golang

package main

import (
    "bytes"
    "crypto/aes"
    "crypto/cipher"
    "encoding/base64"
    "fmt"
)

const (
    KEY   = "1234567812345678"
    IV    = "1234567812345678"
)

// AES 加密
func AesEncrypt(encodeStr string, key []byte) (string, error) {
    encodeBytes := []byte(encodeStr)
    //根据key 生成密文
    block, err := aes.NewCipher(key)
    if err != nil {
        return "", err
    }

    blockSize := block.BlockSize()
    encodeBytes = PKCS5Padding(encodeBytes, blockSize)

    blockMode := cipher.NewCBCEncrypter(block, []byte(IV))
    crypted := make([]byte, len(encodeBytes))
    blockMode.CryptBlocks(crypted, encodeBytes)

    return base64.StdEncoding.EncodeToString(crypted), nil
}

// 16字节为一组，填充为16字节倍数
func PKCS5Padding(ciphertext []byte, blockSize int) []byte {
    padding := blockSize - len(ciphertext)%blockSize
    // 填充size
    padtext := bytes.Repeat([]byte{byte(padding)}, padding)

    return append(ciphertext, padtext...)
}

// AES 解密
func AesDecrypt(decodeStr string, key []byte) ([]byte, error) {
    //先解密base64
    decodeBytes, err := base64.StdEncoding.DecodeString(decodeStr)
    if err != nil {
        return nil, err
    }
    block, err := aes.NewCipher(key)
    if err != nil {
        return nil, err
    }
    blockMode := cipher.NewCBCDecrypter(block, []byte(IV))
    origData := make([]byte, len(decodeBytes))

    blockMode.CryptBlocks(origData, decodeBytes)
    origData = PKCS5UnPadding(origData)
    return origData, nil
}


// 移除Padding
func PKCS5UnPadding(origData []byte) []byte {
    length := len(origData)
    unpadding := int(origData[length-1])

    // 移除填充的size
    return origData[:(length - unpadding)]
}


/// main
func main() {
    // 加密
    dstr, _ := AesEncrypt("hello world", []byte(KEY))
    fmt.Println("Encrypt: ", string(dstr))

    // 解密
    sstr, _ := AesDecrypt(string(dstr), []byte(KEY))
    fmt.Println("Decrypt: ", string(sstr))
}

Encrypt:  a2SpM37nvVYtBnVHonX86w==
Decrypt:  hello world

 

3. Python

#!/usr/bin/python

from Crypto.Cipher import AES
import base64

key = '1234567812345678'
iv = '1234567812345678'

def encry(data):
  pad_it = lambda s: s + (16 - len(s) % 16) * chr(16 - len(s) % 16)

  generator = AES.new(key, AES.MODE_CBC, iv)
  crypt = generator.encrypt(pad_it(data))
  cryptedStr = base64.b64encode(crypt)
  return cryptedStr

def decrypt(data):
  data = base64.b64decode(data)
  generator = AES.new(key, AES.MODE_CBC, iv)
  crypt = generator.decrypt(data)
  
  padLen = ord(crypt[len(crypt) -1])
  return crypt[0: -padLen]


if __name__ == "__main__":
  str = encry("hello world")
  print str   # a2SpM37nvVYtBnVHonX86w==
  
  str = decrypt(str)
  print str   # hello world