Question

我需要制定解密/加密算法，但我对SHA256 / CBC / Salt / IV等感到困惑。

正确加密的字符串的示例是：

U2FsdGVkX19IfIZtJ/48wk8z3ZRGDK8RD8agyQRhMrsOMsoIlVEcrzraOLo5IRBXjDkN1JUFnNrkvi2NA22IOTv00U97065tUNBQKEVXcaL0UJirtcqHlq8lN4pEm14ZokKXv8mUP8GkUKrOf37GhOugi/F/CQiILb57kIPrYPk=

它是Base64编码然后Rijndael编码。前8个字符是'Salted__'，接下来的8个字符我假设是某种盐（随机生成）。

我提供的用于加密此数据的密钥是'12345678'。

解密数据应为：

2358442189442905：ZGF2aWQ =：1324515293：1.9.12：1：MC4wLjAuMCxub25lLzA =：LfcTMMYyUcwgL8keu3sMoNC / PFEKZy8fWFvo3rJvSdo

显然它跟随Crypt :: CBC :: VERSION 2.29

我似乎无法解密上面正确加密的字符串。我尝试过以下方法：

NSString *key = @"12345678";

NSData *test = [NSData dataFromBase64String:@"U2FsdGVkX19IfIZtJ/48wk8z3ZRGDK8RD8agyQRhMrsOMsoIlVEcrzraOLo5IRBXjDkN1JUFnNrkvi2NA22IOTv00U97065tUNBQKEVXcaL0UJirtcqHlq8lN4pEm14ZokKXv8mUP8GkUKrOf37GhOugi/F/CQiILb57kIPrYPk="];

unsigned char salt[8]; //get the salt out
[test getBytes:salt range:NSMakeRange(8, 8)];
NSData *saltData = [NSData dataWithBytes:salt length:8];

unsigned char data[128-16]; // remove the Salted__ and the 8 character salt
[test getBytes:data range:NSMakeRange(8, 128-8)];
test = [NSData dataWithBytes:data length:128-8];

NSMutableData *aeskey = [NSMutableData dataWithData:[key dataUsingEncoding:NSUTF8StringEncoding]];
[aeskey appendData:saltData]; // add the salt to the end of the key?

NSData *test2 = [test decryptedAES256DataUsingKey:key error:nil]; //Using a NSData+CommonCrypto library

有关如何正确解密此问题的任何想法？

编辑：更多信息：这是与我正在尝试实施的代码相关的代码。

elsif ($header_mode eq 'salt') {
$self->{salt} = $self->_get_random_bytes(8) if $self->{make_random_salt};
defined (my $salt = $self->{salt}) or croak "No header_mode of 'salt' specified, but no salt value provided"; # shouldn't happen
length($salt) == 8 or croak "Salt must be exactly 8 bytes long";
my ($key,$iv) = $self->_salted_key_and_iv($self->{passphrase},$salt);
$self->{key}  = $key;
$self->{civ}  = $self->{iv} = $iv;
$result  = "Salted__${salt}";
}

  my $self = shift;
  my ($pass,$salt)  = @_;

  croak "Salt must be 8 bytes long" unless length $salt == 8;

  my $key_len = $self->{keysize};
  my $iv_len  = $self->{blocksize};

  my $desired_len = $key_len+$iv_len;

  my $data  = '';
  my $d = '';

  while (length $data < $desired_len) {
    $d = md5($d . $pass . $salt);
    $data .= $d;
  }
  return (substr($data,0,$key_len),substr($data,$key_len,$iv_len));

这是一个我不完全理解的实现：http://pastebin.com/R0b1Z7GH http://pastebin.com/aYWFXesP

Answer 1

unsigned char salt[8]; //get the salt out
[test getBytes:salt range:NSMakeRange(8, 8)];
NSData *saltData = [NSData dataWithBytes:salt length:8];

unsigned char data[128-16]; // remove the Salted__ and the 8 character salt
[test getBytes:data range:NSMakeRange(8, 128-8)];
test = [NSData dataWithBytes:data length:128-8];

我认为在您的第二个代码块中，您正在复制错误的数据。试试这个：

unsigned char data[128-16]; // remove the Salted__ and the 8 character salt
[test getBytes:data range:NSMakeRange(16, 128-16)];
test = [NSData dataWithBytes:data length:128-16];

您的评论表明您想跳过Salted__和盐本身。

请注意，我还不清楚盐应该去哪里 - 这取决于您尝试集成的协议 - 所以我希望您能从其他来源获得详细记录。< / p>

关于Rijndael / SHA256加密的困惑

1 个答案: