Question

我正在使用代码段来解密AES文件。

但是，我想使用密钥文件而不是密码来解密文件。

我需要在下面的代码中做出哪些更改才能实现这一目标？

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;

public class AESCrypto {

    public static String encrypt(String seed, String cleartext) throws Exception {
        byte[] rawKey = getRawKey(seed.getBytes());
        byte[] result = encrypt(rawKey, cleartext.getBytes());
        return Converters.toHex(result);
    }

    public static String decrypt(String seed, String encrypted) throws Exception {
        byte[] rawKey = getRawKey(seed.getBytes());
        byte[] enc = Converters.toByte(encrypted);
        byte[] result = decrypt(rawKey, enc);
        return new String(result);
    }

    public static byte[] getRawKey(byte[] seed) throws Exception {
        KeyGenerator kgen = KeyGenerator.getInstance("AES");
        SecureRandom sr = SecureRandom.getInstance("SHA1PRNG", "Crypto");
        sr.setSeed(seed);
        try {
            kgen.init(256, sr);
            } catch (Exception e) {
            // Log.w(LOG, "This device doesn't support 256 bits, trying 192 bits.");
            try {
            kgen.init(192, sr);
            } catch (Exception e1) {
            // Log.w(LOG, "This device doesn't support 192 bits, trying 128 bits.");
            kgen.init(128, sr);
            }
        }
        SecretKey skey = kgen.generateKey();
        byte[] raw = skey.getEncoded();
        return raw;
    }

    private static byte[] encrypt(byte[] raw, byte[] clear) throws Exception {
        SecretKeySpec skeySpec = new SecretKeySpec(raw, "AES");
            Cipher cipher = Cipher.getInstance("AES");
        cipher.init(Cipher.ENCRYPT_MODE, skeySpec);
        byte[] encrypted = cipher.doFinal(clear);
            return encrypted;
    }

    private static byte[] decrypt(byte[] raw, byte[] encrypted) throws Exception {
        SecretKeySpec skeySpec = new SecretKeySpec(raw, "AES");
            Cipher cipher = Cipher.getInstance("AES");
        cipher.init(Cipher.DECRYPT_MODE, skeySpec);
        byte[] decrypted = cipher.doFinal(encrypted);
            return decrypted;
    }
}

Answer 1

AES密钥不超过16,24或32字节的随机生成数据。因此，要创建密钥文件，请在其中保存该数量的随机数据，并使用它来实例化SecretKeySpec(byte[] data, "AES")。

请注意，为方便起见，SecretKeySpec也是SecretKey。

Android：Java：使用密钥而不是密码解密AES

1 个答案: