如何加密和解密连续的多个值

时间:2017-10-02 14:09:30

标签: c++ encryption cryptography crypto++

在我的程序中,我使用crypto++库。 我有这样的结构:

struct crypt_struct{
  //consists of encrypted data
  string name1;
  string name2;
  string name3;
}
struct decrypt_struct{
  //consists of decrypted data
  int name1;
  string name2;
  double name3;
}

我有加密功能:

crypt_struct encrypt(decrypt_struct struct_in) {
    //Key and IV setup
    //AES encryption uses a secret key of a variable length (128-bit, 196-bit or 256-   
    //bit). This key is secretly exchanged between two parties before communication   
    //begins. DEFAULT_KEYLENGTH= 16 bytes
    byte key[CryptoPP::AES::DEFAULT_KEYLENGTH], iv[CryptoPP::AES::BLOCKSIZE];
    memset(key, 0x00, CryptoPP::AES::DEFAULT_KEYLENGTH);
    memset(iv, 0x00, CryptoPP::AES::BLOCKSIZE);
    //output encrypt struct
    crypt_struct struct_out;

    //encrypt text
    string ciphertext;

    CryptoPP::AES::Encryption aesEncryption(key, CryptoPP::AES::DEFAULT_KEYLENGTH);
    CryptoPP::CBC_Mode_ExternalCipher::Encryption cbcEncryption(aesEncryption, iv);
    CryptoPP::StreamTransformationFilter stfEncryptor(cbcEncryption, new CryptoPP::StringSink(ciphertext));


    //int name1
    stfEncryptor.Put(reinterpret_cast<const unsigned char*> ((to_string(struct_in.name1)).c_str()), (to_string(struct_in.name1)).length() + 1);
    stfEncryptor.MessageEnd();
    struct_out.name1 = ciphertext;
    cout << ciphertext << endl;
    ciphertext.clear();

    //string name2
    stfEncryptor.Put(reinterpret_cast<const unsigned char*> (struct_in.name2.c_str()), struct_in.name2.length() + 1);
    stfEncryptor.MessageEnd();
    struct_out.name2 = ciphertext;
    cout << ciphertext << endl;
    ciphertext.clear();

    //double name3
    stfEncryptor.Put(reinterpret_cast<const unsigned char*> ((to_string(struct_in.name3)).c_str()), (to_string(struct_in.name3)).length() + 1);
    stfEncryptor.MessageEnd();
    struct_out.name3 = ciphertext;
    cout << ciphertext << endl;
    ciphertext.clear();

    return struct_out;
}

解密功能:

decrypt_struct decrypt(crypt_struct struct_in)
{
    //Key and IV setup
    //AES encryption uses a secret key of a variable length (128-bit, 196-bit or 256-   
    //bit). This key is secretly exchanged between two parties before communication   
    //begins. DEFAULT_KEYLENGTH= 16 bytes

    byte key[CryptoPP::AES::DEFAULT_KEYLENGTH], iv[CryptoPP::AES::BLOCKSIZE];
    memset(key, 0x00, CryptoPP::AES::DEFAULT_KEYLENGTH);
    memset(iv, 0x00, CryptoPP::AES::BLOCKSIZE);
    //
    // Decrypt
    //
    decrypt_struct struct_out;
    string decryptedtext;
    CryptoPP::AES::Decryption aesDecryption(key, CryptoPP::AES::DEFAULT_KEYLENGTH);
    CryptoPP::CBC_Mode_ExternalCipher::Decryption cbcDecryption(aesDecryption, iv);
    CryptoPP::StreamTransformationFilter stfDecryptor(cbcDecryption, new CryptoPP::StringSink(decryptedtext));

    stfDecryptor.Put(reinterpret_cast<const unsigned char*>(struct_in.name1.c_str()), struct_in.name1.length());
    struct_out.name1= atoi(decryptedtext.c_str());
    stfDecryptor.MessageEnd();
    decryptedtext.clear();

    stfDecryptor.Put(reinterpret_cast<const unsigned char*>(struct_in.name2.c_str()), struct_in.name2.length());
    struct_out.name2= atoi(decryptedtext.c_str());
    stfDecryptor.MessageEnd();
    decryptedtext.clear();

    stfDecryptor.Put(reinterpret_cast<const unsigned char*>(struct_in.name3.c_str()), struct_in.name3.length());
    struct_out.name3= atoi(decryptedtext.c_str());
    stfDecryptor.MessageEnd();
    decryptedtext.clear();

    return struct_out;

}

如果我尝试只加密一个变量,那么所有内容都会被正确解密。但是,如果我尝试同时加密多个变量,则会发生错误。而且,在加密变量int类型时,会发生同样的错误。凭借它可以连接的东西,有没有人的想法?

在我看来,也许原因是这个功能一次只能加密一行。

1 个答案:

答案 0 :(得分:0)

问题是: 问题是在该库的源代码中,在解密时,使用c_str()函数。那些:

stfDecryptor.Put(reinterpret_cast<const unsigned char*> (struct_in.name1.c_str()), struct_in.name1.size());

官方文件说:

  

如果字符串对象不包含其他空字符,则从c_str()获取的指针只能被视为指向以空字符结尾的字符串的指针。

在加密函数中,字符串中添加了一个零字符,当我们尝试通过c_str()函数解密时,我们用第一个零字符修剪字符串。

但是,在使用с++ 11的标准中,添加了一个类似的函数,它执行与data()函数相同的操作,除了它没有考虑空字符。

结果,我收到了:

stfDecryptor.Put(reinterpret_cast<const unsigned char*> (struct_in.name1.data()), struct_in.name1.size());

此外,如果您先加密name1,然后name2name3,则非常重要。那个和解密你应该按照相同的顺序。