Aes 加密 CBC 模式的 Nopadding 填充在 GO 里怎么实现啊 - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
The Go Programming Language
http://golang.org/
Go Playground
Go Projects
Revel Web Framework
chengxiao
V2EX    Go 编程语言

Aes 加密 CBC 模式的 Nopadding 填充在 GO 里怎么实现啊

  •  
  •   chengxiao 2020-10-09 17:51:58 +08:00 3444 次点击
    这是一个创建于 1833 天前的主题,其中的信息可能已经有所发展或是发生改变。
    对接某商户系,被这个签名搞的头大,这个 NoPadding 似乎是个 java 里的方法,没查到相关信息

    业务参数加密步骤:
    1 )将业务参数转换成 json 格式字符串

    2 )用 AES 算法加密,秘钥为 appSecret 重复两遍,偏移量为 appSecret 重复两遍(16 位秘钥不用重复),加密模式 CBC,填充模式; NoPadding

    3 )加密后字符即为公共参数 requestBody 的值

    业务参数示例:
    {
    "number":"123",
    "string":"测试",
    "double":1.0,
    "boolean":true
    }

    开发者秘钥为:12345678

    AES 加密结果:
    Vq2Kj4Z8C+hFf7VdFPbCoY3LmJgf2LM7B2a3klFxGWMlL1BAxx7v/ZZdkxqdMPXqRPjy3k0tVKgx
    KMTTAlbE0PGhp2LtqzouDWZaH1g9ttQ=
    12 条回复    2023-08-11 10:38:13 +08:00
    kingiis
        1
    kingiis  
       2020-10-09 17:53:39 +08:00
    公用 c 库可能会好点
    songjiaxin2008
        2
    songjiaxin2008  
       2020-10-09 17:59:49 +08:00
    可以参考一下这个实现 https://github.com/wumansgy/goEncrypt 引用的包都是标准库的
    songjiaxin2008
        3
    songjiaxin2008  
       2020-10-09 18:00:05 +08:00
    NoPadding = ZeroPadding
    songjiaxin2008
        4
    songjiaxin2008  
       2020-10-09 18:01:00 +08:00
    网页上跑了下应该没啥问题
    geelaw
        5
    geelaw  
       2020-10-09 18:11:33 +08:00 via iPhone
    为了数据安全最好还是不要对接这个系统,使用非伪随机的密钥以及使用密钥相关的 IV,都会破坏 AES 所有的安全保证。
    teawithlife
        6
    teawithlife  
       2020-10-10 07:42:38 +08:00
    其实就是后面补 0x00
    play.golang.org//MxstiahPDa3
    dafsic
        7
    dafsic  
       2020-10-10 09:49:22 +08:00
    我对接过,跟 java 版本有关,问问 java 是什么版本,最好要到加密部分的 java 代码看看
    TypeErrorNone
        8
    TypeErrorNone  
       2020-10-10 10:15:17 +08:00
    之前写的,可以参考下

    ```
    package xaes

    import (
    "bytes"
    "crypto/aes"
    "crypto/cipher"
    "crypto/rand"
    "crypto/sha256"
    "encoding/base64"
    "github.com/pkg/errors"
    )

    type Aes struct {
    key []byte
    }

    func NewAes(key string) (*Aes) {
    if key == "" {
    panic("aes key empty")
    }
    sum := sha256.Sum256([]byte(key))
    return &Aes{
    key:sum[:],
    }
    }

    func (a *Aes) Encrypt(encodeBytes []byte) (val string, err error) {
    block, err := aes.NewCipher(a.key)
    if err != nil {
    return
    }
    blockSize := block.BlockSize()
    encodeBytes = a.pkCS5Padding(encodeBytes, blockSize)

    iv := make([]byte, blockSize)
    _,err = rand.Read(iv)
    if err != nil {
    return
    }

    blockMode := cipher.NewCBCEncrypter(block, iv)
    crypted := make([]byte, len(encodeBytes))
    blockMode.CryptBlocks(crypted, encodeBytes)

    iv = append(iv,crypted...)
    val = base64.StdEncoding.EncodeToString(iv)
    return
    }


    func (a *Aes) pkCS5Padding(ciphertext []byte, blockSize int) []byte {
    padding := blockSize - len(ciphertext)%blockSize
    padtext := bytes.Repeat([]byte{byte(padding)}, padding)
    return append(ciphertext, padtext...)
    }

    func (a *Aes) Decrypt(decodeStr string) (origData []byte,err error) {
    decodeBytes, err := base64.StdEncoding.DecodeString(decodeStr)
    if err != nil {
    return
    }
    block, err := aes.NewCipher(a.key)
    if err != nil {
    return nil, err
    }
    if len(decodeBytes) < block.BlockSize() {
    err = errors.New("decodeBytes 长度不足")
    return
    }
    iv := decodeBytes[:block.BlockSize()]
    decodeBytes = decodeBytes[block.BlockSize():]

    blockMode := cipher.NewCBCDecrypter(block, iv)
    origData = make([]byte, len(decodeBytes))
    blockMode.CryptBlocks(origData, decodeBytes)
    origData = a.pkCS5UnPadding(origData)
    return
    }

    func (a *Aes) pkCS5UnPadding(origData []byte) []byte {
    length := len(origData)
    unpadding := int(origData[length-1])
    return origData[:(length - unpadding)]
    }
    ```
    chengxiao
        9
    chengxiao  
    OP
       2020-10-10 10:36:16 +08:00
    @TypeErrorNone
    @teawithlife
    @songjiaxin2008
    谢谢几位老哥 就是被这个 NoPadding 怎么补位搞蒙了 原来 ZeroPadding 就可以
    sunmoon1983
        10
    sunmoon1983  
       2021-12-02 14:44:05 +08:00
    @TypeErrorNone
    哥们,我试了试你给的方法,貌似不太行呀,我把 pkCS5Padding 改成了 zeroPadding,最后出来的数据和人家给的数据就是不太一样
    sunmoon1983
        11
    sunmoon1983  
       2021-12-02 14:46:39 +08:00
    @chengxiao 哥们,你搞出来了吗? Aes Nopadding 加密
    pifuant
        12
    pifuant  
       2023-08-11 10:38:13 +08:00
    @sunmoon1983 @chengxiao 老哥们, 怎么解决的,ZeroPadding 不行啊
    关于     帮助文档     自助推广系统     博客     API     FAQ     Solana     2306 人在线   最高记录 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 31ms UTC 16:05 PVG 00:05 LAX 09:05 JFK 12:05
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86