1. 程式人生 > >java和js實現aes加密解密

java和js實現aes加密解密

由於公司安全測試,要對重要資訊進行加密傳輸,使得java、android、ios一致。

java程式碼

package gov.communitycloud.user.utils;

import java.math.BigInteger;

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.spec.SecretKeySpec;

import org.apache.commons.codec.binary.Base64;
import org.apache.commons.lang3.StringUtils;

import sun.misc.BASE64Decoder;

/**
 * 編碼工具類
 * 實現aes加密、解密
 */
public class EncryptUtils {
	
	/**
	 * 金鑰
	 */
	private static final String KEY = "abcdefgabcdefg12";
	
	/**
	 * 演算法
	 */
	private static final String ALGORITHMSTR = "AES/ECB/PKCS5Padding";

	public static void main(String[] args) throws Exception {
		String content = "我愛你";
		System.out.println("加密前:" + content);

		System.out.println("加密金鑰和解密金鑰:" + KEY);

		String encrypt = aesEncrypt(content, KEY);
		System.out.println("加密後:" + encrypt);

		String decrypt = aesDecrypt(encrypt, KEY);
		System.out.println("解密後:" + decrypt);
	}
	
	/**
	 * aes解密
	 * @param encrypt	內容
	 * @return
	 * @throws Exception
	 */
	public static String aesDecrypt(String encrypt) throws Exception {
		return aesDecrypt(encrypt, KEY);
	}
	
	/**
	 * aes加密
	 * @param content
	 * @return
	 * @throws Exception
	 */
	public static String aesEncrypt(String content) throws Exception {
		return aesEncrypt(content, KEY);
	}

	/**
	 * 將byte[]轉為各種進位制的字串
	 * @param bytes byte[]
	 * @param radix 可以轉換進位制的範圍,從Character.MIN_RADIX到Character.MAX_RADIX,超出範圍後變為10進位制
	 * @return 轉換後的字串
	 */
	public static String binary(byte[] bytes, int radix){
		return new BigInteger(1, bytes).toString(radix);// 這裡的1代表正數
	}

	/**
	 * base 64 encode
	 * @param bytes 待編碼的byte[]
	 * @return 編碼後的base 64 code
	 */
	public static String base64Encode(byte[] bytes){
		return Base64.encodeBase64String(bytes);
	}

	/**
	 * base 64 decode
	 * @param base64Code 待解碼的base 64 code
	 * @return 解碼後的byte[]
	 * @throws Exception
	 */
	public static byte[] base64Decode(String base64Code) throws Exception{
		return StringUtils.isEmpty(base64Code) ? null : new BASE64Decoder().decodeBuffer(base64Code);
	}

	
	/**
	 * AES加密
	 * @param content 待加密的內容
	 * @param encryptKey 加密金鑰
	 * @return 加密後的byte[]
	 * @throws Exception
	 */
	public static byte[] aesEncryptToBytes(String content, String encryptKey) throws Exception {
        KeyGenerator kgen = KeyGenerator.getInstance("AES");
        kgen.init(128);
        Cipher cipher = Cipher.getInstance(ALGORITHMSTR);
        cipher.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(encryptKey.getBytes(), "AES"));

        return cipher.doFinal(content.getBytes("utf-8"));
    }


	/**
	 * AES加密為base 64 code
	 * @param content 待加密的內容
	 * @param encryptKey 加密金鑰
	 * @return 加密後的base 64 code
	 * @throws Exception
	 */
	public static String aesEncrypt(String content, String encryptKey) throws Exception {
		return base64Encode(aesEncryptToBytes(content, encryptKey));
	}

	/**
	 * AES解密
	 * @param encryptBytes 待解密的byte[]
	 * @param decryptKey 解密金鑰
	 * @return 解密後的String
	 * @throws Exception
	 */
	 public static String aesDecryptByBytes(byte[] encryptBytes, String decryptKey) throws Exception {
	        KeyGenerator kgen = KeyGenerator.getInstance("AES");
	        kgen.init(128);

	        Cipher cipher = Cipher.getInstance(ALGORITHMSTR);
	        cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(decryptKey.getBytes(), "AES"));
	        byte[] decryptBytes = cipher.doFinal(encryptBytes);

	        return new String(decryptBytes);
	    }


	/**
	 * 將base 64 code AES解密
	 * @param encryptStr 待解密的base 64 code
	 * @param decryptKey 解密金鑰
	 * @return 解密後的string
	 * @throws Exception
	 */
	public static String aesDecrypt(String encryptStr, String decryptKey) throws Exception {
		return StringUtils.isEmpty(encryptStr) ? null : aesDecryptByBytes(base64Decode(encryptStr), decryptKey);
	}

}

js程式碼
<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>aes測試</title>
	<script type="text/javascript" src="aes.js"></script>
	<script type="text/javascript" src="../components/mode-ecb.js"></script>
</head>
<body>
	
</body>

<script type="text/javascript">

	
	function Encrypt(word){
		 var key = CryptoJS.enc.Utf8.parse("abcdefgabcdefg12");	

		 var srcs = CryptoJS.enc.Utf8.parse(word);
		 var encrypted = CryptoJS.AES.encrypt(srcs, key, {mode:CryptoJS.mode.ECB,padding: CryptoJS.pad.Pkcs7});
         return encrypted.toString();
	}
	function Decrypt(word){
		 var key = CryptoJS.enc.Utf8.parse("abcdefgabcdefg12");	

		 var decrypt = CryptoJS.AES.decrypt(word, key, {mode:CryptoJS.mode.ECB,padding: CryptoJS.pad.Pkcs7});
		 return CryptoJS.enc.Utf8.stringify(decrypt).toString();
	}

	alert(Encrypt("我愛你"));
	alert(Decrypt(Encrypt("我愛你")))

</script>
</html>

注意點
  1. js中需要引入CryptoJS的架包,下載地址:點選跳轉地址
  2. 使用aes時,js程式碼不要暴漏在外面,不然key會被拿到
  3. PKCS5Padding和PKCS7Padding的結果是一樣