AES128使用PHP加密与ASP.net加密不一样


AES128 Encryption using PHP mcrypt is not outputting same as ASP.net

我有一个PHP应用程序,需要加密一个由ASP.net web服务消耗的挑战字符串,但是我的PHP实现的输出没有被。net正确解密。就像在这个问题中有关iOS和。net: AES128位加密字符串不类似于。net

为什么输出不同,我怎么做才能使我的PHP输出与。net相同?

我的PHP代码是这样的:

$key = '128bit-16bytekey';
$value = '128bit-16byteval';
function fnEncrypt($value, $key)
{
    $ivsize = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_ECB);
    $iv     = mcrypt_create_iv($ivsize);
    return base64_encode(
            mcrypt_encrypt(
                MCRYPT_RIJNDAEL_128,
                $key, $value, 
                MCRYPT_MODE_ECB,$iv
            ));
}

.net like this

public static string EncryptData(string plainText)
    {
        string encryptionKey = AppConstants.AES_ENCRYPTDECRYPT_KEY;
        // Convert our plaintext into a byte array.
        // Let us assume that plaintext contains UTF8-encoded characters.
        byte[] plainTextBytes = Encoding.UTF8.GetBytes(plainText);
        // Use the password to generate pseudo-random bytes for the encryption
        // key. Specify the size of the key in bytes (instead of bits).
        ASCIIEncoding encoding = new ASCIIEncoding();
        byte[] keyBytes = new byte[16];
        byte[] tempKey = encoding.GetBytes(encryptionKey);
        for (int i = 0; i < keyBytes.Length; i++)
        {
            if (i < tempKey.Length)
            {
                keyBytes[i] = tempKey[i];
            }
            else
            {
                keyBytes[i] = 0;
            }
        }
        // Create uninitialized Rijndael encryption object.
        RijndaelManaged symmetricKey = new RijndaelManaged();
        //AesManaged symmetricKey = new AesManaged();

        //symmetricKey.Padding = PaddingMode.PKCS7;
        // It is reasonable to set encryption mode to Cipher Block Chaining
        // (CBC). Use default options for other symmetric key parameters.
        symmetricKey.Mode = CipherMode.ECB;
        // Generate encryptor from the existing key bytes and initialization 
        // vector. Key size will be defined based on the number of the key 
        // bytes.
        //ICryptoTransform encryptor = symmetricKey.CreateEncryptor(keyBytes,initVectorBytes);
        ICryptoTransform encryptor = symmetricKey.CreateEncryptor(keyBytes, null);
        // Define memory stream which will be used to hold encrypted data.
        MemoryStream memoryStream = new MemoryStream();
        // Define cryptographic stream (always use Write mode for encryption).
        CryptoStream cryptoStream = new CryptoStream(memoryStream,
                                                     encryptor,
                                                     CryptoStreamMode.Write);
        // Start encrypting.
        cryptoStream.Write(plainTextBytes, 0, plainTextBytes.Length);
        // Finish encrypting.
        cryptoStream.FlushFinalBlock();
        // Convert our encrypted data from a memory stream into a byte array.
        byte[] cipherTextBytes = memoryStream.ToArray();
        // Close both streams.
        memoryStream.Close();
        cryptoStream.Close();
        // Convert encrypted data into a base64-encoded string.
        string cipherText = Convert.ToBase64String(cipherTextBytes);
        // Return encrypted string.
        return cipherText;
    }

样本输出

PHP: Q54nP/tXq2rDTUwWw4ckkg==

.net: Q54nP/tXq2rDTUwWw4ckkpSt9CQiIzsg2xsQEndcqc8=

PHP: DQZdAB/lABXVOOoCdNM6HQ==

.net: DQZdAB/lABXVOOoCdNM6HZSt9CQiIzsg2xsQEndcqc8=

在上面的问题中,.net输出的右侧总是相同的,左侧在两个实现之间是一致的。我很确定IV是无关紧要的,这与填充如何在加密中处理有关。

如果我在PHP中解密任何一个输出,它都会返回相同的正确结果。

有谁能透露点什么吗?我无法改变。net应用程序。谢谢!

这是由于在。net中应用了填充。您可以通过在。net代码中添加以下行来克服这个问题:

symmetricKey.Padding = PaddingMode.None;

或者您可以更改PHP代码以获得相同的加密字符串:

// Add the lines below to your fnEncrypt function
$block = mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_ECB);
$len = strlen($value);
$padding = $block - ($len % $block);
$value .= str_repeat(chr($padding),$padding);

一个类似的问题在PHP手册页的注释中描述:http://www.php.net//manual/en/function.mcrypt-encrypt.php#47973