当前位置：文江博客话题详情

解密php中使用aspEncrypt加密的字符串

发布于 2024-11-01 08:37:06 字数 353 浏览 5 评论 0原文

我需要与使用persits 的aspEncrypt 的asp 平台进行通信。任何人都可以提供一个如何使用 PHP 和 mcrypt 解码通过 aspEncrypt 例程创建的字符串的示例。

此链接提供了 aspEncrypt 的示例页面： http://support.persits.com/encrypt/demo_text.asp

所以如果我使用文本“Test”和键“test”提供了一个base64编码的字符串。我需要一个 php 示例，使用“test”键将此编码字符串转换回文本“Test”。

原文

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

浅沫记忆 2024-11-08 08:37:06

这就是我最终解决它的方法：

期望：

密钥已知
IV 已知（在我的情况下，编码数据的前 32 个字符）
加密文本已知

在我的特殊情况下，所有接收到的数据都进行了十六进制编码。
这意味着 IV 和加密文本。

function decrypt($sString, $sIv, $sKey, $iCipherAlg) {       
   $sDecrypted = mcrypt_decrypt($iCipherAlg, $sKey, $sString, MCRYPT_MODE_CBC, $sIv);
    return trim($sDecrypted);
}

function hex2bin($sData) {
    $iLen = strlen($sData);
    $sNewData = '';
    for($iCount=0;$iCount<$iLen;$iCount+=2) {
        $sNewData .= pack("C",hexdec(substr($sData,$iCount,2)));
    }
    return $sNewData;
} 

$sKey = 'this is my key';
// first 32 chars are IV
$sIv = hex2bin(substr($sEncodedData, 0, 32));
$sEncodedData = substr($sEncodedData, 32);
$sEncodedRaw = hex2bin($sEncodedData);
$sDecrypted = decrypt($sEncodedRaw, $sIv, $sKey, MCRYPT_RIJNDAEL_128);

相应的加密工作原理如下：

$sIv = mcrypt_create_iv(mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC), MCRYPT_RAND);
$sKey = 'this is my key';
$sContent = 'a lot of content';
$sEncrypted = bin2hex(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $sKey, $sContent, MCRYPT_MODE_CBC, $sIv));
$sFullEncodedText = bin2hex($sIv) . $sEncrypted;

This is how i finally solved it:

Expectation:

Key is known
IV is known (in my case, first 32 characters of encoded data)
Encrypted Text is known

In my special case all received data hex encoded.
This means IV and encrypted text.

function decrypt($sString, $sIv, $sKey, $iCipherAlg) {       
   $sDecrypted = mcrypt_decrypt($iCipherAlg, $sKey, $sString, MCRYPT_MODE_CBC, $sIv);
    return trim($sDecrypted);
}

function hex2bin($sData) {
    $iLen = strlen($sData);
    $sNewData = '';
    for($iCount=0;$iCount<$iLen;$iCount+=2) {
        $sNewData .= pack("C",hexdec(substr($sData,$iCount,2)));
    }
    return $sNewData;
} 

$sKey = 'this is my key';
// first 32 chars are IV
$sIv = hex2bin(substr($sEncodedData, 0, 32));
$sEncodedData = substr($sEncodedData, 32);
$sEncodedRaw = hex2bin($sEncodedData);
$sDecrypted = decrypt($sEncodedRaw, $sIv, $sKey, MCRYPT_RIJNDAEL_128);

A corresponding encryption works like that:

$sIv = mcrypt_create_iv(mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC), MCRYPT_RAND);
$sKey = 'this is my key';
$sContent = 'a lot of content';
$sEncrypted = bin2hex(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $sKey, $sContent, MCRYPT_MODE_CBC, $sIv));
$sFullEncodedText = bin2hex($sIv) . $sEncrypted;

回复收藏 0 原文

蔚蓝源自深海 2024-11-08 08:37:06

我遇到一个旧的 VBScript 项目，它使用 AspEncrypt 加密字符串，如下所示：

Function EncryptString(data, base64Iv)
    Set CM = Server.CreateObject("Persits.CryptoManager")
    Set Context = CM.OpenContextEx("Microsoft Enhanced RSA and AES Cryptographic Provider", "", True)
    Set Key = Context.GenerateKeyFromPassword("secret encryption password", calgSHA512, calgAES256)

    Set IVblob = CM.CreateBlob
    IVblob.Base64 = base64Iv
    Key.SetIV IVblob

    Set Blob = Key.EncryptText(data)
    EncryptString = Blob.Base64 & ":" & base64Iv
End Function

基于 GenerateKeyFromPassword 的参数，通过使用 SHA-512 对密码进行哈希处理来创建二进制密钥，并使用 aes 加密数据-256-cbc 算法。随机 Base64 编码的初始化向量附加到加密值的冒号后面。

这可以使用 OpenSSL 扩展在 PHP 中复制：

class Aes256Cbc
{
    private string $algo = 'aes-256-cbc';
    private string $key;
    private int $ivLen;

    public function __construct(string $password)
    {
        $this->key = hash('sha512', $password, true);
        $this->ivLen = openssl_cipher_iv_length($this->algo);
    }

    public function encrypt(string $data): string
    {
        $iv = random_bytes($this->ivLen);
        $ciphertext = openssl_encrypt($data, $this->algo, $this->key, OPENSSL_RAW_DATA, $iv);
        return base64_encode($ciphertext) . ':' . base64_encode($iv);
    }

    public function decrypt(string $encrypted): string
    {
        [$ctPart, $ivPart] = explode(':', $encrypted);
        $iv = base64_decode($ivPart);
        $ciphertext = base64_decode($ctPart);
        return openssl_decrypt($ciphertext, $this->algo, $this->key, OPENSSL_RAW_DATA, $iv);
    }
}

示例用法：

$aes = new Aes256Cbc("secret encryption password");
$decrypted = $aes->decrypt($someValue);

注意：如果在未设置初始化向量的情况下使用 AspEncrypt，则 IV 将是空字节序列。这个固定的 IV 可以在上面的 PHP 类中生成，如下所示：

$iv = str_repeat("\0", $this->ivLen);

I encountered an old VBScript project which was encrypting strings with AspEncrypt like this:

Function EncryptString(data, base64Iv)
    Set CM = Server.CreateObject("Persits.CryptoManager")
    Set Context = CM.OpenContextEx("Microsoft Enhanced RSA and AES Cryptographic Provider", "", True)
    Set Key = Context.GenerateKeyFromPassword("secret encryption password", calgSHA512, calgAES256)

    Set IVblob = CM.CreateBlob
    IVblob.Base64 = base64Iv
    Key.SetIV IVblob

    Set Blob = Key.EncryptText(data)
    EncryptString = Blob.Base64 & ":" & base64Iv
End Function

Based on the arguments to GenerateKeyFromPassword, a binary key is created by hashing the password with SHA-512, and data is encrypted with the aes-256-cbc algorithm. The random Base64-encoded initialization vector is appended to the encrypted value after a colon.

This can be replicated in PHP using the OpenSSL extension:

class Aes256Cbc
{
    private string $algo = 'aes-256-cbc';
    private string $key;
    private int $ivLen;

    public function __construct(string $password)
    {
        $this->key = hash('sha512', $password, true);
        $this->ivLen = openssl_cipher_iv_length($this->algo);
    }

    public function encrypt(string $data): string
    {
        $iv = random_bytes($this->ivLen);
        $ciphertext = openssl_encrypt($data, $this->algo, $this->key, OPENSSL_RAW_DATA, $iv);
        return base64_encode($ciphertext) . ':' . base64_encode($iv);
    }

    public function decrypt(string $encrypted): string
    {
        [$ctPart, $ivPart] = explode(':', $encrypted);
        $iv = base64_decode($ivPart);
        $ciphertext = base64_decode($ctPart);
        return openssl_decrypt($ciphertext, $this->algo, $this->key, OPENSSL_RAW_DATA, $iv);
    }
}

Example usage:

$aes = new Aes256Cbc("secret encryption password");
$decrypted = $aes->decrypt($someValue);

Note: if AspEncrypt was used without setting an initialization vector, the IV will be sequence of null bytes. This fixed IV could be generated in the above PHP class as follows: