blocks|key|101081|text|您正在使用两个库，这两个库试图容纳严格地说是无效的输入。Rijndael需要16、24或32字节长的随机字节串的密钥。您需要提供一个13个字符的字符串。PHP库Mcrypt直接使用字符串(可能是utf8编码的)作为二进制输入，使用zero+pads+it+to+the+required+32+bytes作为MCRYPT_RIJNDAEL_256。另一方面，CryptoJS是decides+that+you+have+entered+something+like+a+passphrase+and+instead+uses+a+key+derivation+function+to+generate+a+32+byte+key。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|101082|此外，使用的加密算法甚至不匹配。Mcrypt为256位版本使用了原始Rijndael的一个很少实现的变体，而CryptoJS实现了Rijndael提案的广为人知的变体AES256。不过，这两个版本(MCRYPT_RIJNDAEL_128和AES128)的128位版本是相同的。|101083|稍后您将面临的第三个问题是，Mcrypt还使用了一种疯狂的填充方案来加密数据。由于Rijndael是块密码，它只能加密16、24或32字节的块(取决于变体-+AES总是使用16字节的块)。因为这样的数据必须被填充。Mcrypt以一种非注入的方式做到这一点，只需附加零。如果你只编码字符串，这对你来说不是什么大问题，因为utf8编码的字符串从来不包含零字节，所以你可以直接去掉它们(CryptoJS+even+supports+that+natively)。|101084|解决所有这些问题的最简单的方法是避免自己实现任何密码学(在没有广泛的主题知识的情况下，无论如何都强烈建议这样做)。您是否可以通过https传输您的敏感信息，https将使用TLS+(以前称为SSL)来加密和验证通道？|101085|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/manual/en/function.mcrypt-encrypt.php|1|https://code.google.com/p/crypto-js/#The_Cipher_Input|2|https://code.google.com/p/crypto-js/#Block_Modes_and_Padding^0|4A|J|37|11|0|58|3I|1|0|2R|J|0|5A|10|2|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@$9|Y|A|Z|B|C]]|D|@$9|10|A|11|1|12]|$9|13|A|14|1|15]]|E|$]]|$1|F|3|G|5|6|7|16|8|@$9|17|A|18|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|19|8|@]|D|@$9|1A|A|1B|1|1C]]|E|$]]|$1|J|3|K|5|6|7|1D|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|1E|8|@]|D|@]|E|$]]]|M|$N|$5|O|P|Q|E|$R|S]]|T|$5|O|P|Q|E|$R|U]]|V|$5|O|P|Q|E|$R|W]]]]

<p>You are using two libraries that try to accommodate input that is - strictly speaking - not valid. Rijndael requires keys that 16, 24 or 32 bytes long random byte strings. You provide a 13 character string. Mcrypt, the PHP library, uses the string (presumable utf8 encoded) directly as binary input and <a href="http://www.php.net/manual/en/function.mcrypt-encrypt.php" rel="nofollow">zero pads it to the required 32 bytes</a> for <code>MCRYPT_RIJNDAEL_256</code>. CryptoJS on the other hand <a href="https://code.google.com/p/crypto-js/#The_Cipher_Input" rel="nofollow">decides that you have entered something like a passphrase and instead uses a key derivation function to generate a 32 byte key</a>.</p>

<p>Furthermore the encryption algorithms used don't even match. Mcrypt uses a seldom implemented variant of the original Rijndael for the 256 bit version, while CryptoJS implements the widely known variant AES256 of the Rijndael proposal. The 128 bit version of both (<code>MCRYPT_RIJNDAEL_128</code> and AES128) are identical though.</p>

<p>The third problem you are about to face later is that Mcrypt also uses a crazy padding scheme for the data being encrypted. As Rijndael is a block cipher, it can only encrypt blocks of 16, 24 or 32 bytes (depending on the variant - AES always uses 16 byte blocks). As such data has to be padded. Mcrypt does this in a non-injective way by just appending zeros. If you are only encoding strings this will not be so much of a problem for you as utf8 encoded strings never contain zero bytes, so you can just strip them off (<a href="https://code.google.com/p/crypto-js/#Block_Modes_and_Padding" rel="nofollow">CryptoJS even supports that natively</a>).</p>

<p>The easiest fix to all these problems is to avoid having to implement any cryptography yourself (it is strongly discouraged anyway without a wide knowledge of the subject). Can you instead transmit your sensitive information over https which will use TLS (formerly called SSL) to encrypt and authenticate the channel?</p>


blocks|key|4607695|text|我也需要同样的东西，我写了一个简短的库，适用于CryptoJS+3.x和支持openssl。希望这能对你有所帮助，这里是https://github.com/brainfoolong/cryptojs-aes-php的源码和示例文件|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4607696|PHP库|4607697|/**
*+Decrypt+data+from+a+CryptoJS+json+encoding+string
*
*+@param+mixed+$passphrase
*+@param+mixed+$jsonString
*+@return+mixed
*/
function+cryptoJsAesDecrypt($passphrase,+$jsonString){
++++$jsondata+=+json_decode($jsonString,+true);
++++$salt+=+hex2bin($jsondata["s"]);
++++$ct+=+base64_decode($jsondata["ct"]);
++++$iv++=+hex2bin($jsondata["iv"]);
++++$concatedPassphrase+=+$passphrase.$salt;
++++$md5+=+array();
++++$md5[0]+=+md5($concatedPassphrase,+true);
++++$result+=+$md5[0];
++++for+($i+=+1;+$i+<+3;+$i%2B%2B)+{
++++++++$md5[$i]+=+md5($md5[$i+-+1].$concatedPassphrase,+true);
++++++++$result+.=+$md5[$i];
++++}
++++$key+=+substr($result,+0,+32);
++++$data+=+openssl_decrypt($ct,+'aes-256-cbc',+$key,+true,+$iv);
++++return+json_decode($data,+true);
}

/**
*+Encrypt+value+to+a+cryptojs+compatiable+json+encoding+string
*
*+@param+mixed+$passphrase
*+@param+mixed+$value
*+@return+string
*/
function+cryptoJsAesEncrypt($passphrase,+$value){
++++$salt+=+openssl_random_pseudo_bytes(8);
++++$salted+=+'';
++++$dx+=+'';
++++while+(strlen($salted)+<+48)+{
++++++++$dx+=+md5($dx.$passphrase.$salt,+true);
++++++++$salted+.=+$dx;
++++}
++++$key+=+substr($salted,+0,+32);
++++$iv++=+substr($salted,+32,16);
++++$encrypted_data+=+openssl_encrypt(json_encode($value),+'aes-256-cbc',+$key,+true,+$iv);
++++$data+=+array("ct"+=>+base64_encode($encrypted_data),+"iv"+=>+bin2hex($iv),+"s"+=>+bin2hex($salt));
++++return+json_encode($data);
}|code-block|syntax|javascript|4607698|Javascript库|4607699|var+CryptoJSAesJson+=+{
++++stringify:+function+(cipherParams)+{
++++++++var+j+=+{ct:+cipherParams.ciphertext.toString(CryptoJS.enc.Base64)};
++++++++if+(cipherParams.iv)+j.iv+=+cipherParams.iv.toString();
++++++++if+(cipherParams.salt)+j.s+=+cipherParams.salt.toString();
++++++++return+JSON.stringify(j);
++++},
++++parse:+function+(jsonStr)+{
++++++++var+j+=+JSON.parse(jsonStr);
++++++++var+cipherParams+=+CryptoJS.lib.CipherParams.create({ciphertext:+CryptoJS.enc.Base64.parse(j.ct)});
++++++++if+(j.iv)+cipherParams.iv+=+CryptoJS.enc.Hex.parse(j.iv)
++++++++if+(j.s)+cipherParams.salt+=+CryptoJS.enc.Hex.parse(j.s)
++++++++return+cipherParams;
++++}
}|4607700|示例Javascript|4607701|var+encrypted+=+CryptoJS.AES.encrypt(JSON.stringify("value+to+encrypt"),+"my+passphrase",+{format:+CryptoJSAesJson}).toString();
var+decrypted+=+JSON.parse(CryptoJS.AES.decrypt(encrypted,+"my+passphrase",+{format:+CryptoJSAesJson}).toString(CryptoJS.enc.Utf8));|4607702|示例PHP|4607703|$encrypted+=+cryptoJsAesEncrypt("my+passphrase",+"value+to+encrypt");
$decrypted+=+cryptoJsAesDecrypt("my+passphrase",+$encrypted);|4607704|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/brainfoolong/cryptojs-aes-php^0|1O|1C|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|14|8|@]|9|@$A|15|B|16|1|17]]|C|$]]|$1|D|3|E|5|6|7|18|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|19|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|1A|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|1B|8|@]|9|@]|C|$I|J]]|$1|O|3|P|5|6|7|1C|8|@]|9|@]|C|$]]|$1|Q|3|R|5|H|7|1D|8|@]|9|@]|C|$I|J]]|$1|S|3|T|5|6|7|1E|8|@]|9|@]|C|$]]|$1|U|3|V|5|H|7|1F|8|@]|9|@]|C|$I|J]]|$1|W|3|-4|5|6|7|1G|8|@]|9|@]|C|$]]]|X|$Y|$5|Z|10|11|C|$12|13]]]]

<p>I've required the same thing and i wrote a short library that works for CryptoJS 3.x and PHP with openssl support. Hope this helps, source plus example files here <a href="https://github.com/brainfoolong/cryptojs-aes-php" rel="noreferrer">https://github.com/brainfoolong/cryptojs-aes-php</a></p>

<h2>PHP Lib</h2>

<pre><code>/**
* Decrypt data from a CryptoJS json encoding string
*
* @param mixed $passphrase
* @param mixed $jsonString
* @return mixed
*/
function cryptoJsAesDecrypt($passphrase, $jsonString){
    $jsondata = json_decode($jsonString, true);
    $salt = hex2bin($jsondata["s"]);
    $ct = base64_decode($jsondata["ct"]);
    $iv  = hex2bin($jsondata["iv"]);
    $concatedPassphrase = $passphrase.$salt;
    $md5 = array();
    $md5[0] = md5($concatedPassphrase, true);
    $result = $md5[0];
    for ($i = 1; $i &lt; 3; $i++) {
        $md5[$i] = md5($md5[$i - 1].$concatedPassphrase, true);
        $result .= $md5[$i];
    }
    $key = substr($result, 0, 32);
    $data = openssl_decrypt($ct, 'aes-256-cbc', $key, true, $iv);
    return json_decode($data, true);
}

/**
* Encrypt value to a cryptojs compatiable json encoding string
*
* @param mixed $passphrase
* @param mixed $value
* @return string
*/
function cryptoJsAesEncrypt($passphrase, $value){
    $salt = openssl_random_pseudo_bytes(8);
    $salted = '';
    $dx = '';
    while (strlen($salted) &lt; 48) {
        $dx = md5($dx.$passphrase.$salt, true);
        $salted .= $dx;
    }
    $key = substr($salted, 0, 32);
    $iv  = substr($salted, 32,16);
    $encrypted_data = openssl_encrypt(json_encode($value), 'aes-256-cbc', $key, true, $iv);
    $data = array("ct" =&gt; base64_encode($encrypted_data), "iv" =&gt; bin2hex($iv), "s" =&gt; bin2hex($salt));
    return json_encode($data);
}
</code></pre>

<h2>Javascript Lib</h2>

<pre><code>var CryptoJSAesJson = {
    stringify: function (cipherParams) {
        var j = {ct: cipherParams.ciphertext.toString(CryptoJS.enc.Base64)};
        if (cipherParams.iv) j.iv = cipherParams.iv.toString();
        if (cipherParams.salt) j.s = cipherParams.salt.toString();
        return JSON.stringify(j);
    },
    parse: function (jsonStr) {
        var j = JSON.parse(jsonStr);
        var cipherParams = CryptoJS.lib.CipherParams.create({ciphertext: CryptoJS.enc.Base64.parse(j.ct)});
        if (j.iv) cipherParams.iv = CryptoJS.enc.Hex.parse(j.iv)
        if (j.s) cipherParams.salt = CryptoJS.enc.Hex.parse(j.s)
        return cipherParams;
    }
}
</code></pre>

<h2>Example Javascript</h2>

<pre><code>var encrypted = CryptoJS.AES.encrypt(JSON.stringify("value to encrypt"), "my passphrase", {format: CryptoJSAesJson}).toString();
var decrypted = JSON.parse(CryptoJS.AES.decrypt(encrypted, "my passphrase", {format: CryptoJSAesJson}).toString(CryptoJS.enc.Utf8));
</code></pre>

<h2>Example PHP</h2>

<pre><code>$encrypted = cryptoJsAesEncrypt("my passphrase", "value to encrypt");
$decrypted = cryptoJsAesDecrypt("my passphrase", $encrypted);
</code></pre>


blocks|key|4607759|text|不要过于专注于编码，只要使用base64解码器即可|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4607760|在php代码中：|4607761|$encrypt_val=base64_encode("value");|code-block|syntax|javascript|4607762|而在js上只需：|4607763|var+my_orignal_val+=+window.atob(passed_val);|4607764|这将足以满足您的需求。|4607765|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

<p>Don't go too dept with coding, just use base64 decoder</p>

<p>on php code:</p>

<pre><code>$encrypt_val=base64_encode("value");
</code></pre>

<p>and on js just:</p>

<pre><code>var my_orignal_val = window.atob(passed_val);
</code></pre>

<p>This will enough for your requirement.</p>


<p>I'm having trouble with basic encryption/decryption. I've looked all around for a working example but haven't quite found a working example.</p>

<p>-I will be encrypting in php, decrypting with cryptojs for a small layer of security</p>

<pre><code>&lt;script src="http://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/aes.js"&gt;
&lt;?
$text = "this is the text here";
$key = "encryptionkey";

$msgEncrypted = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $text, MCRYPT_MODE_CBC, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));
$msgBase64 = trim(base64_encode($msgEncrypted));

echo "&lt;h2&gt;PHP&lt;/h2&gt;";
echo "&lt;p&gt;Encrypted:&lt;/p&gt;";
echo $msgEncrypted;
echo "&lt;p&gt;Base64:&lt;/p&gt;";
echo $msgBase64;
 ?&gt;

&lt;p&gt;AES Decrypt&lt;/p&gt;
&lt;script&gt; 
    var key = 'encryptionkey';
    var encrypted = "&lt;?php echo $msgBase64 ?&gt;";
    //tried  var base64decode = CryptoJS.enc.Base64.parse(encrypted); 
    var decrypted = CryptoJS.AES.decrypt(encrypted, key);
    console.log( decrypted.toString(CryptoJS.enc.Utf8) );
&lt;/script&gt;
</code></pre>

<p>Which step am I missing?</p>


Encrypt with PHP, Decrypt with Javascript (cryptojs)

JSON

我在基本的加密/解密方面有问题。我到处寻找一个有效的例子，但还没有找到一个有效的例子。-I将使用php进行加密，并使用cryptojs进行解密以获得较小的安全层。<script src="http://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/aes.j...

问用PHP加密，用Javascript解密(cryptojs)
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用PHP加密，用Javascript解密(cryptojs)EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用PHP加密，用Javascript解密(cryptojs)
EN