标签:
本文采取128位AES-CBC模式加密和解密
1.首先对服务端安装mcrypt:
sudo apt-get install php5-mcrypt php5-dev
sudo php5enmod mcrypt
sudo service apache2 restart
2.PHP服务端AES加密类代码
class MCrypt { private $iv = ‘fedcba9876543210‘; //初始化向量iv public $key;//AES加密的密钥key //将密钥$key传进本类 function __construct($key) { $this->key=$key; } //加密 function encrypt($str) { //$key = $this->hex2bin($key); $iv = $this->iv; $td = mcrypt_module_open(‘rijndael-128‘, ‘‘, ‘cbc‘, $iv); mcrypt_generic_init($td, $this->key, $iv); $encrypted = mcrypt_generic($td, $str); \OCP\Util::writeLog(‘***MCrypt $key***‘, $this->key, \OCP\Util::ERROR); mcrypt_generic_deinit($td); mcrypt_module_close($td); return bin2hex($encrypted); } //解密 function decrypt($code) { //$key = $this->hex2bin($key); $code = $this->hex2bin($code); $iv = $this->iv; $td = mcrypt_module_open(‘rijndael-128‘, ‘‘, ‘cbc‘, $iv); mcrypt_generic_init($td, $this->key, $iv); $decrypted = mdecrypt_generic($td, $code); mcrypt_generic_deinit($td); mcrypt_module_close($td); return utf8_encode(trim($decrypted)); } protected function hex2bin($hexdata) { $bindata = ‘‘; for ($i = 0; $i < strlen($hexdata); $i += 2) { $bindata .= chr(hexdec(substr($hexdata, $i, 2))); } return $bindata; } }
4.PHP服务端调用ASE加密类代码:
$key="";//自己添加AES密钥 //将加密的key传进AES类 $mcrypt = new MCrypt($key); //对数据库中的密码进行AES加密 $psw = $mcrypt->encrypt();
5.Android服务端AES解密代码:
在Android中创建一个AESUtil类,需要用时调用
/** * AES解密: * 对服务器发回来的密码进行解密 * */ import java.io.UnsupportedEncodingException; import java.security.MessageDigest; import java.security.NoSuchAlgorithmException; import javax.crypto.Cipher; import javax.crypto.NoSuchPaddingException; import javax.crypto.spec.IvParameterSpec; import javax.crypto.spec.SecretKeySpec; import com.pcloud.android.ui.activity.FirstAuthenActivity; public class AESUtil { private String iv = "fedcba9876543210";//虚拟的 iv。和服务端要保持一致 private IvParameterSpec ivspec; private SecretKeySpec keyspec; private Cipher cipher; // private String SecretKey = "";//虚拟的 密钥 String msgToken=FirstAuthenActivity.msgToken; //String msgUrl=FirstAuthenActivity.msgUrl; String msgRandom=FirstAuthenActivity.msgRandom; //把随机数和tokenid进行MD5操作来作为AES密钥,和服务端的AES加密密钥要保持一致 String SecretKey=stringToMD5(msgToken+msgRandom); public AESUtil() { ivspec = new IvParameterSpec(iv.getBytes()); keyspec = new SecretKeySpec(SecretKey.getBytes(), "AES"); try { cipher = Cipher.getInstance("AES/CBC/NoPadding"); } catch (NoSuchAlgorithmException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (NoSuchPaddingException e) { // TODO Auto-generated catch block e.printStackTrace(); } } public byte[] encrypt(String text) throws Exception { if(text == null || text.length() == 0) throw new Exception("Empty string"); byte[] encrypted = null; try { cipher.init(Cipher.ENCRYPT_MODE, keyspec, ivspec); encrypted = cipher.doFinal(padString(text).getBytes()); } catch (Exception e) { throw new Exception("[encrypt] " + e.getMessage()); } return encrypted; } public byte[] decrypt(String code) throws Exception { if(code == null || code.length() == 0) throw new Exception("Empty string"); byte[] decrypted = null; try { cipher.init(Cipher.DECRYPT_MODE, keyspec, ivspec); decrypted = cipher.doFinal(hexToBytes(code)); } catch (Exception e) { throw new Exception("[decrypt] " + e.getMessage()); } return decrypted; } public static String bytesToHex(byte[] data) { if (data==null) { return null; } int len = data.length; String str = ""; for (int i=0; i<len; i++) { if ((data[i]&0xFF)<16) str = str + "0" + java.lang.Integer.toHexString(data[i]&0xFF); else str = str + java.lang.Integer.toHexString(data[i]&0xFF); } return str; } public static byte[] hexToBytes(String str) { if (str==null) { return null; } else if (str.length() < 2) { return null; } else { int len = str.length() / 2; byte[] buffer = new byte[len]; for (int i=0; i<len; i++) { buffer[i] = (byte) Integer.parseInt(str.substring(i*2,i*2+2),16); } return buffer; } } private static String padString(String source) { char paddingChar = ‘ ‘; int size = 16; int x = source.length() % size; int padLength = size - x; for (int i = 0; i < padLength; i++) { source += paddingChar; } return source; }
6.Android客户端调用AES类进行解密:
//调用AES解密 AESUtil mcrypt; mcrypt = new AESUtil(); try { //对收到的密码进行AES解密 String decrypted = new String( mcrypt.decrypt( rec[1]) ); Log.d("解密的:",decrypted); } catch (Exception e) { // TODO 自动生成的 catch 块 e.printStackTrace(); }
[PHP]AES加密----PHP服务端和Android客户端
标签:
原文地址:http://www.cnblogs.com/liangxuehui/p/4651322.html