openresty aes 256 cbc 加密 to hex 跟php 相同算法出来的结果不一致

hello2t0403 · 2016-11-02T23:21:48+00:00

Hello在 2016年11月2日下午7:10，Zexuan Luo <spacew...@gmail.com>写道：个人&#x76...

openresty aes 256 cbc 加密 to hex 跟php 相同算法出来的结果不一致

hello2t0403

lua 源码：

local function pkcs7_padding(text)

local text_length = #text

local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then

amount_to_pad = 32

end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do

padding = padding .. pad

end

return text .. padding

end

local function encrypt ()

text = "Really"

local key = "11345678901234561234567890123456"

local iv = "1234567890123456"

text = pkcs7_padding(text)

ngx.print("pkcs7: " .. str.to_hex(text))

ngx.print(" ")

local aes_256_cbc_with_iv = assert(

aes:new(

key,

nil,

aes.cipher(256,"cbc"),

{iv=iv}

)

-- AES 128 CBC with IV and no SALT

local encrypted = aes_256_cbc_with_iv:encrypt(text)

ngx.print('encrypted: ' .. str.to_hex(encrypted))

ngx.exit(200)

end

openresty 输出：

pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：

pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码

<?php

$key = '11345678901234561234567890123456';

$iv = '1234567890123456';

$text = 'Really';

$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');

//使用自定义的填充方式对明文进行补位填充

$pkc_encoder = new PKCS7Encoder();

$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);

//加密

$encrypted = mcrypt_generic($module, $text);

mcrypt_generic_deinit($module);

mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);

exit();

class PKCS7Encoder

{

public static $block_size = 32;

public function encode($text)

{

$block_size = self::$block_size;

$text_length = strlen($text);

//计算需要填充的位数

$amount_to_pad = self::$block_size - ($text_length % self::$block_size);

if ($amount_to_pad == 0) {

$amount_to_pad = self::block_size;

}

//获得补位所用的字符

$pad_chr = chr($amount_to_pad);

$tmp = '';

for ($index = 0; $index < $amount_to_pad; $index++) {

$tmp .= $pad_chr;

}

return $text . $tmp;

}

wd

加密出来前面部分一致，后面不一样，那检查一下 padding 的逻辑？是不是 php 里面没 padding？

On Wed, Nov 2, 2016 at 11:21 PM, hello2t <hello...@gmail.com> wrote:

lua 源码：
local function pkcs7_padding(text)
local text_length = #text
local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then
amount_to_pad = 32
end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do
padding = padding .. pad
end

return text .. padding
end

local function encrypt ()
text = "Really"
local key = "11345678901234561234567890123456"
local iv = "1234567890123456"
text = pkcs7_padding(text)
ngx.print("pkcs7: " .. str.to_hex(text))
ngx.print(" ")
local aes_256_cbc_with_iv = assert(
aes:new(
key,
nil,
aes.cipher(256,"cbc"),
{iv=iv}
)
)
-- AES 128 CBC with IV and no SALT
local encrypted = aes_256_cbc_with_iv:encrypt(text)
ngx.print('encrypted: ' .. str.to_hex(encrypted))
ngx.exit(200)
end

openresty 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码
<?php
$key = '11345678901234561234567890123456';
$iv = '1234567890123456';

$text = 'Really';
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
//使用自定义的填充方式对明文进行补位填充
$pkc_encoder = new PKCS7Encoder();
$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);
//加密
$encrypted = mcrypt_generic($module, $text);
mcrypt_generic_deinit($module);
mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);
exit();

class PKCS7Encoder
{
public static $block_size = 32;
public function encode($text)
{
$block_size = self::$block_size;
$text_length = strlen($text);
//计算需要填充的位数
$amount_to_pad = self::$block_size - ($text_length % self::$block_size);
if ($amount_to_pad == 0) {
$amount_to_pad = self::block_size;
}
//获得补位所用的字符
$pad_chr = chr($amount_to_pad);
$tmp = '';
for ($index = 0; $index < $amount_to_pad; $index++) {
$tmp .= $pad_chr;
}
return $text . $tmp;
}
}

--

hello2t0403

padding 出来的数据都是一样的，就经过加密后发现不一致，通过php 解密openresty 加密的数据可以看到后面多了一些填充字节，应该是aes 里面的逻辑。

openresty 输出：

pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：

pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

在 2016年11月3日星期四 UTC+8下午1:30:08，wd写道：

加密出来前面部分一致，后面不一样，那检查一下 padding 的逻辑？是不是 php 里面没 padding？

On Wed, Nov 2, 2016 at 11:21 PM, hello2t <hello...@gmail.com> wrote:
lua 源码：
local function pkcs7_padding(text)
local text_length = #text
local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then
amount_to_pad = 32
end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do
padding = padding .. pad
end

return text .. padding
end

local function encrypt ()
text = "Really"
local key = "11345678901234561234567890123456"
local iv = "1234567890123456"
text = pkcs7_padding(text)
ngx.print("pkcs7: " .. str.to_hex(text))
ngx.print(" ")
local aes_256_cbc_with_iv = assert(
aes:new(
key,
nil,
aes.cipher(256,"cbc"),
{iv=iv}
)
)
-- AES 128 CBC with IV and no SALT
local encrypted = aes_256_cbc_with_iv:encrypt(text)
ngx.print('encrypted: ' .. str.to_hex(encrypted))
ngx.exit(200)
end

openresty 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码
<?php
$key = '11345678901234561234567890123456';
$iv = '1234567890123456';

$text = 'Really';
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
//使用自定义的填充方式对明文进行补位填充
$pkc_encoder = new PKCS7Encoder();
$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);
//加密
$encrypted = mcrypt_generic($module, $text);
mcrypt_generic_deinit($module);
mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);
exit();

class PKCS7Encoder
{
public static $block_size = 32;
public function encode($text)
{
$block_size = self::$block_size;
$text_length = strlen($text);
//计算需要填充的位数
$amount_to_pad = self::$block_size - ($text_length % self::$block_size);
if ($amount_to_pad == 0) {
$amount_to_pad = self::block_size;
}
//获得补位所用的字符
$pad_chr = chr($amount_to_pad);
$tmp = '';
for ($index = 0; $index < $amount_to_pad; $index++) {
$tmp .= $pad_chr;
}
return $text . $tmp;
}
}

--

hello2t0403

lua 层面的padding 没问题。。。原因是经过openssl aes 加密时候，多做了一次padding导致的

@春哥，这个啥时候会出来呢？

https://github.com/openresty/lua-resty-string/pull/35

在 2016年11月2日星期三 UTC+8下午11:21:49，hello2t写道：

lua 源码：
local function pkcs7_padding(text)
local text_length = #text
local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then
amount_to_pad = 32
end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do
padding = padding .. pad
end

return text .. padding
end

local function encrypt ()
text = "Really"
local key = "11345678901234561234567890123456"
local iv = "1234567890123456"
text = pkcs7_padding(text)
ngx.print("pkcs7: " .. str.to_hex(text))
ngx.print(" ")
local aes_256_cbc_with_iv = assert(
aes:new(
key,
nil,
aes.cipher(256,"cbc"),
{iv=iv}
)
)
-- AES 128 CBC with IV and no SALT
local encrypted = aes_256_cbc_with_iv:encrypt(text)
ngx.print('encrypted: ' .. str.to_hex(encrypted))
ngx.exit(200)
end

openresty 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码
<?php
$key = '11345678901234561234567890123456';
$iv = '1234567890123456';

$text = 'Really';
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
//使用自定义的填充方式对明文进行补位填充
$pkc_encoder = new PKCS7Encoder();
$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);
//加密
$encrypted = mcrypt_generic($module, $text);
mcrypt_generic_deinit($module);
mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);
exit();

class PKCS7Encoder
{
public static $block_size = 32;
public function encode($text)
{
$block_size = self::$block_size;
$text_length = strlen($text);
//计算需要填充的位数
$amount_to_pad = self::$block_size - ($text_length % self::$block_size);
if ($amount_to_pad == 0) {
$amount_to_pad = self::block_size;
}
//获得补位所用的字符
$pad_chr = chr($amount_to_pad);
$tmp = '';
for ($index = 0; $index < $amount_to_pad; $index++) {
$tmp .= $pad_chr;
}
return $text . $tmp;
}
}

doujiang24

Hello

2016-11-03 18:30 GMT+08:00 hello2t <hello...@gmail.com>:

lua 层面的padding 没问题。。。原因是经过openssl aes 加密时候，多做了一次padding导致的

@春哥，这个啥时候会出来呢？
https://github.com/openresty/lua-resty-string/pull/35

如果你着急的话，你可以先用这个 PR 的实现

新版本估计赶不上了（春哥正在发 1.11.2.2）

在 2016年11月2日星期三 UTC+8下午11:21:49，hello2t写道：
lua 源码：
local function pkcs7_padding(text)
local text_length = #text
local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then
amount_to_pad = 32
end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do
padding = padding .. pad
end

return text .. padding
end

local function encrypt ()
text = "Really"
local key = "11345678901234561234567890123456"
local iv = "1234567890123456"
text = pkcs7_padding(text)
ngx.print("pkcs7: " .. str.to_hex(text))
ngx.print(" ")
local aes_256_cbc_with_iv = assert(
aes:new(
key,
nil,
aes.cipher(256,"cbc"),
{iv=iv}
)
)
-- AES 128 CBC with IV and no SALT
local encrypted = aes_256_cbc_with_iv:encrypt(text)
ngx.print('encrypted: ' .. str.to_hex(encrypted))
ngx.exit(200)
end

openresty 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码
<?php
$key = '11345678901234561234567890123456';
$iv = '1234567890123456';

$text = 'Really';
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
//使用自定义的填充方式对明文进行补位填充
$pkc_encoder = new PKCS7Encoder();
$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);
//加密
$encrypted = mcrypt_generic($module, $text);
mcrypt_generic_deinit($module);
mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);
exit();

class PKCS7Encoder
{
public static $block_size = 32;
public function encode($text)
{
$block_size = self::$block_size;
$text_length = strlen($text);
//计算需要填充的位数
$amount_to_pad = self::$block_size - ($text_length % self::$block_size);
if ($amount_to_pad == 0) {
$amount_to_pad = self::block_size;
}
//获得补位所用的字符
$pad_chr = chr($amount_to_pad);
$tmp = '';
for ($index = 0; $index < $amount_to_pad; $index++) {
$tmp .= $pad_chr;
}
return $text . $tmp;
}
}

--

hello2t0403

已用，问题已经解决。谢谢doujiang

在 2016年11月4日星期五 UTC+8上午10:27:03，doujiang写道：

Hello

2016-11-03 18:30 GMT+08:00 hello2t <hello...@gmail.com>:
lua 层面的padding 没问题。。。原因是经过openssl aes 加密时候，多做了一次padding导致的

@春哥，这个啥时候会出来呢？
https://github.com/openresty/lua-resty-string/pull/35

如果你着急的话，你可以先用这个 PR 的实现
新版本估计赶不上了（春哥正在发 1.11.2.2）

在 2016年11月2日星期三 UTC+8下午11:21:49，hello2t写道：
lua 源码：
local function pkcs7_padding(text)
local text_length = #text
local amount_to_pad = 32 - (text_length % 32)

if amount_to_pad == 0 then
amount_to_pad = 32
end

local padding = ""

local pad = string.char(amount_to_pad)

for i = 1, amount_to_pad do
padding = padding .. pad
end

return text .. padding
end

local function encrypt ()
text = "Really"
local key = "11345678901234561234567890123456"
local iv = "1234567890123456"
text = pkcs7_padding(text)
ngx.print("pkcs7: " .. str.to_hex(text))
ngx.print(" ")
local aes_256_cbc_with_iv = assert(
aes:new(
key,
nil,
aes.cipher(256,"cbc"),
{iv=iv}
)
)
-- AES 128 CBC with IV and no SALT
local encrypted = aes_256_cbc_with_iv:encrypt(text)
ngx.print('encrypted: ' .. str.to_hex(encrypted))
ngx.exit(200)
end

openresty 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a47ad9cec4105f500a67d8996fd30b1e3

php 输出：
pkcs7: 5265616c6c791a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a
encrypted: 0cdcd2f5ac84043d32daa0401ab3026a3fd2f7a9bd7dd5ba62a6ce82f8bc544a

php 源码
<?php
$key = '11345678901234561234567890123456';
$iv = '1234567890123456';

$text = 'Really';
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
//使用自定义的填充方式对明文进行补位填充
$pkc_encoder = new PKCS7Encoder();
$text = $pkc_encoder->encode($text);

echo 'pkcs7: ' . bin2hex($text);

echo ' ';

mcrypt_generic_init($module, $key, $iv);
//加密
$encrypted = mcrypt_generic($module, $text);
mcrypt_generic_deinit($module);
mcrypt_module_close($module);

echo 'encrypted: ' . bin2hex($encrypted);
exit();

class PKCS7Encoder
{
public static $block_size = 32;
public function encode($text)
{
$block_size = self::$block_size;
$text_length = strlen($text);
//计算需要填充的位数
$amount_to_pad = self::$block_size - ($text_length % self::$block_size);
if ($amount_to_pad == 0) {
$amount_to_pad = self::block_size;
}
//获得补位所用的字符
$pad_chr = chr($amount_to_pad);
$tmp = '';
for ($index = 0; $index < $amount_to_pad; $index++) {
$tmp .= $pad_chr;
}
return $text . $tmp;
}
}

--