使用vb.net AES/CBC加密字符串並需要使用JavaScript解密CryptoJS

Question

我有一個vb.net Windows窗體應用程序，它將字符串加密爲文件。我現在需要JavaScript來解密這個值。我曾嘗試使用CryptoJS，但我正在努力學習語法以及如何獲得密碼，salt和init向量以正確的格式用於CryptoJS.PBKDF2（假設這是正確的使用方式）。

調用方法

Dim encryptedComplianceValue = encrypt2(complianceValue, "Password", "Salt Value", "SHA1", 2, "@1B2c3D4e5F6g7H8", 256) 

加密方法

Public Function encrypt2(ByVal plainText As String, ByVal passPhrase As String, ByVal saltValue As String, ByVal hashAlgorithm As String, ByVal passwordIterations As Integer, ByVal initVector As String, ByVal keySize As Integer) As String 

    Dim initVectorBytes As Byte() 
    initVectorBytes = Encoding.ASCII.GetBytes(initVector) 

    Dim saltValueBytes As Byte() 
    saltValueBytes = Encoding.ASCII.GetBytes(saltValue) 

    Dim plainTextBytes As Byte() 
    plainTextBytes = Encoding.UTF8.GetBytes(plainText) 

    Dim password As Rfc2898DeriveBytes 
    password = New Rfc2898DeriveBytes(passPhrase, saltValueBytes, passwordIterations) 

    Dim keyBytes As Byte() 
    keyBytes = password.GetBytes(keySize/8) 

    Dim symmetricKey As RijndaelManaged 
    symmetricKey = New RijndaelManaged() 

    symmetricKey.Mode = CipherMode.CBC 

    Dim encryptor As ICryptoTransform 
    encryptor = symmetricKey.CreateEncryptor(keyBytes, initVectorBytes) 

    Dim memoryStream As MemoryStream 
    memoryStream = New MemoryStream() 

    Dim cryptoStream As CryptoStream 
    cryptoStream = New CryptoStream(memoryStream, encryptor, CryptoStreamMode.Write) 
    cryptoStream.Write(plainTextBytes, 0, plainTextBytes.Length) 
    cryptoStream.FlushFinalBlock() 

    Dim cipherTextBytes As Byte() 
    cipherTextBytes = memoryStream.ToArray() 

    memoryStream.Close() 
    cryptoStream.Close() 

    Dim cipherText As String 
    cipherText = Convert.ToBase64String(cipherTextBytes) 

    Return cipherText 
End Function 

的JavaScript

function decryptMsg256() 
{ 
    var keySize = 256; 
    var iterations = 2; 
    var algorithm = 'AES-256-CBC'; 

    // the password that user provides 
    var userPass = "Password"; 
    console.log("user pass : " + userPass); 

    // get the encrypted msg 
    var encMsg64 = "v6shkblimfQMOoa8VxICjQ=="; 
    var encMsg = CryptoJS.enc.Base64.parse(encMsg64); 



    //var salt =CryptoJS.enc.Utf8.parse("Mon,07-Mar-2016 18:50:46 GMT"); 
    var salt = "Salt Value"; 
    console.log('salt: '+ salt); 
    var saltbytes = []; 

    for (var i = 0; i <salt.length; ++i) { 
     saltbytes .push(salt.charCodeAt(i)); 
    } 
    console.log('saltbytes: '+ saltbytes ); 

    //var iv =CryptoJS.enc.Utf8.parse("@1B2c3D4e5F6g7H8"); 
    var iv = "@1B2c3D4e5F6g7H8"; 
    console.log('IV: '+ iv); 
    var ivbytes = []; 

    for (var i = 0; i <iv.length; ++i) { 
     ivbytes.push(iv.charCodeAt(i)); 
    } 
    console.log('ivbytes: '+ ivbytes ); 

    //var saltBuffer = new Buffer(salt); 
    //var passwordBuffer = new Buffer(userPass); 

    var key = CryptoJS.PBKDF2(userPass, saltbytes,{keyBytes: 32,  iterations: 2 }); 
    //var key = CryptoJS.PBKDF2(userPass, salt, iterations, keySize/8); 
    //var decipher = CryptoJS.createDecipheriv(algorithm, key, iv); 

    console.log('key: '+ key); 
    var keybytes = []; 

    for (var i = 0; i <key.length; ++i) { 
     keybytes.push(key.charCodeAt(i)); 
    } 
    console.log('keybytes: '+ keybytes); 


    //var plainText="Hello, World!"; 

    //console.log('Plain Text '+ plainText); 

    //var encMsg = CryptoJS.AES.encrypt(plainText, key, { 
     //    iv:iv, 
      //   mode: CryptoJS.mode.CBC, 
      //    padding: CryptoJS.pad.Pkcs7 
    //  }); 


    //console.log('Encrypted Message '+ encMsg); 




    var decText = ''; 

    var decMsg = CryptoJS.AES.decrypt(encMsg, key, { 
        iv:iv, 
        mode: CryptoJS.mode.CBC, 
        //padding: CryptoJS.pad.Pkcs7 
        }); 
    //console.log("decryptedData = " + decMsg); 

    // convert to UTF8 string 
    decText = decMsg.toString(CryptoJS.enc.Utf8); 
    console.log("decryptedText = " + decText); 

} 

Answer 1

你有MULT IPLE問題：

• 你IV是一個簡單的ASCII字符串，這樣你就可以輕鬆地將其與

  var iv = CryptoJS.enc.Utf8.parse("@1B2c3D4e5F6g7H8"); 
  

• 解析爲二進制格式不要saltbytes.push(salt.charCodeAt(i));或使用自定義的「二進制」格式類似。您需要通過

  CryptoJS.enc.<Encoder>.parse(string) 
  

• 與keySize指定PBKDF2的輸出大小，而不是keyBytes使用CryptoJS」原生格式，這是可以：

  var key = CryptoJS.PBKDF2(userPass, salt, {keySize: 256/32,  iterations: 2 }); 
  

• 解密函數需要密文是一個CipherParams對象。好東西，鴨打字的工作原理：

  var decMsg = CryptoJS.AES.decrypt({ 
      ciphertext: encMsg 
  }, key, { 
      iv: iv 
  });