openssl加密 适用于 php+Java/Android

客户端 app 加密

/**
* @author xiaoxin
*/

import java.io.IOException;
import java.lang.reflect.Method;
import java.security.KeyFactory;
import java.security.NoSuchAlgorithmException;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.X509EncodedKeySpec;

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

import sun.misc.BASE64Decoder;

public class AESUtil {

private static final String ALGORITHM      = "AES";
private static final String TRANSFORMATION = "AES/CBC/PKCS7Padding";
private static final String SECRET_KEY     = "key-32-char-long";
private static final String SECRET_IV      = "111111111111111"; // 16位随机串

public static void main(String[] args) throws Exception{
String sf = "test";
String encrypt = encodeBase64(getCipher(Cipher.ENCRYPT_MODE).doFinal(sf.getBytes()));
// encrypt 打印的值 直接在在PHP代码中解密
System.out.println(encrypt);
}

/***
* encode by Base64
*/
public static String encodeBase64(byte[]input) throws Exception{
Class clazz=Class.forName("com.sun.org.apache.xerces.internal.impl.dv.util.Base64");
Method mainMethod= clazz.getMethod("encode", byte[].class);
mainMethod.setAccessible(true);
Object retObj=mainMethod.invoke(null, new Object[]{input});
return (String)retObj;
}
/***
* decode by Base64
*/
public static byte[] decodeBase64(String input) throws Exception{
Class clazz=Class.forName("com.sun.org.apache.xerces.internal.impl.dv.util.Base64");
Method mainMethod= clazz.getMethod("decode", String.class);
mainMethod.setAccessible(true);
Object retObj=mainMethod.invoke(null, input);
return (byte[])retObj;
}

private static Cipher getCipher(int ENCRYPT_MODE) throws Exception {

Cipher cipher = Cipher.getInstance(TRANSFORMATION ,new BouncyCastleProvider());
cipher.init(ENCRYPT_MODE, new SecretKeySpec(SECRET_KEY.getBytes(), ALGORITHM), new IvParameterSpec(SECRET_IV.getBytes()));

return cipher;
}

}

服务端 php 解密

<?php

$key = "key-32-char-long";
$cipher = "AES-256-CBC"; // 加密算法 填充模式 加密模式
$iv = "111111111111111"; // 16位随机串--与android端加密串参数保持一致，在此复用
$encrypt = "encrypt"; // android 端输出的信息
$toDectypt = openssl_decrypt($encrypt, $cipher, $key , 0 , $iv);

var_dump($toDectypt); // 正确输出 test