[英]AES/CBC/PKCS5Padding different results in JAVA and JNI
I have a Java code for encryption which looks like this 我有一个用于加密的Java代码,如下所示
byte[] encrypt(byte[] clearData) {
byte[] passwordKey = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E,0x0f};
byte[] rawSecretKey = new byte[]{0x34, (byte) 0xA4, 0x16, 0x09, 0x77, (byte) 0x85, (byte) 0xB4, 0x31,
0x75, 0x12, (byte) 0x92, (byte) 0xDD, (byte) 0xCA, 0x15, (byte) 0xAB, (byte) 0xBA};
secretKey = new SecretKeySpec(passwordKey, "AES");
ivParameterSpec = new IvParameterSpec(rawSecretKey);
Cipher aesCipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
aesCipher.init(Cipher.ENCRYPT_MODE, secretKey, ivParameterSpec);
byte[] encryptedData;
encryptedData = aesCipher.doFinal(clearData);
return encryptedData;
}
I have to port this code to JNI. 我必须将此代码移植到JNI。 I have build openssl and made JNI wrapper function which looks like this:
我建立了openssl并制作了JNI包装函数,如下所示:
JNIEXPORT jbyteArray JNICALL Java_axon_voiceassistant_utils_JNIUtils_getcr(JNIEnv *env, jclass cls, jbyteArray srcData)
{
int srcLen=env->GetArrayLength(srcData);
unsigned char* indata = new unsigned char[srcLen];
env->GetByteArrayRegion (srcData, 0, srcLen, reinterpret_cast<jbyte*>(indata));
const unsigned char ukey[] = {0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E,0x0f};
unsigned char iv [] = {0x34, 0xA4, 0x16, 0x09, 0x77,0x85, 0xB4, 0x31,
0x75, 0x12, 0x92,0xDD, 0xCA, 0x15, 0xAB, 0xBA};
const size_t encs_length = ((srcLen + AES_BLOCK_SIZE) / AES_BLOCK_SIZE) * AES_BLOCK_SIZE;
unsigned char enc_data[encs_length];
memset(enc_data, 0, sizeof(enc_data));
AES_KEY key;
memset(&key, 0, sizeof(AES_KEY));
AES_set_encrypt_key(ukey, 128, &key);
AES_cbc_encrypt(indata, enc_data, srcLen, &key, iv, AES_ENCRYPT);
jbyteArray bArray = env->NewByteArray(encs_length);
jboolean isCopy;
void *enc_copy = env->GetPrimitiveArrayCritical((jarray)bArray, &isCopy);
memcpy(enc_copy, enc_data, encs_length);
env->ReleasePrimitiveArrayCritical( bArray, enc_copy, 0);
return bArray;
}
But I don't get same results with the JNI version as with the Java version. 但是,使用JNI版本不会获得与使用Java版本相同的结果。 What could be the problem?
可能是什么问题呢?
You've zero padded your plaintext in your JNI code: 您已在JNI代码中零填充了纯文本:
const size_t encs_length = ((srcLen + AES_BLOCK_SIZE) / AES_BLOCK_SIZE) * AES_BLOCK_SIZE;
unsigned char enc_data[encs_length];
memset(enc_data, 0, sizeof(enc_data));
But your Java code is using PKCS #7 padding. 但是您的Java代码使用的是PKCS#7填充。 One of these will need to change.
其中之一将需要更改。
Note: I think (based on some research) that AES_cbc_encrypt
does zero padding by default, so the step where you've done this yourself might be redundant. 注意:我认为(基于一些研究)默认情况下,
AES_cbc_encrypt
执行零填充,因此您自己执行此操作的步骤可能是多余的。
To fix this, either implement PKCS #7 padding by hand in your JNI code (it's actually very easy), or consider using the higher-level EVP functions, which understand how to pad data. 要解决此问题,请在您的JNI代码中手动实现PKCS#7填充(这实际上非常简单),或者考虑使用了解如何填充数据的高级EVP函数。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.