openssl_aes_cbc.cpp
9.73 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
#include "stdafx.h"
#include <fstream>
#include <exception>
#include <array>
#include <random>
#include <climits>
#include <chrono>
#include <windows.h>
namespace
{
const int kBlockSize = 16;
const int kKeyLength = 16;// 128Bit
const std::array<unsigned char, kKeyLength> kUserKey{ { 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'i', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'i' } };
const std::array<unsigned char, kKeyLength> kDCCK{ { '4', '3', '4', '3', '4', 'b', 'f', 'f', '4', '3', '4', '3', '4', 'b', 'f', 'f' } };
const std::array<unsigned char, kKeyLength> kDACK{ { '4', '1', '4', '3', '4', 'b', 'f', 'f', '4', '1', '4', '3', '4', 'b', 'f', 'f' } };
const std::array<unsigned char, kKeyLength> kDEAK{ { '4', '5', '4', '1', '4', 'b', 'f', 'f', '4', '5', '4', '1', '4', 'b', 'f', 'f' } };
const std::array<unsigned char, kKeyLength> kDAMK{ { '4', '1', '4', 'd', '4', 'b', '3', '1', '4', '1', '4', 'd', '4', 'b', '3', '1' } };
class AesCbcInterface
{
typedef struct AesKeySt
{
unsigned int rd_key[60];
int rounds;
}AES_KEY;
enum CryptType
{
AesDecrypt = 0,
AesEncrypt = 1
};
typedef int(__cdecl *AesSetEncryptKey)(const unsigned char *userKey, const int bits, AES_KEY *key);
typedef int(__cdecl *AesSetDecryptKey)(const unsigned char *userKey, const int bits, AES_KEY *key);
typedef void(__cdecl *AesCbcEncrypt)(const unsigned char *in, unsigned char *out,
size_t length, const AES_KEY *key, unsigned char *ivec, const int enc);
public:
AesCbcInterface(const std::array<unsigned char, kKeyLength>& user_key, const std::array<unsigned char, kKeyLength>& dcck,
const std::array<unsigned char, kKeyLength>& dack, const std::array<unsigned char, kKeyLength>& deak,
const std::array<unsigned char, kKeyLength>& damk)
: m_user_key(user_key), m_dcck_key(dcck), m_dack_key(dack), m_deak_key(deak), m_damk_key(damk)
{
Init();
}
const std::string Encrypt(const std::string& plaintext, int iKeyIndex = 0) const
{
unsigned char c_plaintext[kBlockSize];
unsigned char c_ciphertext[kBlockSize];
unsigned char iv[kBlockSize];
std::default_random_engine generator((unsigned int)std::chrono::system_clock::now().time_since_epoch().count());
std::uniform_int_distribution<int> distribution(0, UCHAR_MAX);// Make generates number in the range of unsigned char value space.
for (int index = 0; index < kBlockSize; ++index)
iv[index] = distribution(generator);
unsigned int kKeyBits = m_user_key.size() * 8;
AES_KEY aes_key;
switch (iKeyIndex)
{
case 0:
{
m_fn_aes_set_encrypt_key(m_user_key.data(), kKeyBits, &aes_key);
break;
}
case 1:
{
m_fn_aes_set_encrypt_key(m_dcck_key.data(), kKeyBits, &aes_key);
break;
}
case 2:
{
m_fn_aes_set_encrypt_key(m_dack_key.data(), kKeyBits, &aes_key);
break;
}
case 3:
{
m_fn_aes_set_encrypt_key(m_deak_key.data(), kKeyBits, &aes_key);
break;
}
case 4:
{
m_fn_aes_set_encrypt_key(m_damk_key.data(), kKeyBits, &aes_key);
break;
}
}
std::string ciphertext;
ciphertext.append((char*)iv, kBlockSize);// 保存iv数据
// 对明文长度加密保存
const int kPlaintextLength = plaintext.length();
std::string ciphertext_length = std::to_string(kPlaintextLength);
memset(c_ciphertext, '\0', kBlockSize);
memset(c_plaintext, '\0', kBlockSize);
memcpy(c_plaintext, ciphertext_length.c_str(), ciphertext_length.length());
m_fn_aes_cbc_encrypt(c_plaintext, c_ciphertext, kBlockSize, &aes_key, iv, AesEncrypt);
ciphertext.append((char*)c_ciphertext, kBlockSize);
memcpy(iv, c_ciphertext, kBlockSize);// 同时,密文做iv数据,以备下次加密
int index = 0;
for (; index + kBlockSize < kPlaintextLength; index += kBlockSize)
{// 按块取出明文,做加密处理
memset(c_ciphertext, '\0', kBlockSize);// 密文空间清零
memcpy(c_plaintext, plaintext.c_str() + index, kBlockSize);//取出明文
m_fn_aes_cbc_encrypt(c_plaintext, c_ciphertext, kBlockSize, &aes_key, iv, AesEncrypt); // 加密,iv数据发生变化
ciphertext.append((char*)c_ciphertext, kBlockSize); //保存密文
memcpy(iv, c_ciphertext, kBlockSize);// 同时,密文做iv数据,以备下次加密
}
// 数据没有按块对齐时,尾部未对齐数据做加密
if (kPlaintextLength - index > 0)
{
memset(c_ciphertext, '\0', kBlockSize);
memset(c_plaintext, '\0', kBlockSize);
memcpy(c_plaintext, plaintext.c_str() + index, kPlaintextLength - index);
m_fn_aes_cbc_encrypt(c_plaintext, c_ciphertext, kBlockSize, &aes_key, iv, AesEncrypt);
ciphertext.append((char*)c_ciphertext, kBlockSize);
}
return ciphertext;
}
const std::string Decrypt(const std::string& ciphertext, int iKeyIndex = 0) const
{
unsigned char c_plaintext[kBlockSize];
unsigned char c_ciphertext[kBlockSize];
unsigned char iv[kBlockSize];
const int kKeyBits = m_user_key.size() * 8;
AES_KEY aes_key;
switch (iKeyIndex)
{
case 0:
{
m_fn_aes_set_decrypt_key(m_user_key.data(), kKeyBits, &aes_key);
break;
}
case 1:
{
m_fn_aes_set_decrypt_key(m_dcck_key.data(), kKeyBits, &aes_key);
break;
}
case 2:
{
m_fn_aes_set_decrypt_key(m_dack_key.data(), kKeyBits, &aes_key);
break;
}
case 3:
{
m_fn_aes_set_decrypt_key(m_deak_key.data(), kKeyBits, &aes_key);
break;
}
case 4:
{
m_fn_aes_set_decrypt_key(m_damk_key.data(), kKeyBits, &aes_key);
break;
}
}
std::string plaintext;
const int kCiphertextLength = ciphertext.length();
if (0 != kCiphertextLength % kBlockSize || kCiphertextLength < kBlockSize * 3)
throw std::exception("数据太少,或损坏!无法解密。");// 数据必须按块对齐且至少有3块数据【iv、长度、内容】
int index = 0;
memcpy(iv, ciphertext.c_str() + index, kBlockSize);// 读取iv数据
index += kBlockSize;
// 获取明文数据长度
memset(c_plaintext, '\0', kBlockSize);// 明文空间清零
memcpy(c_ciphertext, ciphertext.c_str() + index, kBlockSize);//取出密文
m_fn_aes_cbc_encrypt(c_ciphertext, c_plaintext, kBlockSize, &aes_key, iv, AesDecrypt);// 解密
const int kPlaintextLength = ::atoi((char*)c_plaintext);
memcpy(iv, c_ciphertext, kBlockSize); // 同时,密文做iv数据,以备下次加密
index += kBlockSize;
for (; index < kCiphertextLength; index += kBlockSize)
{
memset(c_plaintext, '\0', kBlockSize);// 明文空间清零
memcpy(c_ciphertext, ciphertext.c_str() + index, kBlockSize);//取出密文
m_fn_aes_cbc_encrypt(c_ciphertext, c_plaintext, kBlockSize, &aes_key, iv, AesDecrypt);// 解密
plaintext.append((char*)c_plaintext, kBlockSize);//保存明文
memcpy(iv, c_ciphertext, kBlockSize); // 同时,密文做iv数据,以备下次加密
}
if ((int)plaintext.length() > kPlaintextLength) // 去掉块补齐数据
plaintext.erase(kPlaintextLength, plaintext.length() - kPlaintextLength);
return plaintext;
}
private:
void Init()
{
const CString kDLLFile = L"./libeay32.dll";
m_dll_handle = LoadLibrary(kDLLFile);
if (NULL != m_dll_handle)
{
m_fn_aes_set_encrypt_key = (AesSetEncryptKey)GetProcAddress(m_dll_handle, "AES_set_encrypt_key");
m_fn_aes_set_decrypt_key = (AesSetDecryptKey)GetProcAddress(m_dll_handle, "AES_set_decrypt_key");
m_fn_aes_cbc_encrypt = (AesCbcEncrypt)GetProcAddress(m_dll_handle, "AES_cbc_encrypt");
}
else
throw std::exception(("Fail to load the OpenSSL-AEC-BCB DLL from path : " + wstr_2_str(kDLLFile)).c_str());
}
private:
const std::array<unsigned char, kKeyLength> m_user_key;
const std::array<unsigned char, kKeyLength> m_dcck_key;
const std::array<unsigned char, kKeyLength> m_dack_key;
const std::array<unsigned char, kKeyLength> m_deak_key;
const std::array<unsigned char, kKeyLength> m_damk_key;
HINSTANCE m_dll_handle;
AesSetEncryptKey m_fn_aes_set_encrypt_key;
AesSetDecryptKey m_fn_aes_set_decrypt_key;
AesCbcEncrypt m_fn_aes_cbc_encrypt;
};
const AesCbcInterface& GetAesCbcInterface()
{
static AesCbcInterface aes_cbc_interface(kUserKey, kDCCK, kDACK, kDEAK, kDAMK); // 出错会抛出异常
return aes_cbc_interface;
}
}
namespace AES_CBC
{
std::string Encrypt(const std::string& plaintext, int iKeyIndex)
{
return GetAesCbcInterface().Encrypt(plaintext, iKeyIndex);
}
std::string Decrypt(const std::string& ciphertext, int iKeyIndex)
{
return GetAesCbcInterface().Decrypt(ciphertext, iKeyIndex);
}
void EncryptToFile(const std::string& plaintext, const std::string& ciphertext_file_name)
{
std::ofstream ciphertext_file(ciphertext_file_name, std::ios_base::out | std::ios_base::binary);
if (!ciphertext_file.is_open())
throw std::exception("创建或打开密文文件失败!");
ciphertext_file << Encrypt(plaintext);
ciphertext_file.close();
}
std::string DecryptFromFile(const std::string& ciphertext_file_name)
{
std::ifstream ciphertext_file(ciphertext_file_name, std::ios_base::in | std::ios_base::binary);
if (!ciphertext_file.is_open())
throw std::exception("打开密文文件失败,请检查!");
std::string ciphertext((std::istreambuf_iterator<char>(ciphertext_file)), std::istreambuf_iterator<char>());
ciphertext_file.close();
return Decrypt(ciphertext);
}
void EncryptFileToFile(const std::string& plaintext_file_name, const std::string& ciphertext_file_name)
{
std::ifstream plaintext_file(plaintext_file_name, std::ios_base::in);
if (!plaintext_file.is_open())
throw std::exception("打开明文文件失败,请检查!");
std::string plaintext((std::istreambuf_iterator<char>(plaintext_file)), std::istreambuf_iterator<char>());
plaintext_file.close();
EncryptToFile(plaintext, ciphertext_file_name);
}
void DecryptFileToFile(const std::string& ciphertext_file_name, const std::string& plaintext_file_name)
{
std::ofstream plaintext_file(plaintext_file_name, std::ios_base::out);
if (!plaintext_file.is_open())
throw std::exception("创建或打开明文文件失败!");
plaintext_file << DecryptFromFile(ciphertext_file_name);
plaintext_file.close();
}
} // AES_CBC