我正在编写一个基于crypto++库的类。该类为使用AES算法对数据进行编码和解码提供了一种简单的方法。这是我的代码:
class AESEncryption
{
public:
static std::string decrypt(const std::string& data, const std::string& password);
static std::string encrypt(const std::string& data, const std::string& password);
};
std::string AESEncryption::encrypt(const std::string& data, const std::string& password)
{
std::vector<CryptoPP::byte> key(password.begin(), password.end());
std::string result;
CryptoPP::ECB_Mode<CryptoPP::AES>::Encryption encryption;
encryption.SetKey(key.data(), key.size());
CryptoPP::StringSource(data, true, new CryptoPP::StreamTransformationFilter(encryption, new CryptoPP::StringSink(result)));
return result;
}
std::string AESEncryption::decrypt(const std::string& data, const std::string& password)
{
std::vector<CryptoPP::byte> key(password.begin(), password.end());
std::string result;
CryptoPP::ECB_Mode<CryptoPP::AES>::Decryption decryption;
decryption.SetKey(key.data(), key.size());
CryptoPP::StringSource(data, true, new CryptoPP::StreamTransformationFilter(decryption, new CryptoPP::StringSink(result)));
return result;
}
我开始使用标准fips197(第46页(的样本测试我的课程
这里是我的测试代码:
namespace
{
QByteArray key(QByteArray::fromHex("000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F"));
QByteArray plainText(QByteArray::fromHex("00112233445566778899AABBCCDDEEFF"));
QByteArray result(QByteArray::fromHex("8EA2B7CA516745BFEAFC49904B496089"));
}
TEST(AESEncrypt, Valid)
{
std::string key_str(key.begin(), key.end());
std::string paintText_str(plainText.begin(), plainText.end());
std::string expected_result(result.begin(), result.end());
auto result = AESEncryption::encrypt(paintText_str, key_str);
EXPECT_EQ(result, expected_result);
auto decrypt = AESEncryption::decrypt(result, key_str);
EXPECT_EQ(decrypt, paintText_str);
}
我得到了下一个结果:
Expected equality of these values:
result
Which is: "x8ExA2xB7xCAQgExBFxEAxFCIx90KI`x89x9F;ux4x92ox8BxD3n1x18xE9x3xA4xCDJ"
expected_result
Which is: "x8ExA2xB7xCAQgExBFxEAxFCIx90KI`x89"
我得到了无用的数据:
x9F;ux4x92ox8BxD3n1x18xE9x3xA4xCDJ
如何修复?我能做什么,它的加密符合标准?
Expected equality of these values: result Which is: "x8ExA2xB7xCAQgExBFxEAxFCIx90KI`x89x9F;ux4x92ox8BxD3n1x18xE9x3xA4xCDJ" expected_result Which is: "x8ExA2xB7xCAQgExBFxEAxFCIx90KI`x89"
如何修复?我能做什么,它的加密符合标准?
FIPS 197 ECB模式测试不带填充。然而,下面的代码使用PKCS填充,由于填充,它将添加额外的16个字节:
StringSource(data, true, new StreamTransformationFilter(encryption, new StringSink(result)));
更正确地说,ECB模式默认使用DEFAULT_PADDING
,这是ECB模式和CBC模式的PKCS_PADDING
。我认为你应该使用NO_PADDING
代替:
StringSource(data, true, new StreamTransformationFilter(encryption, new StringSink(result), NO_PADDING));
另请参阅StreamTransformationFilter
的文档。这就是你正在使用的过滤器的情况:
StreamTransformationFilter (
StreamTransformation &c,
BufferedTransformation *attachment=NULL,
BlockPaddingScheme padding=DEFAULT_PADDING)
关于"Crypto++AES与标准fips197不匹配">,您可以使用以下方法用FIPS 197测试矢量测试库(除了SP800-38(:
$ ./cryptest.exe tv aes
Using seed: 1544068124
Testing SymmetricCipher algorithm AES/ECB.
....
Testing SymmetricCipher algorithm AES/CBC.
........
Testing SymmetricCipher algorithm AES/CFB.
.......
Testing SymmetricCipher algorithm AES/OFB.
....
Testing SymmetricCipher algorithm AES/CTR.
.............