Node.js中重写Java AES 256 GCM加密(PBKDF2WithHmacSHA1)

Question

我在java中有以下代码用于加密纯文本：

private static final String SECRET_KEY = "SecKeyTest";
private static final String SALT = "thisIsSalt";

public String encrypt(String strToEncrypt) {
try {
byte[] iv = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
IvParameterSpec ivspec = new IvParameterSpec(iv);
SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256");
KeySpec spec = new PBEKeySpec(SECRET_KEY.toCharArray(), SALT.getBytes(), 65536, 256);
SecretKey tmp = factory.generateSecret(spec);
SecretKeySpec secretKey = new SecretKeySpec(tmp.getEncoded(), "AES");

GCMParameterSpec gcmParameterSpec = new GCMParameterSpec(128 , iv);
Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
cipher.init(Cipher.ENCRYPT_MODE, secretKey, gcmParameterSpec);
return Base64.getEncoder().encodeToString(cipher.doFinal(strToEncrypt.getBytes(StandardCharsets.UTF_8)));
} catch (Exception e) {
System.out.println("Error while encrypting: " + e.toString());
}
return null;
}

我必须使用NodeJ重写相同的内容，到目前为止我所做的：

const salt = "thisIsSalt";
const digest = 'sha256';
const aesSecretKey = "SecKeyTest";
module.exports = {
encrypt: function (plainText){
const key = crypto.pbkdf2Sync(aesSecretKey, salt, 65536, 32, digest); //key len 32bytes i.e 256bits
const iv = Buffer.from([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ]);
// AES 256 GCM Mode
var cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
// encrypt the given text
var encrypted = Buffer.concat([cipher.update(plainText, 'utf8'), cipher.final()]);
// extract the auth tag
var tag = cipher.getAuthTag();
// generate output
return Buffer.concat([Buffer.from(salt), iv, tag, encrypted]).toString('base64');

}

};

对于输入："；你好"：

Java:rgCx2SDSqio15M+0lViNAzW/lUmz

节点：dGhpc0lzU2FsdAAAAAAAAAAAAAAAAADSqio15M+0lViNAzW/lUmzrgCx2SA=

Answer 1

Java代码按此顺序隐式连接密文和标记。因此，为了在NodeJS代码中获得相同的结果，需要进行以下更改：

return Buffer.concat([encrypted, tag]).toString('base64');

然而，salt和IV不应该是静态的，而应该为每个密钥派生和加密随机生成。由于salt和IV是解密所必需的，并且两者都不是秘密的，因此它们与密文和标签一起传递，通常也被级联，例如：salt|IV|ciphertext|tag。