如何在Angular 9中使用CryptoJS来获得相同的加密字符串，如C#Rfc2898DeriveBytes

Question

我试图使用CryptoJS将下面的C#代码转换为angular 9，因为当我试图将C#代码转换成angular时，它会给出不同的加密字符串。

如何使用CryptoJS将使用Rfc2898DeriveBytes的C#代码转换为angular 9？

C#代码：

public static string Encrypt(string clearText)
{
clearText = '123456';
let EncryptionKey:any = "secret key string";
let clearBytes :any= Encoding.Unicode.GetBytes(clearText);
using (Aes encryptor = Aes.Create())
{
Rfc2898DeriveBytes pdb = new Rfc2898DeriveBytes(EncryptionKey, new byte[] { 0x49, 0x76, 0x61, 0x6e, 0x20, 0x4d, 0x65, 0x64, 0x76, 0x65, 0x64, 0x65, 0x76 });
encryptor.Key = pdb.GetBytes(32);
encryptor.IV = pdb.GetBytes(16);
using (MemoryStream ms = new MemoryStream())
{
using (CryptoStream cs = new CryptoStream(ms, encryptor.CreateEncryptor(), CryptoStreamMode.Write))
{
cs.Write(clearBytes, 0, clearBytes.Length);
cs.Close();
}
clearText = Convert.ToBase64String(ms.ToArray());
}
}
return clearText;
}

Angular 9代码：

import * as CryptoJS from 'crypto-js';
encryptionKey: any = 'secret key string';
let encryptedStr = CryptoJS.AES.encrypt('123456', this.encryptionKey.trim()).toString();

有人能帮我使用angular 9获得相同的加密吗？

Answer 1

好吧，我知道人们可能不赞成将Stackoverflow作为it is not a code-writing service，但我发现这项挑战是一项很好的运动，因此：

let clearText = '123456';
let encryptionKey = CryptoJS.enc.Utf8.parse('secret key string');
let salt = CryptoJS.enc.Base64.parse('SXZhbiBNZWR2ZWRldg=='); // this is the byte array in .net fiddle

let iterations = 1000; // https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.rfc2898derivebytes?view=netcore-3.1
let keyAndIv = CryptoJS.PBKDF2(encryptionKey, salt, { keySize: 256/32 + 128/32, iterations: iterations, hasher: CryptoJS.algo.SHA1 }); // so PBKDF2 in CryptoJS is direct in that it
// always begins at the beginning of the password, whereas the .net
// implementation offsets by the last length each time .GetBytes() is called
// so we had to generate a Iv + Salt password and then split it
let hexKeyAndIv = CryptoJS.enc.Hex.stringify(keyAndIv);
let key = CryptoJS.enc.Hex.parse(hexKeyAndIv.substring(0, 64));
let iv = CryptoJS.enc.Hex.parse(hexKeyAndIv.substring(64, hexKeyAndIv.length));
// As you're using Encoding.Unicde in .net, we have to use CryptoJS.enc.Utf16LE here.
let encryptedStr = CryptoJS.AES.encrypt(CryptoJS.enc.Utf16LE.parse(clearText), key, {iv: iv}).toString();
console.log(encryptedStr)

JSFiddle：https://jsfiddle.net/nhupdk6q/1/

以下是我在.Net fiddle中使用的相应代码(遗憾的是，不允许在不登录的情况下"保存"(，我使用了带有System.Security.Cryptography.Algorithmsnuget包的.Net Core 3.1运行时。

using System;
using System.IO;
using System.Text;
using System.Security.Cryptography;
public class Program
{
public static void Main()
{
var clearText = "123456";
var EncryptionKey = "secret key string";
var clearBytes = Encoding.Unicode.GetBytes(clearText);
using (System.Security.Cryptography.Aes encryptor = Aes.Create())
{
Rfc2898DeriveBytes pdb = new Rfc2898DeriveBytes(EncryptionKey, new byte[] { 0x49, 0x76, 0x61, 0x6e, 0x20, 0x4d, 0x65, 0x64, 0x76, 0x65, 0x64, 0x65, 0x76 });
encryptor.Key = pdb.GetBytes(32);
encryptor.IV = pdb.GetBytes(16);
using (MemoryStream ms = new MemoryStream())
{     
using (CryptoStream cs = new CryptoStream(ms, encryptor.CreateEncryptor(), CryptoStreamMode.Write))
{
cs.Write(clearBytes, 0, clearBytes.Length);
cs.Close();
}
clearText = Convert.ToBase64String(ms.ToArray());
} 
}

Console.WriteLine(clearText);
}
}

两个列表都打印相同的字符串。

正如评论中提到的，最大的挑战是，由于.Net代码重新使用相同的PBKDF2实例，因此每个.GetBytes()调用本质上都是密码的下一个cb。(cb是.net代码中的参数名称https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.rfc2898derivebytes.getbytes?view=netcore-3.1#System_Security_Cryptography_Rfc2898验证字节_GetBytes_System_Int32_(

CryptoJS中的PBKDF2没有这个，所以我们需要调用它一次，同时获取Key和Iv，然后自己进行解析。