javascript - CryptoJS AES and Java AES encrypted value mismatch -


i trying encrypt in client , decrypt in sever using aes, using cryptojs encrypt in client side cbc mode , nopadding in server side using cipher class same mode , nopadding 

function call() {   var key = cryptojs.enc.hex.parse('roshanmathew1989');   var iv  = cryptojs.enc.hex.parse('roshanmathew1989');   var encrypted = cryptojs.aes.encrypt("roshanmathew1989",key,{ iv: iv},       {padding:cryptojs.pad.nopadding});   alert(encrypted.ciphertext.tostring(cryptojs.enc.base64));   alert(encrypted.iv.tostring()); }

server side code

public class crypto {     private static byte[] key = null;    public void setkey(string key){this.key=key.getbytes();}    public string encrypt(string strtoencrypt)   {     string encryptedstring =null;     try     {       cipher cipher = cipher.getinstance("aes/cbc/nopadding");       final secretkeyspec secretkey = new secretkeyspec(key,"aes");       system.out.println("sdfsdf = "+key.tostring());       ivparameterspec ips = new ivparameterspec(key);       cipher.init(cipher.encrypt_mode, secretkey,ips);       encryptedstring = base64.encodebase64string(cipher.dofinal(strtoencrypt.getbytes()));     }     catch(exception e)     {       system.out.println(" error : "+e.getmessage());     }     return encryptedstring;    } other method omitted ....

implementation

crypto cry=new crypto(); cry.setkey("roshanmathew1989"); string s=cry.encrypt("roshanmathew1989");

results

browser side value =       o64x/bknbu7r2tuq2lubxeflq7wd2ynfasyyhsvuryw= server side value of s =   rrncvier/75fzdjhr884sw==

can point out mistake?

there few things wrong code:

  • you using hexadecimal decoding of key in javascript, , string.getbytes() - character encoding without specifying character set - in java
  • your key 16 characters (it should 16, 24 or 32 randomized bytes), not in hexadecimals
  • you encrypting instead of decrypting on "server side", although 1 on purpose

take on how perform encoding , character-encoding, essential crypto , performed incorrectly (it's common issue on stackoverflow regarding encryption)


Comments

  1. Unknown15 January 2019 at 04:43

    Given it a long try and finally got it.

    1). CryptoJS uses hex values while java uses bytes for the same String.

    2.) The two other factors which need to be same (apart from the key) are initVector and padding.

    Considering both above we first have to validate that both Java are CryptoJS and encrypting to the same value given the above parameters are same.

    Here is the code for Java


    import javax.crypto.Cipher;
    import javax.crypto.spec.IvParameterSpec;
    import javax.crypto.spec.SecretKeySpec;

    import java.io.UnsupportedEncodingException;
    import java.math.BigInteger;
    import java.util.Base64;

    public class JavaEncryptor {

    private static final String key = "aesEncryptionKey";
    private static final String initVector = "encryptionIntVec";

    public static String toHex(String arg) throws UnsupportedEncodingException {
    return String.format("%020x", new BigInteger(1, arg.getBytes("UTF-8")));
    }


    /**
    * Use these hex value in CryptoJS
    * @throws Exception
    */
    public static void printHexForJS() throws Exception {
    System.out.println("HexKeyForJS : "+ toHex(key));
    System.out.println("HexInitVectorForJS : "+ toHex(initVector));
    }

    public static String encrypt(String value) {
    try {
    IvParameterSpec iv = new IvParameterSpec(initVector.getBytes("UTF-8"));
    SecretKeySpec skeySpec = new SecretKeySpec(key.getBytes("UTF-8"), "AES");


    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5PADDING");
    cipher.init(Cipher.ENCRYPT_MODE, skeySpec, iv);

    byte[] encrypted = cipher.doFinal(value.getBytes());
    return Base64.getEncoder().encodeToString(encrypted);

    } catch (Exception ex) {
    ex.printStackTrace();
    }
    return null;
    }

    public static void main(String[] args) throws Exception {
    printHexForJS();
    System.out.println(encrypt("MyPlainTextToBeEncrypted"));
    }

    }

    Output of the above program is

    > HexKeyForJS : 616573456e6372797074696f6e4b6579
    > HexInitVectorForJS : 656e6372797074696f6e496e74566563
    > MURKOx14eSOo2vs8ZQyCpXpsoKg8Uzlvyj3byQreVBk=




    And then for JS encryption use the HexKeyForJS and HexInitVectorForJS as in below code

    var text = "ManishMudgal";
    var key = CryptoJS.enc.Hex.parse(HexKeyForJS);
    var iv = CryptoJS.enc.Hex.parse(HexInitVectorForJS);

    var encrypted = CryptoJS.AES.encrypt(text, key, {iv: iv, padding: CryptoJS.pad.Pkcs7});
    console.log(encrypted.toString());

    > Output of the above JS code should be kBgYcrSxz+kbXRnyKIFmSw==


    Which is the same encrypted key generated through Java code
    MURKOx14eSOo2vs8ZQyCpXpsoKg8Uzlvyj3byQreVBk=


    Now Decryption at Crypto End

    CryptoJS.AES.decrypt('MURKOx14eSOo2vs8ZQyCpXpsoKg8Uzlvyj3byQreVBk=', CryptoJS.enc.Hex.parse(HexKeyForJS), {iv: CryptoJS.enc.Hex.parse(HexInitVectorForJS), padding: CryptoJS.pad.Pkcs7}).toString(CryptoJS.enc.Utf8);

    Cheers :)








    ReplyDelete

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua...
Read more

android - java.net.UnknownHostException(Unable to resolve host “URL”: No address associated with hostname) -

i developing app testing asp.net webservice in android.for simple webservice adding 2 numbers used.where numbers passed parameters.the result in dialogue.the webserver works in local. when application runs following result exception.i provided internet permission in manifest. java.net.unknownhostexception(unable resolve host “ http://url.com/ ”: no address associated hostname) my code given below main activity public static string rslt=""; /** called when activity first created. */ @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.activity_main); button b1=(button)findviewbyid(r.id.button1); final alertdialog ad=new alertdialog.builder(this).create(); b1.setonclicklistener(new onclicklistener() { @override public void onclick(view arg0) { // todo auto-generated method stub try { ...
Read more