AES-256 encryption and decryption in PHP and C# – Nhật ký lập trình [Chapter 11]

ngoton 03/05/2018 PHP Leave a comment 5,039 Views

Related Articles

Autoloading trong PHP – Nhật ký lập trình [Chapter 10]

23/04/2018

Hàm làm tròn số ROUND, FLOOR, CEIL – Nhật ký lập trình [Chapter 7]

04/10/2017

Upload Multi File in PHP with Ajax – Nhật ký lập trình [Chapter 4]

24/07/2017

Mục lục

• PHP
• C#
• Version 2
• PHP
• C#

Mã hóa dữ liệu với thuật toán AES trong PHP và C#

PHP

<?php $plaintext = 'My secret message 1234'; $password = '3sc3RLrpd17'; $method = 'aes-256-cbc'; // Must be exact 32 chars (256 bit) $password = substr(hash('sha256', $password, true), 0, 32); echo "Password:" . $password . "\n"; // IV must be exact 16 chars (128 bit) $iv = chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0); // av3DYGLkwBsErphcyYp+imUW4QKs19hUnFyyYcXwURU= $encrypted = base64_encode(openssl_encrypt($plaintext, $method, $password, OPENSSL_RAW_DATA, $iv)); // My secret message 1234 $decrypted = openssl_decrypt(base64_decode($encrypted), $method, $password, OPENSSL_RAW_DATA, $iv); echo 'plaintext=' . $plaintext . "\n"; echo 'cipher=' . $method . "\n"; echo 'encrypted to: ' . $encrypted . "\n"; echo 'decrypted to: ' . $decrypted . "\n\n";

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23

<?php   $plaintext = 'My secret message 1234'; $password = '3sc3RLrpd17'; $method = 'aes-256-cbc';   // Must be exact 32 chars (256 bit) $password = substr(hash('sha256', $password, true), 0, 32); echo "Password:" . $password . "\n";   // IV must be exact 16 chars (128 bit) $iv = chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0);   // av3DYGLkwBsErphcyYp+imUW4QKs19hUnFyyYcXwURU= $encrypted = base64_encode(openssl_encrypt($plaintext, $method, $password, OPENSSL_RAW_DATA, $iv));   // My secret message 1234 $decrypted = openssl_decrypt(base64_decode($encrypted), $method, $password, OPENSSL_RAW_DATA, $iv);   echo 'plaintext=' . $plaintext . "\n"; echo 'cipher=' . $method . "\n"; echo 'encrypted to: ' . $encrypted . "\n"; echo 'decrypted to: ' . $decrypted . "\n\n";

C#

using System.Security.Cryptography; using System.IO; using System.Text; using System; public string EncryptString(string plainText, byte[] key, byte[] iv) { // Instantiate a new Aes object to perform string symmetric encryption Aes encryptor = Aes.Create(); encryptor.Mode = CipherMode.CBC; //encryptor.KeySize = 256; //encryptor.BlockSize = 128; //encryptor.Padding = PaddingMode.Zeros; // Set key and IV encryptor.Key = key; encryptor.IV = iv; // Instantiate a new MemoryStream object to contain the encrypted bytes MemoryStream memoryStream = new MemoryStream(); // Instantiate a new encryptor from our Aes object ICryptoTransform aesEncryptor = encryptor.CreateEncryptor(); // Instantiate a new CryptoStream object to process the data and write it to the // memory stream CryptoStream cryptoStream = new CryptoStream(memoryStream, aesEncryptor, CryptoStreamMode . Write); // Convert the plainText string into a byte array byte[] plainBytes = Encoding.ASCII.GetBytes(plainText); // Encrypt the input plaintext string cryptoStream.Write(plainBytes, 0, plainBytes . Length); // Complete the encryption process cryptoStream.FlushFinalBlock(); // Convert the encrypted data from a MemoryStream to a byte array byte[] cipherBytes = memoryStream.ToArray(); // Close both the MemoryStream and the CryptoStream memoryStream.Close(); cryptoStream.Close(); // Convert the encrypted byte array to a base64 encoded string string cipherText = Convert.ToBase64String(cipherBytes, 0, cipherBytes.Length); // Return the encrypted data as a string return cipherText; } public string DecryptString(string cipherText, byte[] key, byte[] iv) { // Instantiate a new Aes object to perform string symmetric encryption Aes encryptor = Aes.Create(); encryptor.Mode = CipherMode.CBC; //encryptor.KeySize = 256; //encryptor.BlockSize = 128; //encryptor.Padding = PaddingMode.Zeros; // Set key and IV encryptor.Key = key; encryptor.IV = iv; // Instantiate a new MemoryStream object to contain the encrypted bytes MemoryStream memoryStream = new MemoryStream(); // Instantiate a new encryptor from our Aes object ICryptoTransform aesDecryptor = encryptor.CreateDecryptor(); // Instantiate a new CryptoStream object to process the data and write it to the // memory stream CryptoStream cryptoStream = new CryptoStream(memoryStream, aesDecryptor, CryptoStreamMode . Write); // Will contain decrypted plaintext string plainText = String.Empty; try { // Convert the ciphertext string into a byte array byte[] cipherBytes = Convert.FromBase64String(cipherText); // Decrypt the input ciphertext string cryptoStream.Write(cipherBytes, 0, cipherBytes . Length); // Complete the decryption process cryptoStream.FlushFinalBlock(); // Convert the decrypted data from a MemoryStream to a byte array byte[] plainBytes = memoryStream.ToArray(); // Convert the decrypted byte array to string plainText = Encoding.ASCII.GetString(plainBytes, 0, plainBytes.Length); } finally { // Close both the MemoryStream and the CryptoStream memoryStream.Close(); cryptoStream.Close(); } // Return the decrypted data as a string return plainText; }

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103

using System.Security.Cryptography; using System.IO; using System.Text; using System;   public string EncryptString(string plainText, byte[] key, byte[] iv) {     // Instantiate a new Aes object to perform string symmetric encryption     Aes encryptor = Aes.Create();       encryptor.Mode = CipherMode.CBC;     //encryptor.KeySize = 256;     //encryptor.BlockSize = 128;     //encryptor.Padding = PaddingMode.Zeros;       // Set key and IV     encryptor.Key = key;     encryptor.IV = iv;       // Instantiate a new MemoryStream object to contain the encrypted bytes     MemoryStream memoryStream = new MemoryStream();       // Instantiate a new encryptor from our Aes object     ICryptoTransform aesEncryptor = encryptor.CreateEncryptor();       // Instantiate a new CryptoStream object to process the data and write it to the     // memory stream     CryptoStream cryptoStream = new CryptoStream(memoryStream, aesEncryptor, CryptoStreamMode . Write);       // Convert the plainText string into a byte array     byte[] plainBytes = Encoding.ASCII.GetBytes(plainText);       // Encrypt the input plaintext string     cryptoStream.Write(plainBytes, 0, plainBytes . Length);       // Complete the encryption process     cryptoStream.FlushFinalBlock();       // Convert the encrypted data from a MemoryStream to a byte array     byte[] cipherBytes = memoryStream.ToArray();       // Close both the MemoryStream and the CryptoStream     memoryStream.Close();     cryptoStream.Close();       // Convert the encrypted byte array to a base64 encoded string     string cipherText = Convert.ToBase64String(cipherBytes, 0, cipherBytes.Length);       // Return the encrypted data as a string     return cipherText; }   public string DecryptString(string cipherText, byte[] key, byte[] iv) {     // Instantiate a new Aes object to perform string symmetric encryption     Aes encryptor = Aes.Create();       encryptor.Mode = CipherMode.CBC;     //encryptor.KeySize = 256;     //encryptor.BlockSize = 128;     //encryptor.Padding = PaddingMode.Zeros;       // Set key and IV     encryptor.Key = key;     encryptor.IV = iv;       // Instantiate a new MemoryStream object to contain the encrypted bytes     MemoryStream memoryStream = new MemoryStream();       // Instantiate a new encryptor from our Aes object     ICryptoTransform aesDecryptor = encryptor.CreateDecryptor();       // Instantiate a new CryptoStream object to process the data and write it to the     // memory stream     CryptoStream cryptoStream = new CryptoStream(memoryStream, aesDecryptor, CryptoStreamMode . Write);       // Will contain decrypted plaintext     string plainText = String.Empty;       try {         // Convert the ciphertext string into a byte array         byte[] cipherBytes = Convert.FromBase64String(cipherText);           // Decrypt the input ciphertext string         cryptoStream.Write(cipherBytes, 0, cipherBytes . Length);           // Complete the decryption process         cryptoStream.FlushFinalBlock();           // Convert the decrypted data from a MemoryStream to a byte array         byte[] plainBytes = memoryStream.ToArray();           // Convert the decrypted byte array to string         plainText = Encoding.ASCII.GetString(plainBytes, 0, plainBytes.Length);     } finally {         // Close both the MemoryStream and the CryptoStream         memoryStream.Close();         cryptoStream.Close();     }       // Return the decrypted data as a string     return plainText; }

Usage

string message = "My secret message 1234"; string password = "3sc3RLrpd17"; // Create sha256 hash SHA256 mySHA256 = SHA256Managed.Create(); byte[] key = mySHA256.ComputeHash(Encoding.ASCII.GetBytes(password)); // Create secret IV byte[] iv = new byte[16] { 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }; string encrypted = this.EncryptString(message, key, iv); string decrypted = this.DecryptString(encrypted, key, iv); Console.WriteLine(encrypted); Console.WriteLine(decrypted);

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

string message = "My secret message 1234"; string password = "3sc3RLrpd17";   // Create sha256 hash SHA256 mySHA256 = SHA256Managed.Create(); byte[] key = mySHA256.ComputeHash(Encoding.ASCII.GetBytes(password));   // Create secret IV byte[] iv = new byte[16] { 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 };   string encrypted = this.EncryptString(message, key, iv); string decrypted = this.DecryptString(encrypted, key, iv);   Console.WriteLine(encrypted); Console.WriteLine(decrypted);

Version 2

A more secure password should contain a cost factor.

PHP

<?php $plaintext = 'My secret message 1234'; $password = '3sc3RLrpd17'; $method = 'aes-256-cbc'; $key = password_hash($password, PASSWORD_BCRYPT, ['cost' => 12]); echo "Key:" . $key . "\n"; // IV must be exact 16 chars (128 bit) $iv = chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0); // av3DYGLkwBsErphcyYp+imUW4QKs19hUnFyyYcXwURU= $encrypted = base64_encode(openssl_encrypt($plaintext, $method, $key, OPENSSL_RAW_DATA, $iv)); // My secret message 1234 $decrypted = openssl_decrypt(base64_decode($encrypted), $method, $key, OPENSSL_RAW_DATA, $iv); echo 'plaintext=' . $plaintext . "\n"; echo 'cipher=' . $method . "\n"; echo 'encrypted to: ' . $encrypted . "\n"; echo 'decrypted to: ' . $decrypted . "\n\n";

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22

<?php   $plaintext = 'My secret message 1234'; $password = '3sc3RLrpd17'; $method = 'aes-256-cbc';   $key = password_hash($password, PASSWORD_BCRYPT, ['cost' => 12]); echo "Key:" . $key . "\n";   // IV must be exact 16 chars (128 bit) $iv = chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0) . chr(0x0);   // av3DYGLkwBsErphcyYp+imUW4QKs19hUnFyyYcXwURU= $encrypted = base64_encode(openssl_encrypt($plaintext, $method, $key, OPENSSL_RAW_DATA, $iv));   // My secret message 1234 $decrypted = openssl_decrypt(base64_decode($encrypted), $method, $key, OPENSSL_RAW_DATA, $iv);   echo 'plaintext=' . $plaintext . "\n"; echo 'cipher=' . $method . "\n"; echo 'encrypted to: ' . $encrypted . "\n"; echo 'decrypted to: ' . $decrypted . "\n\n";

C#

using System.Security.Cryptography; using System.IO; using System.Text; using System; public string EncryptString(string plainText, byte[] key, byte[] iv) { // Instantiate a new Aes object to perform string symmetric encryption Aes encryptor = Aes.Create(); encryptor.Mode = CipherMode.CBC; //encryptor.KeySize = 256; //encryptor.BlockSize = 128; //encryptor.Padding = PaddingMode.Zeros; // Set key and IV encryptor.Key = key.Take(32).ToArray(); encryptor.IV = iv; // Instantiate a new MemoryStream object to contain the encrypted bytes MemoryStream memoryStream = new MemoryStream(); // Instantiate a new encryptor from our Aes object ICryptoTransform aesEncryptor = encryptor.CreateEncryptor(); // Instantiate a new CryptoStream object to process the data and write it to the // memory stream CryptoStream cryptoStream = new CryptoStream(memoryStream, aesEncryptor, CryptoStreamMode.Write); // Convert the plainText string into a byte array byte[] plainBytes = Encoding.ASCII.GetBytes(plainText); // Encrypt the input plaintext string cryptoStream.Write(plainBytes, 0, plainBytes.Length); // Complete the encryption process cryptoStream.FlushFinalBlock(); // Convert the encrypted data from a MemoryStream to a byte array byte[] cipherBytes = memoryStream.ToArray(); // Close both the MemoryStream and the CryptoStream memoryStream.Close(); cryptoStream.Close(); // Convert the encrypted byte array to a base64 encoded string string cipherText = Convert.ToBase64String(cipherBytes, 0, cipherBytes.Length); // Return the encrypted data as a string return cipherText; } public string DecryptString(string cipherText, byte[] key, byte[] iv) { // Instantiate a new Aes object to perform string symmetric encryption Aes encryptor = Aes.Create(); encryptor.Mode = CipherMode.CBC; //encryptor.KeySize = 256; //encryptor.BlockSize = 128; //encryptor.Padding = PaddingMode.Zeros; // Set key and IV encryptor.Key = key.Take(32).ToArray(); encryptor.IV = iv; // Instantiate a new MemoryStream object to contain the encrypted bytes MemoryStream memoryStream = new MemoryStream(); // Instantiate a new encryptor from our Aes object ICryptoTransform aesDecryptor = encryptor.CreateDecryptor(); // Instantiate a new CryptoStream object to process the data and write it to the // memory stream CryptoStream cryptoStream = new CryptoStream(memoryStream, aesDecryptor, CryptoStreamMode.Write); // Will contain decrypted plaintext string plainText = String.Empty; try { // Convert the ciphertext string into a byte array byte[] cipherBytes = Convert.FromBase64String(cipherText); // Decrypt the input ciphertext string cryptoStream.Write(cipherBytes, 0, cipherBytes.Length); // Complete the decryption process cryptoStream.FlushFinalBlock(); // Convert the decrypted data from a MemoryStream to a byte array byte[] plainBytes = memoryStream.ToArray(); // Convert the decrypted byte array to string plainText = Encoding.ASCII.GetString(plainBytes, 0, plainBytes.Length); } finally { // Close both the MemoryStream and the CryptoStream memoryStream.Close(); cryptoStream.Close(); } // Return the decrypted data as a string return plainText; }

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106

using System.Security.Cryptography; using System.IO; using System.Text; using System;   public string EncryptString(string plainText, byte[] key, byte[] iv) {     // Instantiate a new Aes object to perform string symmetric encryption     Aes encryptor = Aes.Create();       encryptor.Mode = CipherMode.CBC;     //encryptor.KeySize = 256;     //encryptor.BlockSize = 128;     //encryptor.Padding = PaddingMode.Zeros;       // Set key and IV     encryptor.Key = key.Take(32).ToArray();     encryptor.IV = iv;       // Instantiate a new MemoryStream object to contain the encrypted bytes     MemoryStream memoryStream = new MemoryStream();       // Instantiate a new encryptor from our Aes object     ICryptoTransform aesEncryptor = encryptor.CreateEncryptor();       // Instantiate a new CryptoStream object to process the data and write it to the     // memory stream     CryptoStream cryptoStream = new CryptoStream(memoryStream, aesEncryptor, CryptoStreamMode.Write);       // Convert the plainText string into a byte array     byte[] plainBytes = Encoding.ASCII.GetBytes(plainText);       // Encrypt the input plaintext string     cryptoStream.Write(plainBytes, 0, plainBytes.Length);       // Complete the encryption process     cryptoStream.FlushFinalBlock();       // Convert the encrypted data from a MemoryStream to a byte array     byte[] cipherBytes = memoryStream.ToArray();       // Close both the MemoryStream and the CryptoStream     memoryStream.Close();     cryptoStream.Close();       // Convert the encrypted byte array to a base64 encoded string     string cipherText = Convert.ToBase64String(cipherBytes, 0, cipherBytes.Length);       // Return the encrypted data as a string     return cipherText; }   public string DecryptString(string cipherText, byte[] key, byte[] iv) {     // Instantiate a new Aes object to perform string symmetric encryption     Aes encryptor = Aes.Create();       encryptor.Mode = CipherMode.CBC;     //encryptor.KeySize = 256;     //encryptor.BlockSize = 128;     //encryptor.Padding = PaddingMode.Zeros;       // Set key and IV     encryptor.Key = key.Take(32).ToArray();     encryptor.IV = iv;       // Instantiate a new MemoryStream object to contain the encrypted bytes     MemoryStream memoryStream = new MemoryStream();       // Instantiate a new encryptor from our Aes object     ICryptoTransform aesDecryptor = encryptor.CreateDecryptor();       // Instantiate a new CryptoStream object to process the data and write it to the     // memory stream     CryptoStream cryptoStream = new CryptoStream(memoryStream, aesDecryptor, CryptoStreamMode.Write);       // Will contain decrypted plaintext     string plainText = String.Empty;       try     {         // Convert the ciphertext string into a byte array         byte[] cipherBytes = Convert.FromBase64String(cipherText);           // Decrypt the input ciphertext string         cryptoStream.Write(cipherBytes, 0, cipherBytes.Length);           // Complete the decryption process         cryptoStream.FlushFinalBlock();           // Convert the decrypted data from a MemoryStream to a byte array         byte[] plainBytes = memoryStream.ToArray();           // Convert the decrypted byte array to string         plainText = Encoding.ASCII.GetString(plainBytes, 0, plainBytes.Length);     }     finally     {         // Close both the MemoryStream and the CryptoStream         memoryStream.Close();         cryptoStream.Close();     }       // Return the decrypted data as a string     return plainText; }

Usage

string message = "My secret message 1234"; string password = "3sc3RLrpd17"; // hash the password with BCrypt string hashedPassword = BCrypt.Net.BCrypt.HashPassword(password, 12); // Convert hashed password to array byte[] key = Encoding.ASCII.GetBytes(hashedPassword); // Create secret IV byte[] iv = new byte[16] { 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }; string encrypted = this.EncryptString(message, key, iv); string decrypted = this.DecryptString(encrypted, key, iv); Console.WriteLine(encrypted); Console.WriteLine(decrypted);

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

string message = "My secret message 1234"; string password = "3sc3RLrpd17";   // hash the password with BCrypt string hashedPassword = BCrypt.Net.BCrypt.HashPassword(password, 12);   // Convert hashed password to array byte[] key = Encoding.ASCII.GetBytes(hashedPassword);   // Create secret IV byte[] iv = new byte[16] { 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 };   string encrypted = this.EncryptString(message, key, iv); string decrypted = this.DecryptString(encrypted, key, iv);   Console.WriteLine(encrypted); Console.WriteLine(decrypted);

 

Rate this post