[Java知识库]JAVA使用AES加密和解密

描述

项目前端需要对密码进行加密，防止页面明文暴露密码。
前端使用AES对称加密，后端解密，得到明文密码后再进行非对称加密，然后取出数据库中密码字段进行匹配校验

配置

需要引入依赖

        <!--引入  AES/ECB/PKCS7Padding  支持-->
        <dependency>
            <groupId>org.bouncycastle</groupId>
            <artifactId>bcprov-jdk16</artifactId>
            <version>1.46</version>
        </dependency>

代码

import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;

import lombok.extern.slf4j.Slf4j;
import org.apache.commons.codec.binary.Base64;

import java.security.Security;

/**
 * @author ：smallkinghjm
 * @description：TODO
 * @date ：2022/3/2 11:20
 */
@Slf4j
public class AESUtil {

    /**
     * AES加密
     *
     * @param content 明文
     * @param key     秘钥
     * @return
     * @throws Exception
     */
    public static String encrypt(String content, String key) throws Exception {
        // 将返回的加密过的 byte[] 转换成Base64编码字符串 ！！！！很关键
        return base64ToString(AES_ECB_Encrypt(content.getBytes(), key.getBytes()));
    }

    /**
     * AES解密
     *
     * @param content Base64编码的密文
     * @param key     秘钥
     * @return
     * @throws Exception
     */
    public static String decrypt(String content, String key) {
        // stringToBase64() 将 Base64编码的字符串转换成 byte[] !!!与base64ToString(）配套使用
        try {
            byte[] base64 = stringToBase64(content);
            byte[] bytes = AES_ECB_Decrypt(base64, key.getBytes());
            String result = new String(bytes);
            return result.replaceAll("\"","");
        } catch (Exception e) {
            log.info("AES解密出错！！！");
            e.printStackTrace();
        }

        return null;
    }

    private static byte[] AES_ECB_Encrypt(byte[] content, byte[] keyBytes) {
        try {
            SecretKeySpec key = new SecretKeySpec(keyBytes, "AES");
            Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
            Cipher cipher = Cipher.getInstance("AES/ECB/PKCS7Padding");
            cipher.init(Cipher.ENCRYPT_MODE, key);
            byte[] result = cipher.doFinal(content);
            return result;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }

    private static byte[] AES_ECB_Decrypt(byte[] content, byte[] keyBytes) {
        try {
            SecretKeySpec key = new SecretKeySpec(keyBytes, "AES");
            Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
            Cipher cipher = Cipher.getInstance("AES/ECB/PKCS7Padding");
            cipher.init(Cipher.DECRYPT_MODE, key);
            byte[] result = cipher.doFinal(content);
            return result;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }

    /**
     * 字符串装换成 Base64
     */

    public static byte[] stringToBase64(String key) throws Exception {
        return Base64.decodeBase64(key.getBytes());
    }

    /**
     * Base64装换成字符串
     */
    public static String base64ToString(byte[] key) throws Exception {
        return new Base64().encodeToString(key);
    }

    public static void main(String[] args) throws Exception {
        String key = "5F6B2AK33DZE20A05E74C231B47AC8F6";//加密密钥,很关键，不要对外泄露哦

        String content = "smallkinghjm_2022";//明文

        String end = encrypt(content, key);
        System.out.println("加密：" + end);

        String decrypt = decrypt("a9BN/Zu9fgRLK7631c6+2mwtWomnS9dyW0MYNVgXgjE=", key);
        System.out.println("解密："+decrypt);
    }
}

前端JS

/**
 * AES加密
 */
const AESEncrypt = (str, key) => {
  let _key = key || '5F6B2AK33DZE20A05E74C231B47AC8F6'
  const __key = CryptoJS.enc.Utf8.parse(_key) //将秘钥转换成Utf8字节数组
  // const iv = CryptoJS.enc.Utf8.parse(_key.substr(0, 16))
  //加密
  const encrypt = CryptoJS.AES.encrypt(JSON.stringify(str), __key, {
    // iv: iv,
    mode: CryptoJS.mode.ECB,
    padding: CryptoJS.pad.Pkcs7
  })
  return encrypt.toString()
}

/**
 * AES解密密
 */
const AESDecrypt = (str, key) => {
  let _key = key || '5F6B2AK33DZE20A05E74C231B47AC8F6'
  const __key = CryptoJS.enc.Utf8.parse(_key) //将秘钥转换成Utf8字节数组

  const decrypt = CryptoJS.AES.decrypt(str, __key, {
    mode: CryptoJS.mode.ECB,
    padding: CryptoJS.pad.Pkcs7
  })
  const _decrypt = JSON.parse(decrypt.toString(CryptoJS.enc.Utf8)) //解密后的数据
  return _decrypt
}