php加密ts,在nodejs中加密,在php中解密

你的方法不安全,也可能是中间人攻击的受害者,你应该始终使用静脉注射和HMAC。

你可以用这样的PHP加密

$key = substr('encyptionsec123342',0,32)

function encrypt ($message, $method, $secret, &$hmac) {

$iv = substr(bin2hex(openssl_random_pseudo_bytes(16)),0,16);

$encrypted = base64_encode($iv) . openssl_encrypt($message, $method, $secret, 0, $iv);

$hmac = hash_hmac('md5', $encrypted, $secret);

return $encrypted;

}

function decrypt ($encrypted, $method, $secret, $hmac) {

if (hash_hmac('md5', $encrypted, $secret) == $hmac) {

$iv = base64_decode(substr($encrypted, 0, 24));

return openssl_decrypt(substr($encrypted, 24), $method, $secret, 0, $iv);

}

}

function encryptWithTSValidation ($message, $method, $secret, &$hmac) {

date_default_timezone_set('UTC');

$message = substr(date('c'),0,19) . "$message";

return encrypt($message, $method, $secret, $hmac);

}

function decryptWithTSValidation ($encrypted, $method, $secret, $hmac, $intervalThreshold) {

$decrypted = decrypt($encrypted, $method, $secret, $hmac);

$now = new DateTime();

$msgDate = new DateTime(str_replace("T"," ",substr($decrypted,0,19)));

if (($now->getTimestamp() - $msgDate->getTimestamp()) <= $intervalThreshold) {

return substr($decrypted,19);

}

}

这是一种安全的AES-256-CBC方法,使用HMAC阻止中间人攻击。

J.N.

var secret = "encyptionsec123342";

secret = secret.substr(0, 32);

var method = 'AES-256-CBC';

var encrypt = function(message, method, secret, hmac) {

var iv = crypto.randomBytes(16).toString('hex').substr(0, 16);

var encryptor = crypto.createCipheriv(method, secret, iv);

var encrypted = new Buffer.alloc(iv).toString('base64') + encryptor.update(message, 'utf8', 'base64') + encryptor.final('base64');

hmac = crypto.createHmac('md5', secret).update(encrypted).digest('hex');

return encrypted;

};

var decrypt = function(encrypted, method, secret, hmac) {

if (crypto.createHmac('md5', secret).update(encrypted).digest('hex') == hmac) {

var iv = new Buffer.from(encrypted.substr(0, 24), 'base64').toString();

var decryptor = crypto.createDecipheriv(method, secret, iv);

return decryptor.update(encrypted.substr(24), 'base64', 'utf8') + decryptor.final('utf8');

}

};

var encryptWithTSValidation = function(message, method, secret, hmac) {

var messageTS = new Date().toISOString().substr(0, 19) + message;

return encrypt(messageTS, method, secret, hmac);

}

var decryptWithTSValidation = function(encrypted, method, secret, hmac, intervalThreshold) {

var decrypted = decrypt(encrypted, method, secret, hmac);

var now = new Date();

var year = parseInt(decrypted.substr(0, 4)),

month = parseInt(decrypted.substr(5, 2)) - 1,

day = parseInt(decrypted.substr(8, 2)),

hour = parseInt(decrypted.substr(11, 2)),

minute = parseInt(decrypted.substr(14, 2)),

second = parseInt(decrypted.substr(17, 2));

var msgDate = new Date(Date.UTC(year, month, day, hour, minute, second))

if (Math.round((now - msgDate) / 1000) <= intervalThreshold) {

return decrypted.substr(19);

}

}

要在PHP中执行加密和解密,

$encrypted = encryptWithTSValidation($recipent, $method, $key, $hmac);

$decrypted = decryptWithTSValidation($encrypted,$method,$key, $hmac, 60*60*12)//this is 12 hours

要生成HMAC,可以使用简单的MD5散列

$hmac = hash_hmac('md5', $recipent, $key);

在J.N.

var decrypted = decryptWithTSValidation(encString, method, secret, hmac, 60 * 60);

var encrypted = decryptWithTSValidation(string, method, secret, hmac);

注:

在nodejs和php中进行加密和解密时,请确保生成32位的唯一密钥。也要保证它的安全,不要将它存储在数据库中。

代码引用:

Encrypt string in PHP and decrypt in Node.js