python怎样打开加密的文件_如何在Python中解密OpenSSL AES加密的文件？

拉莫斯之舞

我将通过一些更正重新发布您的代码（我不想掩盖您的版本）。当您的代码正常工作时，它不会检测到填充周围的一些错误。特别是，如果提供的解密密钥不正确，则填充逻辑可能会做一些奇怪的事情。如果您同意我的更改，则可以更新您的解决方案。from hashlib import md5from Crypto.Cipher import AESfrom Crypto import Randomdef derive_key_and_iv(password, salt, key_length, iv_length):    d = d_i = ''    while len(d) < key_length + iv_length:        d_i = md5(d_i + password + salt).digest()        d += d_i    return d[:key_length], d[key_length:key_length+iv_length]# This encryption mode is no longer secure by today's standards.# See note in original question above.def obsolete_encrypt(in_file, out_file, password, key_length=32):    bs = AES.block_size    salt = Random.new().read(bs - len('Salted__'))    key, iv = derive_key_and_iv(password, salt, key_length, bs)    cipher = AES.new(key, AES.MODE_CBC, iv)    out_file.write('Salted__' + salt)    finished = False    while not finished:        chunk = in_file.read(1024 * bs)        if len(chunk) == 0 or len(chunk) % bs != 0:            padding_length = bs - (len(chunk) % bs)            chunk += padding_length * chr(padding_length)            finished = True        out_file.write(cipher.encrypt(chunk))def decrypt(in_file, out_file, password, key_length=32):    bs = AES.block_size    salt = in_file.read(bs)[len('Salted__'):]    key, iv = derive_key_and_iv(password, salt, key_length, bs)    cipher = AES.new(key, AES.MODE_CBC, iv)    next_chunk = ''    finished = False    while not finished:        chunk, next_chunk = next_chunk, cipher.decrypt(in_file.read(1024 * bs))        if len(next_chunk) == 0:            padding_length = ord(chunk[-1])            if padding_length < 1 or padding_length > bs:               raise ValueError("bad decrypt pad (%d)" % padding_length)            # all the pad-bytes must be the same            if chunk[-padding_length:] != (padding_length * chr(padding_length)):               # this is similar to the bad decrypt:evp_enc.c from openssl program               raise ValueError("bad decrypt")            chunk = chunk[:-padding_length]            finished = True        out_file.write(chunk)