三重Des對稱加密在Android、Ios 和Java 平臺的實現

引言

     現在手機app五彩繽紛，確保手機用戶的數據安全是開發人員必須掌握的技巧，下面經過實例介紹DES在android、ios、java平臺的使用方法；

DES加密是目前最經常使用的對稱加密方式，性能優於非對稱加密（RSA），是手機app請求數據加密的優先選擇。

 

DES簡介：

     DES全稱爲Data Encryption Standard，即數據加密標準，是一種使用密鑰加密的塊算法， 算法的入口參數有三個:Key、Data、Mode。

     Key：爲7個字節共56位,是DES算法的工做密鑰;

     Data：爲8個字節64位,是要被加密或被解密的數據;

     Mode：爲DES的工做方式,有兩種:加密或解密。

3DES簡介：

     3DES（或稱爲Triple DES）是三重數據加密算法（TDEA，Triple Data Encryption Algorithm）塊密碼的通稱。它至關因而對每一個數據塊應用三次DES加密算法。因爲計算機運算能力的加強，原版DES密碼的密鑰長度變得容易被暴力破解；3DES便是設計用來提供一種相對簡單的方法，即經過增長DES的密鑰長度來避免相似的攻擊，而不是設計一種全新的塊密碼算法。所以比起最初的DES，3DES更爲安全。

 

加密實例：

     java版

     

package com.v1.linxun.portal.utils;   import java.security.Key;   import javax.crypto.Cipher; import javax.crypto.SecretKeyFactory; import javax.crypto.spec.DESedeKeySpec; import javax.crypto.spec.IvParameterSpec;   /**  * 3DES加密工具類  */ public class Des3Util {        // 密鑰 長度不得小於24        private final static String secretKey = "123456789012345678901234" ;        // 向量 無關緊要 終端後臺也要約定        private final static String iv = "01234567";        // 加解密統一使用的編碼方式        private final static String encoding = "utf-8";          /**        * 3DES加密        *        * @param plainText        *            普通文本        * @return        * @throws Exception        */        public static String encode(String plainText) throws Exception {             Key deskey = null;             DESedeKeySpec spec = new DESedeKeySpec(secretKey .getBytes());             SecretKeyFactory keyfactory = SecretKeyFactory.getInstance( "desede");              deskey = keyfactory.generateSecret( spec);               Cipher cipher = Cipher.getInstance( "desede/CBC/PKCS5Padding");             IvParameterSpec ips = new IvParameterSpec( iv.getBytes());              cipher.init(Cipher. ENCRYPT_MODE, deskey, ips);              byte[] encryptData = cipher.doFinal( plainText.getBytes( encoding));              return Base64. encode( encryptData);       }          /**        * 3DES解密        *        * @param encryptText        *            加密文本        * @return        * @throws Exception        */        public static String decode(String encryptText) throws Exception {             Key deskey = null;             DESedeKeySpec spec = new DESedeKeySpec( secretKey.getBytes());             SecretKeyFactory keyfactory = SecretKeyFactory.getInstance( "desede");              deskey = keyfactory. generateSecret( spec);             Cipher cipher = Cipher.getInstance( "desede/CBC/PKCS5Padding" );             IvParameterSpec ips = new IvParameterSpec( iv.getBytes());              cipher. init(Cipher. DECRYPT_MODE, deskey, ips);                byte[] decryptData = cipher. doFinal(Base64. decode(encryptText ));                return new String( decryptData, encoding);       }               public static void main(String args[]) throws Exception{             String str = "你好" ;             System. out.println( "----加密前-----：" + str );             String encodeStr = Des3Util. encode( str);             System. out.println( "----加密後-----：" + encodeStr );             System. out.println( "----解密後-----：" + Des3Util.decode( encodeStr));       } }

 

Android版：

 

package  com.inn.test;   import  java.security.Key;   import  javax.crypto.Cipher; import  javax.crypto.SecretKeyFactory; import  javax.crypto.spec.DESedeKeySpec; import  javax.crypto.spec.IvParameterSpec;   import  android.util.Base64;   /**  * Android 3DES加密工具類  */ public   class  AndroidDes3Util {                // 密鑰 長度不得小於24         private   final  static  String  secretKey  =  "123456789012345678901234"  ;         // 向量 無關緊要 終端後臺也要約定         private   final  static  String  iv  =  "01234567"  ;         // 加解密統一使用的編碼方式         private   final  static  String  encoding  =  "utf-8"  ;           /**        * 3DES加密        *        *  @param  plainText        *            普通文本        *  @return        *  @throws  Exception        */         public   static  String encode(String plainText)  throws  Exception {             Key deskey =  null  ;             DESedeKeySpec spec =  new  DESedeKeySpec( secretKey  .getBytes());             SecretKeyFactory keyfactory = SecretKeyFactory.getInstance(  "desede" );             deskey = keyfactory.generateSecret(spec);               Cipher cipher = Cipher.getInstance(  "desede/CBC/PKCS5Padding" );             IvParameterSpec ips =  new  IvParameterSpec(  iv .getBytes());             cipher.init(Cipher.  ENCRYPT_MODE  , deskey, ips);               byte  [] encryptData = cipher.doFinal(plainText.getBytes( encoding  ));               return  Base64.encodeToString(encryptData,Base64.  DEFAULT  );       }           /**        * 3DES解密        *        *  @param  encryptText        *            加密文本        *  @return        *  @throws  Exception        */         public   static  String decode(String encryptText)  throws  Exception {             Key deskey =  null  ;             DESedeKeySpec spec =  new  DESedeKeySpec(  secretKey .getBytes());             SecretKeyFactory keyfactory = SecretKeyFactory.getInstance(  "desede"  );             deskey = keyfactory. generateSecret(spec);             Cipher cipher = Cipher.getInstance(  "desede/CBC/PKCS5Padding"  );             IvParameterSpec ips =  new  IvParameterSpec(  iv .getBytes());             cipher. init(Cipher.  DECRYPT_MODE , deskey, ips);                 byte  [] decryptData = cipher.doFinal(Base64. decode(encryptText, Base64.  DEFAULT ));                 return   new  String (decryptData,  encoding );       } }

 

IOS版：

 

// //  DES3EncryptUtil.h //  DES3加解密工具 // //  Created by xc on 15/12/18. //  Copyright © 2015年 xc. All rights reserved. // #import <Foundation/Foundation.h> @interface DES3EncryptUtil : NSObject // 加密方法 + (NSString*)encrypt:(NSString*)plainText; // 解密方法 + (NSString*)decrypt:(NSString*)encryptText; @end

 

// //  DES3EncryptUtil.m //  DES3加解密工具 //  Created by xc on 15/12/18. //  Copyright © 2015年 xc. All rights reserved. #import <Foundation/Foundation.h> #import <CommonCrypto/CommonCryptor.h> #import "MyBase64.h" //祕鑰 #define gkey            @"xiangchao@qq.comrnnchina" //向量 #define gIv             @"01234567" @implementation DES3EncryptUtil : NSObject // 加密方法 + (NSString*)encrypt:(NSString*)plainText {     NSData* data = [plainText dataUsingEncoding:NSUTF8StringEncoding];     size_t plainTextBufferSize = [data length];     const void *vplainText = (const void *)[data bytes];          CCCryptorStatus ccStatus;     uint8_t *bufferPtr = NULL;     size_t bufferPtrSize = 0;     size_t movedBytes = 0;          bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1);     bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t));     memset((void *)bufferPtr, 0x0, bufferPtrSize);          const void *vkey = (const void *) [gkey UTF8String];     const void *vinitVec = (const void *) [gIv UTF8String];          ccStatus = CCCrypt(kCCEncrypt,                        kCCAlgorithm3DES,                        kCCOptionPKCS7Padding,                        vkey,                        kCCKeySize3DES,                        vinitVec,                        vplainText,                        plainTextBufferSize,                        (void *)bufferPtr,                        bufferPtrSize,                        &movedBytes);          NSData *myData = [NSData dataWithBytes:(const void *)bufferPtr length:(NSUInteger)movedBytes];     NSString *result = [MyBase64 base64EncodedStringFrom:myData];     return result; } // 解密方法 + (NSString*)decrypt:(NSString*)encryptText {     NSData *encryptData = [MyBase64 dataWithBase64EncodedString:encryptText];     size_t plainTextBufferSize = [encryptData length];     const void *vplainText = [encryptData bytes];          CCCryptorStatus ccStatus;     uint8_t *bufferPtr = NULL;     size_t bufferPtrSize = 0;     size_t movedBytes = 0;          bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1);     bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t));     memset((void *)bufferPtr, 0x0, bufferPtrSize);          const void *vkey = (const void *) [gkey UTF8String];     const void *vinitVec = (const void *) [gIv UTF8String];          ccStatus = CCCrypt(kCCDecrypt,                        kCCAlgorithm3DES,                        kCCOptionPKCS7Padding,                        vkey,                        kCCKeySize3DES,                        vinitVec,                        vplainText,                        plainTextBufferSize,                        (void *)bufferPtr,                        bufferPtrSize,                        &movedBytes);          NSString *result = [[NSString alloc] initWithData:[NSData dataWithBytes:(const void *)bufferPtr                                                                      length:(NSUInteger)movedBytes] encoding:NSUTF8StringEncoding] ;     return result; } @end

 

IOS加密工具中會將加密後的密文 轉化程Base64的字符串，用到了Base64編碼工具，以下

 

// //  CommonFunc.h //  PRJ_base64 // //  Created by wangzhipeng on 12-11-29. //  Copyright (c) 2012年 com.comsoft. All rights reserved. // #import <Foundation/Foundation.h> #define __BASE64( text )        [CommonFunc base64StringFromText:text] #define __TEXT( base64 )        [CommonFunc textFromBase64String:base64] @interface MyBase64 : NSObject /****************************************************************************** 函數名稱 : + (NSString *)base64StringFromText:(NSString *)text 函數描述 : 將文本轉換爲base64格式字符串 輸入參數 : (NSString *)text    文本 輸出參數 : N/A 返回參數 : (NSString *)    base64格式字符串 備註信息 : ******************************************************************************/ + (NSString *)base64StringFromText:(NSString *)text; /****************************************************************************** 函數名稱 : + (NSString *)base64StringFromText:(NSString *)text 函數描述 : 將文本轉換爲base64格式字符串 輸入參數 : (NSString *)text    文本 輸出參數 : N/A 返回參數 : (NSString *)    base64格式字符串 備註信息 : ******************************************************************************/ + (NSString *)base64EncodedStringFrom:(NSData *)data; /****************************************************************************** 函數名稱 : + (NSString *)textFromBase64String:(NSString *)base64 函數描述 : 將base64格式字符串轉換爲文本 輸入參數 : (NSString *)base64  base64格式字符串 輸出參數 : N/A 返回參數 : (NSString *)    文本 備註信息 : ******************************************************************************/ + (NSString *)textFromBase64String:(NSString *)base64; /****************************************************************************** 函數名稱 : + (NSString *)textFromBase64String:(NSString *)base64 函數描述 : 將base64格式字符串轉換爲文本 輸入參數 : (NSString *)base64  base64格式字符串 輸出參數 : N/A 返回參數 : (NSString *)    文本 備註信息 : ******************************************************************************/ + (NSData *)dataWithBase64EncodedString:(NSString *)string; @end

 

// //  CommonFunc.m //  PRJ_base64 // //  Created by wangzhipeng on 12-11-29. //  Copyright (c) 2012年 com.comsoft. All rights reserved. // #import "MyBase64.h" //引入IOS自帶密碼庫 #import <CommonCrypto/CommonCryptor.h> //空字符串 #define LocalStr_None   @"" static const char encodingTable[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; @implementation MyBase64 : NSObject + (NSString *)base64StringFromText:(NSString *)text {     if (text && ![text isEqualToString:LocalStr_None]) {         //取項目的bundleIdentifier做爲KEY  改動了此處         //NSString *key = [[NSBundle mainBundle] bundleIdentifier];         NSData *data = [text dataUsingEncoding:NSUTF8StringEncoding];         //IOS 自帶DES加密 Begin  改動了此處         //data = [self DESEncrypt:data WithKey:key];         //IOS 自帶DES加密 End         return [self base64EncodedStringFrom:data];     }     else {         return LocalStr_None;     } } + (NSString *)textFromBase64String:(NSString *)base64 {     if (base64 && ![base64 isEqualToString:LocalStr_None]) {         //取項目的bundleIdentifier做爲KEY   改動了此處         //NSString *key = [[NSBundle mainBundle] bundleIdentifier];         NSData *data = [self dataWithBase64EncodedString:base64];         //IOS 自帶DES解密 Begin    改動了此處         //data = [self DESDecrypt:data WithKey:key];         //IOS 自帶DES加密 End         return [[NSString alloc] initWithData:data encoding:NSUTF8StringEncoding];     }     else {         return LocalStr_None;     } } /****************************************************************************** 函數名稱 : + (NSData *)DESEncrypt:(NSData *)data WithKey:(NSString *)key 函數描述 : 文本數據進行DES加密 輸入參數 : (NSData *)data (NSString *)key 輸出參數 : N/A 返回參數 : (NSData *) 備註信息 : 此函數不可用於過長文本 ******************************************************************************/ + (NSData *)DESEncrypt:(NSData *)data WithKey:(NSString *)key {     char keyPtr[kCCKeySizeAES256+1];     bzero(keyPtr, sizeof(keyPtr));          [key getCString:keyPtr maxLength:sizeof(keyPtr) encoding:NSUTF8StringEncoding];          NSUInteger dataLength = [data length];          size_t bufferSize = dataLength + kCCBlockSizeAES128;     void *buffer = malloc(bufferSize);          size_t numBytesEncrypted = 0;     CCCryptorStatus cryptStatus = CCCrypt(kCCEncrypt, kCCAlgorithmDES,                                           kCCOptionPKCS7Padding | kCCOptionECBMode,                                           keyPtr, kCCBlockSizeDES,                                           NULL,                                           [data bytes], dataLength,                                           buffer, bufferSize,                                           &numBytesEncrypted);     if (cryptStatus == kCCSuccess) {         return [NSData dataWithBytesNoCopy:buffer length:numBytesEncrypted];     }          free(buffer);     return nil; } /****************************************************************************** 函數名稱 : + (NSData *)DESEncrypt:(NSData *)data WithKey:(NSString *)key 函數描述 : 文本數據進行DES解密 輸入參數 : (NSData *)data (NSString *)key 輸出參數 : N/A 返回參數 : (NSData *) 備註信息 : 此函數不可用於過長文本 ******************************************************************************/ + (NSData *)DESDecrypt:(NSData *)data WithKey:(NSString *)key {     char keyPtr[kCCKeySizeAES256+1];     bzero(keyPtr, sizeof(keyPtr));          [key getCString:keyPtr maxLength:sizeof(keyPtr) encoding:NSUTF8StringEncoding];          NSUInteger dataLength = [data length];          size_t bufferSize = dataLength + kCCBlockSizeAES128;     void *buffer = malloc(bufferSize);          size_t numBytesDecrypted = 0;     CCCryptorStatus cryptStatus = CCCrypt(kCCDecrypt, kCCAlgorithmDES,                                           kCCOptionPKCS7Padding | kCCOptionECBMode,                                           keyPtr, kCCBlockSizeDES,                                           NULL,                                           [data bytes], dataLength,                                           buffer, bufferSize,                                           &numBytesDecrypted);          if (cryptStatus == kCCSuccess) {         return [NSData dataWithBytesNoCopy:buffer length:numBytesDecrypted];     }          free(buffer);     return nil; } /****************************************************************************** 函數名稱 : + (NSData *)dataWithBase64EncodedString:(NSString *)string 函數描述 : base64格式字符串轉換爲文本數據 輸入參數 : (NSString *)string 輸出參數 : N/A 返回參數 : (NSData *) 備註信息 : ******************************************************************************/ + (NSData *)dataWithBase64EncodedString:(NSString *)string {     if (string == nil)         [NSException raise:NSInvalidArgumentException format:nil];     if ([string length] == 0)         return [NSData data];          static char *decodingTable = NULL;     if (decodingTable == NULL)     {         decodingTable = malloc(256);         if (decodingTable == NULL)             return nil;         memset(decodingTable, CHAR_MAX, 256);         NSUInteger i;         for (i = 0; i < 64; i++)             decodingTable[(short)encodingTable[i]] = i;     }          const char *characters = [string cStringUsingEncoding:NSASCIIStringEncoding];     if (characters == NULL)     //  Not an ASCII string!         return nil;     char *bytes = malloc((([string length] + 3) / 4) * 3);     if (bytes == NULL)         return nil;     NSUInteger length = 0;          NSUInteger i = 0;     while (YES)     {         char buffer[4];         short bufferLength;         for (bufferLength = 0; bufferLength < 4; i++)         {             if (characters[i] == '\0')                 break;             if (isspace(characters[i]) || characters[i] == '=')                 continue;             buffer[bufferLength] = decodingTable[(short)characters[i]];             if (buffer[bufferLength++] == CHAR_MAX)      //  Illegal character!             {                 free(bytes);                 return nil;             }         }                  if (bufferLength == 0)             break;         if (bufferLength == 1)      //  At least two characters are needed to produce one byte!         {             free(bytes);             return nil;         }                  //  Decode the characters in the buffer to bytes.         bytes[length++] = (buffer[0] << 2) | (buffer[1] >> 4);         if (bufferLength > 2)             bytes[length++] = (buffer[1] << 4) | (buffer[2] >> 2);         if (bufferLength > 3)             bytes[length++] = (buffer[2] << 6) | buffer[3];     }          bytes = realloc(bytes, length);     return [NSData dataWithBytesNoCopy:bytes length:length]; } /****************************************************************************** 函數名稱 : + (NSString *)base64EncodedStringFrom:(NSData *)data 函數描述 : 文本數據轉換爲base64格式字符串 輸入參數 : (NSData *)data 輸出參數 : N/A 返回參數 : (NSString *) 備註信息 : ******************************************************************************/ + (NSString *)base64EncodedStringFrom:(NSData *)data {     if ([data length] == 0)         return @"";          char *characters = malloc((([data length] + 2) / 3) * 4);     if (characters == NULL)         return nil;     NSUInteger length = 0;          NSUInteger i = 0;     while (i < [data length])     {         char buffer[3] = {0,0,0};         short bufferLength = 0;         while (bufferLength < 3 && i < [data length])             buffer[bufferLength++] = ((char *)[data bytes])[i++];                  //  Encode the bytes in the buffer to four characters, including padding "=" characters if necessary.         characters[length++] = encodingTable[(buffer[0] & 0xFC) >> 2];         characters[length++] = encodingTable[((buffer[0] & 0x03) << 4) | ((buffer[1] & 0xF0) >> 4)];         if (bufferLength > 1)             characters[length++] = encodingTable[((buffer[1] & 0x0F) << 2) | ((buffer[2] & 0xC0) >> 6)];         else characters[length++] = '=';         if (bufferLength > 2)             characters[length++] = encodingTable[buffer[2] & 0x3F];         else characters[length++] = '=';     }          return [[NSString alloc] initWithBytesNoCopy:characters length:length encoding:NSASCIIStringEncoding freeWhenDone:YES]; } @end

 

到此爲止，三平臺的加密已經所有結束，代碼能夠直接使用。