[引]Android、iPhone和Java三个平台一致的加密工具 .

[022] Android、iPhone和Java三个平台一致的加密工具 .
分类： Android开发 iPhone开发 2012-10-12 00:03 181人阅读 评论(6) 收藏 举报
        先前一直在做安卓，最近要开发iPhone客户端，这其中遇到的最让人纠结的要属Java、Android和iPhone三个平台加解密不一致的问题。因为手机端后台通常是用JAVA开发的Web Service，Android和iPhone客户端调用同样的Web Service接口，为了数据安全考虑，要对数据进行加密。头疼的问题就来了，很难编写出一套加密程序，在3个平台间加解密的结果一致，总不能为Android和iPhone两个客户端各写一套Web Service接口吧？我相信还会有很多朋友为此困惑，在此分享一套3DES加密程序，能够实现Java、Android和iPhone三个平台加解密一致。

        首先是JAVA端的加密工具类，它同样适用于Android端，无需任何修改，即可保证Java与Android端的加解密一致，并且中文不会乱码。

[java] view plaincopyprint?
01.package org.liuyq.des3; 
02. 
03.import java.security.Key; 
04. 
05.import javax.crypto.Cipher; 
06.import javax.crypto.SecretKeyFactory; 
07.import javax.crypto.spec.DESedeKeySpec; 
08.import javax.crypto.spec.IvParameterSpec; 
09. 
10./**
11. * 3DES加密工具类
12. * 
13. * @author liufeng 
14. * @date 2012-10-11
15. */ 
16.public class Des3 { 
17.    // 密钥  
18.    private final static String secretKey = "liuyunqiang@lx100$#365#$"; 
19.    // 向量  
20.    private final static String iv = "01234567"; 
21.    // 加解密统一使用的编码方式  
22.    private final static String encoding = "utf-8"; 
23. 
24.    /**
25.     * 3DES加密
26.     * 
27.     * @param plainText 普通文本
28.     * @return
29.     * @throws Exception 
30.     */ 
31.    public static String encode(String plainText) throws Exception { 
32.        Key deskey = null; 
33.        DESedeKeySpec spec = new DESedeKeySpec(secretKey.getBytes()); 
34.        SecretKeyFactory keyfactory = SecretKeyFactory.getInstance("desede"); 
35.        deskey = keyfactory.generateSecret(spec); 
36. 
37.        Cipher cipher = Cipher.getInstance("desede/CBC/PKCS5Padding"); 
38.        IvParameterSpec ips = new IvParameterSpec(iv.getBytes()); 
39.        cipher.init(Cipher.ENCRYPT_MODE, deskey, ips); 
40.        byte[] encryptData = cipher.doFinal(plainText.getBytes(encoding)); 
41.        return Base64.encode(encryptData); 
42.    } 
43. 
44.    /**
45.     * 3DES解密
46.     * 
47.     * @param encryptText 加密文本
48.     * @return
49.     * @throws Exception
50.     */ 
51.    public static String decode(String encryptText) throws Exception { 
52.        Key deskey = null; 
53.        DESedeKeySpec spec = new DESedeKeySpec(secretKey.getBytes()); 
54.        SecretKeyFactory keyfactory = SecretKeyFactory.getInstance("desede"); 
55.        deskey = keyfactory.generateSecret(spec); 
56.        Cipher cipher = Cipher.getInstance("desede/CBC/PKCS5Padding"); 
57.        IvParameterSpec ips = new IvParameterSpec(iv.getBytes()); 
58.        cipher.init(Cipher.DECRYPT_MODE, deskey, ips); 
59. 
60.        byte[] decryptData = cipher.doFinal(Base64.decode(encryptText)); 
61. 
62.        return new String(decryptData, encoding); 
63.    } 
64.} 
package org.liuyq.des3;

import java.security.Key;

import javax.crypto.Cipher;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESedeKeySpec;
import javax.crypto.spec.IvParameterSpec;

/**
* 3DES加密工具类
*
* @author liufeng
* @date 2012-10-11
*/
public class Des3 {
// 密钥
private final static String secretKey = "liuyunqiang@lx100$#365#$";
// 向量
private final static String iv = "01234567";
// 加解密统一使用的编码方式
private final static String encoding = "utf-8";

/**
* 3DES加密
*
* @param plainText 普通文本
* @return
* @throws Exception
*/
public static String encode(String plainText) throws Exception {
Key deskey = null;
DESedeKeySpec spec = new DESedeKeySpec(secretKey.getBytes());
SecretKeyFactory keyfactory = SecretKeyFactory.getInstance("desede");
deskey = keyfactory.generateSecret(spec);

Cipher cipher = Cipher.getInstance("desede/CBC/PKCS5Padding");
IvParameterSpec ips = new IvParameterSpec(iv.getBytes());
cipher.init(Cipher.ENCRYPT_MODE, deskey, ips);
byte[] encryptData = cipher.doFinal(plainText.getBytes(encoding));
return Base64.encode(encryptData);
}

/**
* 3DES解密
*
* @param encryptText 加密文本
* @return
* @throws Exception
*/
public static String decode(String encryptText) throws Exception {
Key deskey = null;
DESedeKeySpec spec = new DESedeKeySpec(secretKey.getBytes());
SecretKeyFactory keyfactory = SecretKeyFactory.getInstance("desede");
deskey = keyfactory.generateSecret(spec);
Cipher cipher = Cipher.getInstance("desede/CBC/PKCS5Padding");
IvParameterSpec ips = new IvParameterSpec(iv.getBytes());
cipher.init(Cipher.DECRYPT_MODE, deskey, ips);

byte[] decryptData = cipher.doFinal(Base64.decode(encryptText));

return new String(decryptData, encoding);
}
}
        上面的加密工具类会使用到Base64这个类，该类的源代码如下：

[java] view plaincopyprint?
01.package org.liuyq.des3; 
02.import java.io.ByteArrayOutputStream; 
03.import java.io.IOException; 
04.import java.io.OutputStream; 
05. 
06./**
07. * Base64编码工具类
08. * 
09. * @author liufeng 
10. * @date 2012-10-11
11. */ 
12.public class Base64 { 
13.    private static final char[] legalChars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray(); 
14. 
15.    public static String encode(byte[] data) { 
16.        int start = 0; 
17.        int len = data.length; 
18.        StringBuffer buf = new StringBuffer(data.length * 3 / 2); 
19. 
20.        int end = len - 3; 
21.        int i = start; 
22.        int n = 0; 
23. 
24.        while (i <= end) { 
25.            int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 0x0ff) << | (((int) data[i + 2]) & 0x0ff); 
26. 
27.            buf.append(legalChars[(d >> 18) & 63]); 
28.            buf.append(legalChars[(d >> 12) & 63]); 
29.            buf.append(legalChars[(d >> 6) & 63]); 
30.            buf.append(legalChars[d & 63]); 
31. 
32.            i += 3; 
33. 
34.            if (n++ >= 14) { 
35.                n = 0; 
36.                buf.append(" "); 
37.            } 
38.        } 
39. 
40.        if (i == start + len - 2) { 
41.            int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 255) <<; 
42. 
43.            buf.append(legalChars[(d >> 18) & 63]); 
44.            buf.append(legalChars[(d >> 12) & 63]); 
45.            buf.append(legalChars[(d >> 6) & 63]); 
46.            buf.append("="); 
47.        } else if (i == start + len - 1) { 
48.            int d = (((int) data[i]) & 0x0ff) << 16; 
49. 
50.            buf.append(legalChars[(d >> 18) & 63]); 
51.            buf.append(legalChars[(d >> 12) & 63]); 
52.            buf.append("=="); 
53.        } 
54. 
55.        return buf.toString(); 
56.    } 
57. 
58.    private static int decode(char c) { 
59.        if (c >= 'A' && c <= 'Z') 
60.            return ((int) c) - 65; 
61.        else if (c >= 'a' && c <= 'z') 
62.            return ((int) c) - 97 + 26; 
63.        else if (c >= '0' && c <= '9') 
64.            return ((int) c) - 48 + 26 + 26; 
65.        else 
66.            switch (c) { 
67.            case '+': 
68.                return 62; 
69.            case '/': 
70.                return 63; 
71.            case '=': 
72.                return 0; 
73.            default: 
74.                throw new RuntimeException("unexpected code: " + c); 
75.            } 
76.    } 
77. 
78.    /**
79.     * Decodes the given Base64 encoded String to a new byte array. The byte array holding the decoded data is returned.
80.     */ 
81. 
82.    public static byte[] decode(String s) { 
83. 
84.        ByteArrayOutputStream bos = new ByteArrayOutputStream(); 
85.        try { 
86.            decode(s, bos); 
87.        } catch (IOException e) { 
88.            throw new RuntimeException(); 
89.        } 
90.        byte[] decodedBytes = bos.toByteArray(); 
91.        try { 
92.            bos.close(); 
93.            bos = null; 
94.        } catch (IOException ex) { 
95.            System.err.println("Error while decoding BASE64: " + ex.toString()); 
96.        } 
97.        return decodedBytes; 
98.    } 
99. 
100.    private static void decode(String s, OutputStream os) throws IOException { 
101.        int i = 0; 
102. 
103.        int len = s.length(); 
104. 
105.        while (true) { 
106.            while (i < len && s.charAt(i) <= ' ') 
107.                i++; 
108. 
109.            if (i == len) 
110.                break; 
111. 
112.            int tri = (decode(s.charAt(i)) << 18) + (decode(s.charAt(i + 1)) << 12) + (decode(s.charAt(i + 2)) << 6) + (decode(s.charAt(i + 3))); 
113. 
114.            os.write((tri >> 16) & 255); 
115.            if (s.charAt(i + 2) == '=') 
116.                break; 
117.            os.write((tri >> & 255); 
118.            if (s.charAt(i + 3) == '=') 
119.                break; 
120.            os.write(tri & 255); 
121. 
122.            i += 4; 
123.        } 
124.    } 
125.} 
package org.liuyq.des3;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.OutputStream;

/**
* Base64编码工具类
*
* @author liufeng
* @date 2012-10-11
*/
public class Base64 {
private static final char[] legalChars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray();

public static String encode(byte[] data) {
int start = 0;
int len = data.length;
StringBuffer buf = new StringBuffer(data.length * 3 / 2);

int end = len - 3;
int i = start;
int n = 0;

while (i <= end) {
int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 0x0ff) << | (((int) data[i + 2]) & 0x0ff);

buf.append(legalChars[(d >> 18) & 63]);
buf.append(legalChars[(d >> 12) & 63]);
buf.append(legalChars[(d >> 6) & 63]);
buf.append(legalChars[d & 63]);

i += 3;

if (n++ >= 14) {
n = 0;
buf.append(" ");
}
}

if (i == start + len - 2) {
int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 255) <<;

buf.append(legalChars[(d >> 18) & 63]);
buf.append(legalChars[(d >> 12) & 63]);
buf.append(legalChars[(d >> 6) & 63]);
buf.append("=");
} else if (i == start + len - 1) {
int d = (((int) data[i]) & 0x0ff) << 16;

buf.append(legalChars[(d >> 18) & 63]);
buf.append(legalChars[(d >> 12) & 63]);
buf.append("==");
}

return buf.toString();
}

private static int decode(char c) {
if (c >= 'A' && c <= 'Z')
return ((int) c) - 65;
else if (c >= 'a' && c <= 'z')
return ((int) c) - 97 + 26;
else if (c >= '0' && c <= '9')
return ((int) c) - 48 + 26 + 26;
else
switch (c) {
case '+':
return 62;
case '/':
return 63;
case '=':
return 0;
default:
throw new RuntimeException("unexpected code: " + c);
}
}

/**
* Decodes the given Base64 encoded String to a new byte array. The byte array holding the decoded data is returned.
*/

public static byte[] decode(String s) {

ByteArrayOutputStream bos = new ByteArrayOutputStream();
try {
decode(s, bos);
} catch (IOException e) {
throw new RuntimeException();
}
byte[] decodedBytes = bos.toByteArray();
try {
bos.close();
bos = null;
} catch (IOException ex) {
System.err.println("Error while decoding BASE64: " + ex.toString());
}
return decodedBytes;
}

private static void decode(String s, OutputStream os) throws IOException {
int i = 0;

int len = s.length();

while (true) {
while (i < len && s.charAt(i) <= ' ')
i++;

if (i == len)
break;

int tri = (decode(s.charAt(i)) << 18) + (decode(s.charAt(i + 1)) << 12) + (decode(s.charAt(i + 2)) << 6) + (decode(s.charAt(i + 3)));

os.write((tri >> 16) & 255);
if (s.charAt(i + 2) == '=')
break;
os.write((tri >> & 255);
if (s.charAt(i + 3) == '=')
break;
os.write(tri & 255);

i += 4;
}
}
}
        接下来是iPhone端的加密程序，当然是用Ojbective-C写的3DES加密程序，源代码如下：

[plain] view plaincopyprint?
01.// 
02.//  DES3Util.h 
03.//  lx100-gz 
04.// 
05.//  Created by  柳峰 on 12-10-10. 
06.//  Copyright 2012 http://blog.csdn.net/lyq8479. All rights reserved. 
07.// 
08. 
09.#import <Foundation/Foundation.h> 
10. 
11. 
12.@interface DES3Util : NSObject { 
13. 
14.} 
15. 
16.// 加密方法 
17.+ (NSString*)encrypt:(NSString*)plainText; 
18. 
19.// 解密方法 
20.+ (NSString*)decrypt:(NSString*)encryptText; 
21. 
22.@end 
//
//  DES3Util.h
//  lx100-gz
//
//  Created by  柳峰 on 12-10-10.
//  Copyright 2012 http://blog.csdn.net/lyq8479. All rights reserved.
//

#import <Foundation/Foundation.h>


@interface DES3Util : NSObject {

}

// 加密方法
+ (NSString*)encrypt:(NSString*)plainText;

// 解密方法
+ (NSString*)decrypt:(NSString*)encryptText;

@end
[plain] view plaincopyprint?
01.// 
02.//  DES3Util.m 
03.//  lx100-gz 
04.// 
05.//  Created by  柳峰 on 12-9-17. 
06.//  Copyright 2012 http://blog.csdn.net/lyq8479. All rights reserved. 
07.// 
08. 
09.#import "DES3Util.h" 
10.#import <CommonCrypto/CommonCryptor.h> 
11.#import "GTMBase64.h" 
12. 
13.#define gkey            @"liuyunqiang@lx100$#365#$" 
14.#define gIv             @"01234567" 
15. 
16.@implementation DES3Util 
17. 
18.// 加密方法 
19.+ (NSString*)encrypt:(NSString*)plainText { 
20.    NSData* data = [plainText dataUsingEncoding:NSUTF8StringEncoding]; 
21.    size_t plainTextBufferSize = [data length]; 
22.    const void *vplainText = (const void *)[data bytes]; 
23.     
24.    CCCryptorStatus ccStatus; 
25.    uint8_t *bufferPtr = NULL; 
26.    size_t bufferPtrSize = 0; 
27.    size_t movedBytes = 0; 
28.     
29.    bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1); 
30.    bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t)); 
31.    memset((void *)bufferPtr, 0x0, bufferPtrSize); 
32.     
33.    const void *vkey = (const void *) [gkey UTF8String]; 
34.    const void *vinitVec = (const void *) [gIv UTF8String]; 
35.     
36.    ccStatus = CCCrypt(kCCEncrypt, 
37.                       kCCAlgorithm3DES, 
38.                       kCCOptionPKCS7Padding, 
39.                       vkey, 
40.                       kCCKeySize3DES, 
41.                       vinitVec, 
42.                       vplainText, 
43.                       plainTextBufferSize, 
44.                       (void *)bufferPtr, 
45.                       bufferPtrSize, 
46.                       &movedBytes); 
47.     
48.    NSData *myData = [NSData dataWithBytes:(const void *)bufferPtr length:(NSUInteger)movedBytes]; 
49.    NSString *result = [GTMBase64 stringByEncodingData:myData]; 
50.    return result; 
51.} 
52. 
53.// 解密方法 
54.+ (NSString*)decrypt:(NSString*)encryptText { 
55.    NSData *encryptData = [GTMBase64 decodeData:[encryptText dataUsingEncoding:NSUTF8StringEncoding]]; 
56.    size_t plainTextBufferSize = [encryptData length]; 
57.    const void *vplainText = [encryptData bytes]; 
58.     
59.    CCCryptorStatus ccStatus; 
60.    uint8_t *bufferPtr = NULL; 
61.    size_t bufferPtrSize = 0; 
62.    size_t movedBytes = 0; 
63.     
64.    bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1); 
65.    bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t)); 
66.    memset((void *)bufferPtr, 0x0, bufferPtrSize); 
67.     
68.    const void *vkey = (const void *) [gkey UTF8String]; 
69.    const void *vinitVec = (const void *) [gIv UTF8String]; 
70.     
71.    ccStatus = CCCrypt(kCCDecrypt, 
72.                       kCCAlgorithm3DES, 
73.                       kCCOptionPKCS7Padding, 
74.                       vkey, 
75.                       kCCKeySize3DES, 
76.                       vinitVec, 
77.                       vplainText, 
78.                       plainTextBufferSize, 
79.                       (void *)bufferPtr, 
80.                       bufferPtrSize, 
81.                       &movedBytes); 
82.     
83.    NSString *result = [[[NSString alloc] initWithData:[NSData dataWithBytes:(const void *)bufferPtr  
84.                                length:(NSUInteger)movedBytes] encoding:NSUTF8StringEncoding] autorelease]; 
85.    return result; 
86.} 
87. 
88.@end 
//
//  DES3Util.m
//  lx100-gz
//
//  Created by  柳峰 on 12-9-17.
//  Copyright 2012 http://blog.csdn.net/lyq8479. All rights reserved.
//

#import "DES3Util.h"
#import <CommonCrypto/CommonCryptor.h>
#import "GTMBase64.h"

#define gkey @"liuyunqiang@lx100$#365#$"
#define gIv             @"01234567"

@implementation DES3Util

// 加密方法
+ (NSString*)encrypt:(NSString*)plainText {
    NSData* data = [plainText dataUsingEncoding:NSUTF8StringEncoding];
size_t plainTextBufferSize = [data length];
const void *vplainText = (const void *)[data bytes];
   
    CCCryptorStatus ccStatus;
    uint8_t *bufferPtr = NULL;
    size_t bufferPtrSize = 0;
    size_t movedBytes = 0;
   
    bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1);
    bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t));
    memset((void *)bufferPtr, 0x0, bufferPtrSize);
   
    const void *vkey = (const void *) [gkey UTF8String];
    const void *vinitVec = (const void *) [gIv UTF8String];
   
    ccStatus = CCCrypt(kCCEncrypt,
                       kCCAlgorithm3DES,
                       kCCOptionPKCS7Padding,
                       vkey,
                       kCCKeySize3DES,
                       vinitVec,
                       vplainText,
                       plainTextBufferSize,
                       (void *)bufferPtr,
                       bufferPtrSize,
                       &movedBytes);
   
    NSData *myData = [NSData dataWithBytes:(const void *)bufferPtr length:(NSUInteger)movedBytes];
NSString *result = [GTMBase64 stringByEncodingData:myData];
    return result;
}

// 解密方法
+ (NSString*)decrypt:(NSString*)encryptText {
    NSData *encryptData = [GTMBase64 decodeData:[encryptText dataUsingEncoding:NSUTF8StringEncoding]];
size_t plainTextBufferSize = [encryptData length];
const void *vplainText = [encryptData bytes];
   
    CCCryptorStatus ccStatus;
    uint8_t *bufferPtr = NULL;
    size_t bufferPtrSize = 0;
    size_t movedBytes = 0;
   
    bufferPtrSize = (plainTextBufferSize + kCCBlockSize3DES) & ~(kCCBlockSize3DES - 1);
    bufferPtr = malloc( bufferPtrSize * sizeof(uint8_t));
    memset((void *)bufferPtr, 0x0, bufferPtrSize);
   
    const void *vkey = (const void *) [gkey UTF8String];
    const void *vinitVec = (const void *) [gIv UTF8String];
   
    ccStatus = CCCrypt(kCCDecrypt,
                       kCCAlgorithm3DES,
                       kCCOptionPKCS7Padding,
                       vkey,
                       kCCKeySize3DES,
                       vinitVec,
                       vplainText,
                       plainTextBufferSize,
                       (void *)bufferPtr,
                       bufferPtrSize,
                       &movedBytes);
   
    NSString *result = [[[NSString alloc] initWithData:[NSData dataWithBytes:(const void *)bufferPtr
length:(NSUInteger)movedBytes] encoding:NSUTF8StringEncoding] autorelease];
    return result;
}

@end        iPhone端的加密工具类中引入了“GTMBase64.h”，这是iOS平台的Base64编码工具类，就不在这里贴出相关代码了，需要的百度一下就能找到，实在找不到就回复留言给我。

        好了，赶紧试一下吧，JAVA，Android和iPhone三个平台的加密不一致问题是不是解决了呢？其实，对此问题，还有一种更好的实现方式，那就是用C语言写一套加密程序，这样在iOS平台是可以直接使用C程序的，而在Java和Android端通过JNI去调用C语言编写的加密方法，这是不是就实现了3个平台调用同一套加密程序呢？