nodejs加密与解密

加密分类

可逆加密和不可逆加密

1. 不可逆加密: 加密后不可解密,只能通过碰撞密文以极小的概率解密;
2. 可逆加密: 加密后可以解密;包括对称加密与非对称加密;
   1. 对称加密双方采用共同密钥;
   2. 非对称加密: 这种加密方式存在两个密钥，密钥-- 一种是公钥，一种是密钥。使用公钥加密，则只能使用密钥解密，使用密钥加密，则只能使用公钥解密;

不可逆加密

    const crypto = require('crypto');

    let str = 'abcd';
    let password = 'hello';
    // 不可逆加密

    // 支持md5/sha1/sha256等加密
    let data1 = crypto.createHash('md5').update(str).digest('hex');
    console.log(data1);

    // 以指定key作为密码进行加密
    let data2 = crypto.createHmac('md5', password).update(str).digest('hex');
    console.log(data2);

可逆加密

对称加解密

    const crypto = require('crypto');
    let str = 'abcd';
    const password = 'FnJL7EDzjqWjcaY9';
    const iv = 'FnJL7EDzjqWjcaY9';
    // 加密
    const cipher = crypto.createCipheriv('aes-128-cbc', password, iv);
    cipher.update(str,'utf8', 'hex')
    let data3 = cipher.final('hex');
    console.log(data3);

    // 解密
    const decipher = crypto.createDecipheriv('aes-128-cbc', password, iv);
    decipher.update(data3, 'hex', 'utf8')
    let data4 = decipher.final().toString();
    console.log(data4);

非对称加解密(基于公钥密钥)

1. 生成公钥密钥

    openssl genrsa -out server.key
    openssl req -new -key server.key -out server.csr
    openssl x509 -req  -in server.csr -signkey server.key -out server.crt
   
   

2. 验证证书功能

    const crypto = require('crypto');
    const fs = require('fs');
    const sign = crypto.createSign('RSA-SHA256');
    const verify = crypto.createVerify('RSA-SHA256');
    const privateKey = fs.readFileSync('./server.key').toString();         //rsa私钥
    const publicKey = fs.readFileSync('./server.crt').toString();
    const str = 'abcd';
   
    sign.update(str);
    verify.update(str);
   
    let signture = sign.sign(privateKey);
    let result = verify.verify(publicKey, signture);
    console.log(result);         // true/false
   
   

3. 公钥密钥加解密

    const crypto = require('crypto');
    const fs = require('fs');
    const privateKey = fs.readFileSync('./server.key').toString();         //rsa私钥
    const publicKey = fs.readFileSync('./server.crt').toString();
    const str = 'abcd';
   
    // 公钥加密，密钥解密
    const publicEncodeData = crypto.publicEncrypt(publicKey, Buffer.from(str)).toString('base64');
    console.log("encode: ", publicEncodeData);
    const privateDecodeData = crypto.privateDecrypt(privateKey, Buffer.from(publicEncodeData.toString('base64'), 'base64'));
    console.log("decode: ", privateDecodeData.toString())
   
    // 密钥加密，公钥解密
    const privateEncodeData = crypto.privateEncrypt(privateKey, Buffer.from(str)).toString('base64');
    console.log("encode: ", privateEncodeData);
    const publicDecodeData = crypto.publicDecrypt(privateKey, Buffer.from(privateEncodeData.toString('base64'), 'base64'));
    console.log("decode: ", publicDecodeData.toString())
   

example

var crypto = require('crypto');

/**
 * 加密方法
 * @param key 加密key
 * @param iv       向量
 * @param data     需要加密的数据
 * @returns string
 */
var encrypt = function (key, iv, data) {
    var cipher = crypto.createCipheriv('aes-128-cbc', key, iv);
    var crypted = cipher.update(data, 'utf8', 'binary');
    crypted += cipher.final('binary');
    crypted = Buffer.from(crypted, 'binary').toString('base64');
    return crypted;
};

/**
 * 解密方法
 * @param key      解密的key
 * @param iv       向量
 * @param crypted  密文
 * @returns string
 */
var decrypt = function (key, iv, crypted) {
    crypted = Buffer.from(crypted, 'base64').toString('binary');
    var decipher = crypto.createDecipheriv('aes-128-cbc', key, iv);
    var decoded = decipher.update(crypted, 'binary', 'utf8');
    decoded += decipher.final('utf8');
    return decoded;
};

var key = '751f621ea5c8f930';
console.log('加密的key:', key.toString('hex'));
var iv = '2624750004598718';
console.log('加密的iv:', iv);
// var data = "Hello, nodejs. 演示aes-128-cbc加密和解密";
var data =JSON.stringify({user: "www", pass:"wwwww/"})
console.log("需要加密的数据:", data);
var crypted = encrypt(key, iv, data);
console.log("数据加密后:", crypted);
var dec = decrypt(key, iv, crypted);
console.log("数据解密后:", JSON.parse(dec));