PHP OpenSSL 已经封装了 base64 ，encrypt 后不需要再次 base64，lua就需要单独操作
lua 加密后 PHP不能解密，具体原因还没了解到底层，现在测试成功了 CBC模式的
先上 CBC模式的代码吧
PHP代码
public static function aesEncrypt($data, $method, $key, $iv, $options = 0)
{
if (empty($data)) {
return '';
}
$validMethods = openssl_get_cipher_methods();
if (!in_array($method, $validMethods)) {
throw new \Exception('param `method` is invalid`');
}
return openssl_encrypt($data, $method, $key, $options, $iv);
}
public static function aesDecrypt($data, $method, $key, $iv, $options = 0)
{
if (empty($data)) {
return '';
}
$validMethods = openssl_get_cipher_methods();
if (!in_array($method, $validMethods)) {
throw new \Exception('param `method` is invalid`');
}
return openssl_decrypt($data, $method, $key, $options, $iv);
}
Lua代码：
local _M = {}
local base64_encode = ngx.encode_base64
local base64_decode = ngx.decode_base64
local aes = require("resty.aes")
_M.aes_128_cbc = 'AES-128-CBC'
_M.aes_128_ecb = 'AES-128-ECB'
_M.aes_256_cbc = 'AES-256-CBC'
_M.aes_256_ecb = 'AES-256-ECB'
local ciphers = {
[_M.aes_128_cbc] = aes.cipher(128, 'cbc'),
[_M.aes_128_ecb] = aes.cipher(128, 'ecb'),
[_M.aes_256_cbc] = aes.cipher(256, 'cbc'),
[_M.aes_256_ecb] = aes.cipher(256, 'ecb')
}
--aes加密
function _M.aes_encrypt(data, key, method, iv)
local aes_cipher
if method and ciphers[method] then
aes_cipher = ciphers[method]
end
-- the default cipher is AES 128 CBC with 1 round of MD5
local aes_obj, err = aes:new(key, nil, aes_cipher, {iv = iv})
if not aes_obj then
return nil, err
end
local encrypted, err = aes_obj:encrypt(data)
if not encrypted then
return nil, err
end
return base64_encode(encrypted)
end
--aes解密
function _M.aes_decrypt(encode_data, key, method, iv)
local aes_cipher
if method and ciphers[method] then
aes_cipher = ciphers[method]
end
-- the default cipher is AES 128 CBC with 1 round of MD5
local aes_obj, err = aes:new(key, nil, aes_cipher, {iv = iv})
if not aes_obj then
return nil, err
end
local data = base64_decode(encode_data)
if not data then
return nil
end
data, err = aes_obj:decrypt(data)
if not data then
return nil, err
end
return data
end
网友评论