JAVA AES加解密。ECB模式和CBC有向量moshi

本文參考了大量的博客，其中這篇博客參考了大部分內容：java實現多種加密模式的AES算法-總有一種你用的着

以下代碼，修改一下包名，添加以下apache-commons包即可運行。

package com.eastcom.bbf.bs.management.util;

import java.io.UnsupportedEncodingException;
import java.nio.charset.StandardCharsets;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.Security;

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;

import org.apache.commons.codec.binary.Base64;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;

@Component
public class AesUtil {

  /**
   * randomSourceLength:隨機源長度.
   * 
   * @since JDK 1.8
   */
  @Value("${time.science.random.source.length}")
  private int randomSourceLength = 128;

  public static final String CIPHER_MODE_ECB_PKCS5PADDING = "AES/ECB/PKCS5Padding";
  public static final String CIPHER_MODE_ECB_PKCS7PADDING = "AES/ECB/PKCS7Padding";
  public static final String CIPHER_MODE_CBC_PKCS5PADDING = "AES/CBC/PKCS5Padding";

  public static final String ENCRY_ALG = "AES";
  public static final String ENCODE_NAME_UTF8 = "utf-8";

  // ======================== AES/ECB/PKCSNPadding ==============
  /**
   * aesEcbPkcsNPaddingEncrypt:AES，ECB無向量加密. <br/>
   *
   * @author atc
   * @param password
   *          密鑰明文
   * @param content
   *          內容
   * @return 加密後BASE64字符串
   * @since JDK 1.8
   */
  public String aesEcbPkcsNPaddingEncrypt(String password, String content,
      String cipherMode) {
    try {
      Security.addProvider(
          new org.bouncycastle.jce.provider.BouncyCastleProvider());
      // 根據字節數組生成AES密鑰
      SecretKey key = passwordKeyBytes(password);
      // 根據指定算法AES自成密碼器
      Cipher cipher = Cipher.getInstance(cipherMode);
      // 初始化密碼器，第一個參數爲加密(Encrypt_mode)或者解密解密(Decrypt_mode)操作，第二個參數爲使用的KEY
      cipher.init(Cipher.ENCRYPT_MODE, key);
      // 獲取加密內容的字節數組(這裏要設置爲utf-8)不然內容中如果有中文和英文混合中文就會解密爲亂碼
      byte[] byteEncode = content.getBytes(ENCODE_NAME_UTF8);
      // 根據密碼器的初始化方式--加密：將數據加密
      byte[] byteAes = cipher.doFinal(byteEncode);
      // 將加密後的數據轉換爲字符串
      // 將字符串返回
      return new Base64().encodeToString(byteAes);
    } catch (Exception e) {
      e.printStackTrace();
    }
    return null;
  }

  /**
   * aesEcbPkcsNPaddingDecrypt:AES，ECB無向量解密. <br/>
   *
   * @author atc
   * @param password
   *          密碼
   * @param content
   *          待解密內容
   * @return 解密後的內容
   * @since JDK 1.8
   */
  public String aesEcbPkcsNPaddingDecrypt(String password, String content,
      String cipherMode) {
    try {
      // 根據指定算法AES自成密碼器
      Cipher cipher = Cipher.getInstance(cipherMode);
      // 初始化密碼器，第一個參數爲加密(Encrypt_mode)或者解密(Decrypt_mode)操作，第二個參數爲使用的KEY
      cipher.init(Cipher.DECRYPT_MODE, passwordKeyBytes(password));
      // 將加密並編碼後的內容解碼成字節數組
      byte[] bs = Base64.decodeBase64(content);
      byte[] byteDecode = cipher.doFinal(bs);
      return new String(byteDecode, StandardCharsets.UTF_8);
    } catch (Exception e) {
      e.printStackTrace();
    }
    return null;
  }

  // =============================== 有向量 =====================
  /**
   * createIV:創建指定長度向量. <br/>
   *
   * @author atc
   * @param ivSize
   *          向量長度
   * @param password
   *          密碼
   * @return 向量
   * @since JDK 1.8
   */
  private IvParameterSpec createIV(int ivSize, String password) {
    StringBuffer sb = new StringBuffer(ivSize);
    sb.append(password);
    if (sb.length() > ivSize) {
      sb.setLength(ivSize);
    }
    if (sb.length() < ivSize) {
      while (sb.length() < ivSize) {
        sb.append("0");
      }
    }
    byte[] data = null;
    try {
      data = sb.toString().getBytes(ENCODE_NAME_UTF8);
    } catch (UnsupportedEncodingException e) {
      e.printStackTrace();
    }
    return new IvParameterSpec(data);
  }

  /**
   * aesCbcPkcsNPaddingEncrypt:有向量CBC模式. <br/>
   *
   * @author atc
   * @param password 密碼
   * @param content 待加密內容
   * @param ivSize 向量長度
   * @param cipherMode 加密模式
   * @return 
   * @since JDK 1.8
   */
  public String aesCbcPkcsNPaddingEncrypt(String password, String content,
      int ivSize, String cipherMode) {
    try {
      byte[] byteEncode = content.getBytes(ENCODE_NAME_UTF8);
      SecretKeySpec key = (SecretKeySpec) passwordKeyBytes(password);
      Cipher cipher = Cipher.getInstance(cipherMode);
      cipher.init(Cipher.ENCRYPT_MODE, key, createIV(ivSize, password));
      byte[] data = cipher.doFinal(byteEncode);
      String result = Base64.encodeBase64String(data);
      return result;
    } catch (Exception e) {
      e.printStackTrace();
    }
    return null;
  }
  
  
  /**
   * aesCbcPkcsNPaddingDecrypt:AES數據解密，有向量CBC模式. <br/>
   *
   * @author atc
   * @param password 密碼 
   * @param content 加密後的內容
   * @param ivSize 向量長度
   * @param cipherMode 加密模式
   * @return 解密後的內容
   * @since JDK 1.8
   */
  public String aesCbcPkcsNPaddingDecrypt(String password,String content,int ivSize, String cipherMode)  {
      try {
          byte[] data=Base64.decodeBase64(content);
          SecretKeySpec key = (SecretKeySpec) passwordKeyBytes(password);
          Cipher cipher = Cipher.getInstance(cipherMode);
          cipher.init(Cipher.DECRYPT_MODE, key, createIV(ivSize, password));
          byte[] bs = cipher.doFinal(data);
          String result=new String(bs,ENCODE_NAME_UTF8);
          return result;
      } catch (Exception e) {
          e.printStackTrace();
      }
      return null;
  }

  /**
   * passwordKeyBytes:密鑰KEY生成. <br/>
   *
   * @author atc
   * @param password
   *          明文密碼
   * @return 生成密碼對應算法的密鑰
   * @since JDK 1.8
   */
  public SecretKey passwordKeyBytes(String password) {
    // 1.構造密鑰生成器，指定爲AES算法,不區分大小寫
    KeyGenerator keygen;
    try {
      keygen = KeyGenerator.getInstance(ENCRY_ALG);
      // 2.根據ecnodeRules規則初始化密鑰生成器
      // 生成一個128位的隨機源,根據傳入的字節數組
      keygen.init(randomSourceLength, new SecureRandom(password.getBytes()));
      // 3.產生原始對稱密鑰
      SecretKey originalKey = keygen.generateKey();
      // 4.獲得原始對稱密鑰的字節數組
      byte[] raw = originalKey.getEncoded();
      // 5.根據字節數組生成AES密鑰
      SecretKey key = new SecretKeySpec(raw, ENCRY_ALG);
      return key;
    } catch (NoSuchAlgorithmException e) {
      e.printStackTrace();
    }
    return null;

  }

  public static void main(String[] args) {

    String a = "18588888888";
    String p = "1234";
    AesUtil aesUtil = new AesUtil();
    System.out.println("原值：" + a);
    System.out.println(CIPHER_MODE_ECB_PKCS5PADDING);
    String r = aesUtil.aesEcbPkcsNPaddingEncrypt(p, a,
        CIPHER_MODE_ECB_PKCS5PADDING);
    System.out.println("aesPKCS5PaddingEncrypt加密後：" + r);
    System.out.println("解密後：" + aesUtil.aesEcbPkcsNPaddingDecrypt(p, r,
        CIPHER_MODE_ECB_PKCS5PADDING));

    System.out.println(CIPHER_MODE_ECB_PKCS7PADDING);

    r = aesUtil.aesEcbPkcsNPaddingEncrypt(p, a, CIPHER_MODE_ECB_PKCS7PADDING);
    System.out.println("aesPKCS5PaddingEncrypt加密後：" + r);
    System.out.println("解密後：" + aesUtil.aesEcbPkcsNPaddingDecrypt(p, r,
        CIPHER_MODE_ECB_PKCS7PADDING));
    
    
    System.out.println("==============CBC moshi 模式");
    r = aesUtil.aesCbcPkcsNPaddingEncrypt(p, a,16,CIPHER_MODE_CBC_PKCS5PADDING);
    System.out.println("aesPKCS5PaddingEncrypt加密後：" + r);
    System.out.println("解密後：" + aesUtil.aesCbcPkcsNPaddingDecrypt(p, r,16,
        CIPHER_MODE_CBC_PKCS5PADDING));
    
  }

}