|
最近在做一个项目需要实现一个SSO,这个项目是由两个Team共同开发,其中一个Team使用Java作为开发语言,另一个通过PHP。这样就存在一个在Java和PHP中传递用户身份的问题,实现方法是通过DES加密Cookie实现,这样就要求Java和PHP在DES以后出来的结果一致,费劲一番周折终于实现这两种语言实现相同结果的代码,代码如下:
Java代码
/* * @(#)CookieCrypt.java * * Create Version:1.0.0 * Author:Cobra Pang * Create Date:2007-12-17 * * Copyright (c) 2006 UTStarcom(China) Corporation. All Right Reserved. */ import java.io.IOException;import java.security.SecureRandom; import javax.crypto.Cipher;import javax.crypto.SecretKey;import javax.crypto.SecretKeyFactory;import javax.crypto.spec.DESKeySpec; import sun.misc.BASE64Decoder;import sun.misc.BASE64Encoder; /** * CookieCrypt * @author Cobra Pang * @version1.0.02007-12-17 */public class CookieCrypt {// Crypt Keyprivate byte[] desKey;public CookieCrypt(String desKey) {this.desKey = desKey.getBytes();}/** * DES Encoder * @param plainText * @return * @throws Exception */public byte[] desEncrypt(byte[] plainText) throws Exception { SecureRandom sr = new SecureRandom(); byte rawKeyData[] = desKey;DESKeySpec dks = new DESKeySpec(rawKeyData); SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES"); SecretKey key = keyFactory.generateSecret(dks); Cipher cipher = Cipher.getInstance("DES"); cipher.init(Cipher.ENCRYPT_MODE, key, sr); byte data[] = plainText; byte encryptedData[] = cipher.doFinal(data); return encryptedData; }/** * DES Decoder * @param encryptText * @return * @throws Exception */public byte[] desDecrypt(byte[] encryptText) throws Exception { SecureRandom sr = new SecureRandom(); byte rawKeyData[] = desKey; DESKeySpec dks = new DESKeySpec(rawKeyData); SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES"); SecretKey key = keyFactory.generateSecret(dks); Cipher cipher = Cipher.getInstance("DES"); cipher.init(Cipher.DECRYPT_MODE, key, sr); byte encryptedData[] = encryptText; byte decryptedData[] = cipher.doFinal(encryptedData); return decryptedData; }/** * Cookie Encoder * @param input * @return * @throws Exception */public String encrypt(String input) throws Exception {return base64Encode(desEncrypt(input.getBytes()));}/** * Cookie Decoder * @param input * @return * @throws Exception */public String decrypt(String input) throws Exception {byte[] result = base64Decode(input);return new String(desDecrypt(result));}/** * Base64 Encode * @param s * @return */public static String base64Encode(byte[] s) {if (s == null) return null;BASE64Encoder b = new sun.misc.BASE64Encoder();return b.encode(s);}/** * Base64 Decode * @param s * @return * @throws IOException */public static byte[] base64Decode(String s) throws IOException {if (s == null) return null;BASE64Decoder decoder = new BASE64Decoder();byte[] b = decoder.decodeBuffer(s);return b;} public static void main(String[] args) throws Exception {String key = "123321";String input = "1|utstar@utstar.com|11000000000000|";CookieCrypt crypt = new CookieCrypt(key);System.out.println("Encode:" + crypt.encrypt(input));System.out.println("Decode:" + crypt.decrypt(crypt.encrypt(input))); }}
PHP代码
<?php/* * @(#)CookieCrypt.php * * Create Version:1.0.0 * Author:Cobra Pang * Create Date:2007-12-17 * * Copyright (c) 2006 UTStarcom(China) Corporation. All Right Reserved. */class CookieCrypt {var $key;function CookieCrypt($key) {$this->key = $key;}function encrypt($input) {$size = mcrypt_get_block_size('des', 'ecb'); $input = $this->pkcs5_pad($input, $size); $key = $this->key; $td = mcrypt_module_open('des', '', 'ecb', ''); $iv = @mcrypt_create_iv (mcrypt_enc_get_iv_size($td), MCRYPT_RAND); @mcrypt_generic_init($td, $key, $iv); $data = mcrypt_generic($td, $input); mcrypt_generic_deinit($td); mcrypt_module_close($td); $data = base64_encode($data); return $data;}function decrypt($encrypted) {$encrypted = base64_decode($encrypted); $key =$this->key; $td = mcrypt_module_open('des','','ecb',''); //使用MCRYPT_DES算法,cbc模式 $iv = @mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_RAND); $ks = mcrypt_enc_get_key_size($td); @mcrypt_generic_init($td, $key, $iv); //初始处理 $decrypted = mdecrypt_generic($td, $encrypted); //解密 mcrypt_generic_deinit($td); //结束 mcrypt_module_close($td); $y=$this->pkcs5_unpad($decrypted); return $y;}function pkcs5_pad ($text, $blocksize) { $pad = $blocksize - (strlen($text) % $blocksize); return $text . str_repeat(chr($pad), $pad);} function pkcs5_unpad($text) {$pad = ord($text{strlen($text)-1});if ($pad > strlen($text)) return false;if (strspn($text, chr($pad), strlen($text) - $pad) != $pad) return false; return substr($text, 0, -1 * $pad);}} $key = "123321";$input = "1|utstar@utstar.com|11000000000000|"; $crypt = new CookieCrypt($key);echo "Encode:".$crypt->encrypt($input)."<br/>";echo "Decode:".$crypt->decrypt($crypt->encrypt($input));?> |
|
|