NodeJS AES-256-CBC 解密到 Java 的迁移指南

import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

// ...

String originalEncKey = "0Z8ZUcy1Qh8lnt199MTwTPEe2g1E2tE3";
byte[] keyInBytes = originalEncKey.getBytes(StandardCharsets.US_ASCII); // 根据NodeJS实际使用的编码选择，通常为UTF-8或ASCII
MessageDigest sha256 = MessageDigest.getInstance("SHA-256");
byte[] derivedKey = sha256.digest(keyInBytes); // 此时 derivedKey 已经是 32 字节

byte[] ivBytes = new byte[16]; // Java 会自动将数值类型数组初始化为零

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.util.Base64;

// ...

// 假设 derivedKey 和 ivBytes 已经如上所示创建
SecretKeySpec secretKeySpec = new SecretKeySpec(derivedKey, "AES");
IvParameterSpec ivParameterSpec = new IvParameterSpec(ivBytes);

Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
cipher.init(Cipher.DECRYPT_MODE, secretKeySpec, ivParameterSpec);

String someAuthStringBase64 = "YOUR_BASE64_ENCODED_STRING_HERE"; // 替换为实际的 Base64 字符串
byte[] encryptedBytes = Base64.getDecoder().decode(someAuthStringBase64);

byte[] decryptedBytes = cipher.doFinal(encryptedBytes);
String decryptedText = new String(decryptedBytes, StandardCharsets.UTF_8); // 根据预期输出编码选择

import javax.crypto.Cipher;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Base64;

public class AesDecryptionMigrator {

    private static final String ORIGINAL_ENC_KEY = "0Z8ZUcy1Qh8lnt199MTwTPEe2g1E2tE3";

    /**
     * 将Base64编码的加密字符串从NodeJS的AES-256-CBC模式解密到Java。
     * 纠正了NodeJS代码中不必要的自定义填充移除。
     *
     * @param base64EncryptedData Base64编码的待解密字符串
     * @return 解密后的明文
     * @throws Exception 如果解密过程中发生任何错误
     */
    public String decryptFromNodeJs(String base64EncryptedData) throws Exception {
        // 1. 密钥派生 (SHA-256)
        byte[] keyInBytes = ORIGINAL_ENC_KEY.getBytes(StandardCharsets.US_ASCII); // 确保与NodeJS编码一致
        MessageDigest sha256 = MessageDigest.getInstance("SHA-256");
        byte[] derivedKey = sha256.digest(keyInBytes); // 32字节密钥

        // 2. 初始化向量 (IV) 创建
        byte[] ivBytes = new byte[16]; // 16字节全零IV

        // 3. AES-256-CBC 解密
        SecretKeySpec secretKeySpec = new SecretKeySpec(derivedKey, "AES");
        IvParameterSpec ivParameterSpec = new IvParameterSpec(ivBytes);

        // 使用AES/CBC/PKCS5Padding模式，Java会自动处理填充
        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.DECRYPT_MODE, secretKeySpec, ivParameterSpec);

        // Base64 解码密文
        byte[] encryptedBytes = Base64.getDecoder().decode(base64EncryptedData);

        // 执行解密
        byte[] decryptedBytes = cipher.doFinal(encryptedBytes);

        // 将解密后的字节数组转换为字符串，根据预期输出编码选择
        return new String(decryptedBytes, StandardCharsets.UTF_8);
    }

    public static void main(String[] args) {
        AesDecryptionMigrator migrator = new AesDecryptionMigrator();
        // 假设这是从NodeJS加密并Base64编码后的字符串
        // 请替换为你的实际数据
        String someAuthString = "YOUR_BASE64_ENCODED_DATA_FROM_NODEJS";

        try {
            String decryptedResult = migrator.decryptFromNodeJs(someAuthString);
            System.out.println("解密成功: " + decryptedResult);
        } catch (Exception e) {
            System.err.println("解密失败: " + e.getMessage());
            e.printStackTrace();
        }
    }
}