Delphi(FMX):Windows中的DCPCrypt2在Android / IOS中产生不同的结果 - php

我正在尝试编写一个函数,该函数在Delphi(RAD Studio 10.2)中返回与以下PHP代码相同的结果:

<?php
  $method = 'AES-256-CTR';
  $data = 'Hello, world!';
  $key = 'bRuD5WYw5wd0rdHR9yLlM6wt2vteuini';
  $vector = 'bf49ea9d61104d8c'; 
  $crypt = openssl_encrypt($data, $method, $key, 0, $vector);
  echo $crypt;
?>

我在Pascal中想出了这个功能(使用David Barton编写的DCPcrypt v2.1库):

procedure TMainForm.Encrypt1ButtonClick(Sender: TObject);
var
  Cipher: TDCP_rijndael;
  Key, Vector: RawByteString;
  Data, Crypt: RawByteString;
begin
  Data := 'Hello, world!';                    
  SetLength(Crypt, Length(Data));
  Key := 'bRuD5WYw5wd0rdHR9yLlM6wt2vteuini';  
  Vector := 'bf49ea9d61104d8c';               
  Cipher := TDCP_rijndael.Create(nil);
  try
    Cipher.Init(Key[1], 256, @Vector[1]);
    Cipher.EncryptCTR(Data[1], Crypt[1], Length(Data));
  finally
    Cipher.Free;
  end;
  EncryptEdit.Text := DCPBase64.Base64EncodeStr(Crypt);
end;

确实如此(在Windows中)。 PHP和Pascal均返回:pEP16OOxov9QDfraIg==

但是,如果我为Android编译相同的代码并在平板电脑上运行它,则会得到截然不同的结果。这是为什么?

我确实阅读了有关为fmx转换代码的文档,特别是处理字符串处理的文档,但是我仍然不明白为什么。即使RawByteString基于0而不是基于1,我仍然会有所不同(尝试使用[0]而不是[1])。 RawByteString没有附加的代码页,对吗?因此,该问题不能由某些字符串转换引起(我认为)。那么这是怎么回事?

参考方案

经过三天的努力,我终于开始工作了。关键是要完全消除字符串的使用,而只能使用DCPCrypt中基于TBytes的例程。
下面的代码是一个测试程序,用于测试DCPCrypt支持的所有不同链接模式。我还添加了一个函数,该函数实现在这里找到的四种填充模式(用于CBC和ECB):
https://en.wikipedia.org/wiki/Padding_(cryptography)
以及零填充和随机填充。
我选择不使用DCPCrypt自己的Base64函数,因为事实证明它们与FMX不兼容。相反,我使用System.NetEncoding单元中的对应对象。
拜托,我认为自己只是一名普通的程序员,所以我希望你们中间真正的Delphi狂热者会发现很多批评的地方。但是没关系。如果给出了良好的反馈,我将修改代码。
到目前为止,该代码可以正常工作并产生与PHP的openssl函数兼容(已通过CTR模式测试)的结果。我仅将其发布在这里,希望对寻求与我相同的解决方案的人有用。

    unit MainUnit;

    interface

    uses
      System.SysUtils, System.Types, System.UITypes, System.Classes, System.Variants, System.NetEncoding,
      FMX.Types, FMX.Controls, FMX.Forms, FMX.Graphics, FMX.Dialogs, FMX.StdCtrls, FMX.Layouts,
      FMX.ScrollBox, FMX.Memo, FMX.Edit, FMX.Controls.Presentation,
      DCPcrypt2, DCPsha256, DCPblockciphers, DCPrijndael;

    type
      TChainingMode = (cmCBC, cmCFB8bit, cmCFBblock, cmOFB, cmCTR, cmECB);
      TPaddingMode = (pmZeroPadding, pmANSIX923, pmISO10126, pmISO7816, pmPKCS7, pmRandomPadding);

    type
      TMainForm = class(TForm)
        ScrollBox: TScrollBox;
        KeySizeLabel: TLabel;
        ChainingLabel: TLabel;
        EncodingLabel: TLabel;
        PaddingLabel: TLabel;
        KeyLabel: TLabel;
        InitVectorLabel: TLabel;
        DataLabel: TLabel;
        DecryptedLabel: TLabel;
        CipherLabel: TLabel;
        EncryptedLabel: TLabel;
        rbRijndael: TRadioButton;
        rb128bit: TRadioButton;
        rb256bit: TRadioButton;
        rbANSI: TRadioButton;
        rbUTF8: TRadioButton;
        rbUnicode: TRadioButton;
        rbCBC: TRadioButton;
        rbOFB: TRadioButton;
        rbCTR: TRadioButton;
        rbECB: TRadioButton;
        rbCFB8bit: TRadioButton;
        rbCFBblock: TRadioButton;
        rbZeroPadding: TRadioButton;
        rbANSIX923: TRadioButton;
        rbISO10126: TRadioButton;
        rbISO7816: TRadioButton;
        rbPKCS7: TRadioButton;
        rbRandomPadding: TRadioButton;
        KeyEdit: TEdit;
        InitVectorEdit: TEdit;
        DataMemo: TMemo;
        EncryptedMemo: TMemo;
        DecryptedMemo: TMemo;
        EncryptButton: TButton;
        DecryptButton: TButton;
        procedure FormCreate(Sender: TObject);
        procedure EncryptButtonClick(Sender: TObject);
        procedure DecryptButtonClick(Sender: TObject);
      public
        procedure GetOptions(var Key: TBytes; var KeySize: integer; var InitVector: TBytes;
                  var Encoding: TEncoding; var ChainingMode: TChainingMode; var PaddingMode: TPaddingMode);
      end;

    var
      MainForm: TMainForm;

    implementation

    {$R *.fmx}
    {$R *.LgXhdpiPh.fmx ANDROID}

    function BytesToHex(B: TBytes): string;
    var
      I: integer;
    begin
      Result := '';
      for I := Low(B) to High(B) do Result := Result + IntToHex(B[I]) + ' ';
    end;

    procedure BytePadding(var Data: TBytes; BlockSize: integer; PaddingMode: TPaddingMode);
    // Supports: ANSI X.923, ISO 10126, ISO 7816, PKCS7, zero padding and random padding
    var
      I, DataBlocks, DataLength, PaddingStart, PaddingCount: integer;
    begin
      BlockSize := BlockSize div 8; // convert bits to bytes
      // Zero and Random padding do not use end-markers, so if Length(Data) is a multiple of BlockSize, no padding is needed
      if PaddingMode in [pmZeroPadding, pmRandomPadding] then
        if Length(Data) mod BlockSize = 0 then Exit;
      DataBlocks := (Length(Data) div BlockSize) + 1;
      DataLength := DataBlocks * BlockSize;
      PaddingCount := DataLength - Length(Data);
      // ANSIX923, ISO10126 and PKCS7 store the padding length in a 1 byte end-marker, so any padding length > $FF is not supported
      if PaddingMode in [pmANSIX923, pmISO10126, pmPKCS7] then
        if PaddingCount > $FF then Exit;
      PaddingStart := Length(Data);
      SetLength(Data, DataLength);
      case PaddingMode of
        pmZeroPadding, pmANSIX923, pmISO7816: // fill with $00 bytes
          FillChar(Data[PaddingStart], PaddingCount, 0);
        pmPKCS7: // fill with PaddingCount bytes
          FillChar(Data[PaddingStart], PaddingCount, PaddingCount);
        pmRandomPadding, pmISO10126: // fill with random bytes
          for I := PaddingStart to DataLength-1 do Data[I] := Random($FF);
      end;
      case PaddingMode of
        pmANSIX923, pmISO10126:
          Data[DataLength-1] := PaddingCount; // set end-marker with number of bytes added
        pmISO7816:
          Data[PaddingStart] := $80; // set fixed end-markder $80
      end;
    end;

    procedure EncryptAES(const Data: TBytes; var Crypt: TBytes; const Key: TBytes; KeySize: integer;
        const InitVector: TBytes; ChainingMode: TChainingMode; PaddingMode: TPaddingMode); overload;
    var
      Cipher: TDCP_rijndael;
    begin
      Cipher := TDCP_rijndael.Create(nil);
      try
        Cipher.Init(Key[0], KeySize, @InitVector[0]);
        // Copy Data => Crypt
        Crypt := Copy(Data, 0, Length(Data));
        // Padd Crypt to required length (for Block based algorithms)
        if ChainingMode in [cmCBC, cmECB] then
          BytePadding(Crypt, Cipher.BlockSize, PaddingMode);
        // Encrypt Crypt using the algorithm specified in ChainingMode
        case ChainingMode of
          cmCBC: Cipher.EncryptCBC(Crypt[0], Crypt[0], Length(Crypt));
          cmCFB8bit: Cipher.EncryptCFB8bit(Crypt[0], Crypt[0], Length(Crypt));
          cmCFBblock: Cipher.EncryptCFBblock(Crypt[0], Crypt[0], Length(Crypt));
          cmOFB: Cipher.EncryptOFB(Crypt[0], Crypt[0], Length(Crypt));
          cmCTR: Cipher.EncryptCTR(Crypt[0], Crypt[0], Length(Crypt));
          cmECB: Cipher.EncryptECB(Crypt[0], Crypt[0]);
        end;

      finally
        Cipher.Free;
      end;
    end;

    procedure DecryptAES(const Crypt: TBytes; var Data: TBytes; const Key: TBytes; KeySize: integer;
        const InitVector: TBytes; ChainingMode: TChainingMode; PaddingMode: TPaddingMode); overload;
    var
      Cipher: TDCP_rijndael;
      I: integer;
    begin
      Cipher := TDCP_rijndael.Create(nil);
      try
        Cipher.Init(Key[0], KeySize, @InitVector[0]);
        // Copy Crypt => Data
        Data := Copy(Crypt, 0, Length(Crypt));
        // Decrypt Data using the algorithm specified in ChainingMode
        case ChainingMode of
          cmCBC: Cipher.DecryptCBC(Data[0], Data[0], Length(Data));
          cmCFB8bit: Cipher.DecryptCFB8bit(Data[0], Data[0], Length(Data));
          cmCFBblock: Cipher.DecryptCFBblock(Data[0], Data[0], Length(Data));
          cmOFB: Cipher.DecryptOFB(Data[0], Data[0], Length(Data));
          cmCTR: Cipher.DecryptCTR(Data[0], Data[0], Length(Data));
          cmECB: Cipher.DecryptECB(Data[0], Data[0]);
        end;
        // Correct the length of Data, based on the used PaddingMode (only for Block based algorithms)
        if ChainingMode in [cmCBC, cmECB] then
          case PaddingMode of
            pmANSIX923, pmISO10126, pmPKCS7: // these modes store the original Padding count in the last byte
              SetLength(Data, Length(Data) - Data[Length(Data)-1]);
            pmISO7816: // this mode uses a fixed end-marker. Find it and correct length accordingly.
              for I := Length(Data)-1 downto 0 do
                if Data[I] = $80 then
                begin
                  SetLength(Data, I);
                  Break;
                end;
          end;

      finally
        Cipher.Free;
      end;
    end;

    procedure TMainForm.FormCreate(Sender: TObject);
    begin
      EncryptedMemo.Lines.Clear;
      DecryptedMemo.Lines.Clear;
    end;

    procedure TMainForm.GetOptions(var Key: TBytes; var KeySize: integer; var InitVector: TBytes;
              var Encoding: TEncoding; var ChainingMode: TChainingMode; var PaddingMode: TPaddingMode);
    begin
      KeySize := 256;
      Encoding := TEncoding.ANSI;
      ChainingMode := cmCBC;
      PaddingMode := pmPKCS7;

      if rb128bit.IsChecked then KeySize := 128;
      if rb256bit.IsChecked then KeySize := 256;

      if rbCBC.IsChecked then ChainingMode := cmCBC;
      if rbCFB8bit.IsChecked then ChainingMode := cmCFB8bit;
      if rbCFBblock.IsChecked then ChainingMode := cmCFBblock;
      if rbOFB.IsChecked then ChainingMode := cmOFB;
      if rbCTR.IsChecked then ChainingMode := cmCTR;
      if rbECB.IsChecked then ChainingMode := cmECB;

      if rbZeroPadding.IsChecked then PaddingMode := pmZeroPadding;
      if rbANSIX923.IsChecked then PaddingMode := pmANSIX923;
      if rbISO10126.IsChecked then PaddingMode := pmISO10126;
      if rbISO7816.IsChecked then PaddingMode := pmISO7816;
      if rbPKCS7.IsChecked then PaddingMode := pmPKCS7;
      if rbRandomPadding.IsChecked then PaddingMode := pmRandomPadding;

      if rbANSI.IsChecked then Encoding := TEncoding.ANSI;
      if rbUTF8.IsChecked then Encoding := TEncoding.UTF8;
      if rbUnicode.IsChecked then Encoding := TEncoding.Unicode;

      Key := Encoding.GetBytes(KeyEdit.Text);
      InitVector := Encoding.GetBytes(InitVectorEdit.Text);
    end;

    procedure TMainForm.EncryptButtonClick(Sender: TObject);
    var
      Keysize: integer;
      Encoding: TEncoding;
      ChainingMode: TChainingMode;
      PaddingMode: TPaddingMode;
      Key, InitVector, Data, Crypt: TBytes;
    begin
      GetOptions(Key, KeySize, InitVector, Encoding, ChainingMode, PaddingMode);
      Data := Encoding.GetBytes(DataMemo.Text);
      EncryptAES(Data, Crypt, Key, KeySize, InitVector, ChainingMode, PaddingMode);
      EncryptedMemo.Text := TNetEncoding.Base64.EncodeBytesToString(Crypt);
    end;

    procedure TMainForm.DecryptButtonClick(Sender: TObject);
    var
      Keysize: integer;
      Encoding: TEncoding;
      ChainingMode: TChainingMode;
      PaddingMode: TPaddingMode;
      Key, InitVector, Data, Crypt: TBytes;
    begin
      GetOptions(Key, KeySize, InitVector, Encoding, ChainingMode, PaddingMode);
      Crypt := TNetEncoding.Base64.DecodeStringToBytes(EncryptedMemo.Text);
      DecryptAES(Crypt, Data, Key, KeySize, InitVector, ChainingMode, PaddingMode);
      DecryptedMemo.Text := Encoding.GetString(Data);
    end;

    end.

向COM对象传递流或从COM对象返回流 - php

也许我正在尝试做的事情是不可能的,或者如此简单,以至于在任何地方都没有(我能找到)写过任何东西。总的来说,我试图确定如何(如果可能)将流传递到COM对象或从COM对象返回流。具体来说,我的COM对象是用Delphi编写的,通常将由PHP脚本使用。一个用例是将一大堆二进制数据作为流从COM对象通过PHP返回到Web客户端。或将从Web客户端接收到的大量二进制数…

如何在函数(PHP)中使用类的方法? - php

我正在尝试使用新的PHP mysqli扩展。我有一个函数(safe())递归使用mysql_real_escape_string使字符串安全。如何在此函数内部使用mysqli连接来调用mysqli :: escape_string()函数?例:$db = new mysqli($host,$user,$password,$database_name); fu…

PHP getallheaders替代 - php

我正在尝试从服务器上的apache切换到nginx。唯一的问题是我在PHP脚本中使用的getallheaders()函数,该函数不适用于Nginx。我已经尝试过用户在getallheaders函数上的php站点上提供的注释,但这并不返回所有请求标头。请告诉我如何解决这个问题。我真的想切换到Nginx。 参考方案 您仍然可以使用它,但是您必须像这里一样重新定义…

php Singleton类实例将在多个会话中保留吗? - php

举一个简单的例子,如果我想计算一个不使用磁盘存储的脚本的命中次数,我可以使用静态类成员来执行此操作吗?用户1:<?php $test = Example::singleton(); $test->visits++; ?> 用户2:<?php $test = Example::singleton(); $test->visits+…

PHP:将字符串拆分为字母和数字部分的最佳方法 - php

我有几个格式的字符串AA11 AAAAAA1111111 AA1111111 分离字符串的字母和数字部分的最佳方法(最有效)? 参考方案 如果它们都是一系列字母,然后是一系列数字,并且没有非字母数字字符,那么sscanf()可能比regexp更有效$example = 'AAA11111'; list($alpha,$numeric) =…