iOS PBEwithMD5andDes加密解密算法

最新推荐文章于 2024-11-04 14:10:53 发布

yaoliangjun306

最新推荐文章于 2024-11-04 14:10:53 发布

阅读量2k

点赞数 1

CC 4.0 BY-SA版权

分类专栏： iOS项目记录文章标签： ios

本文链接：https://blog.youkuaiyun.com/yaoliangjun306/article/details/53411027

iOS项目记录专栏收录该内容

32 篇文章

订阅专栏

本文介绍了一种基于PBEwithMD5andDes算法的加密解密方法，并提供了具体的iOS实现代码示例。该方法利用Objective-C语言实现，通过设置特定的盐值和迭代次数来确保加密过程的安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

此篇是接着上一篇OpenSSL库使用方法，在成功集成OpenSSL库以后就可以愉快的使用了，加密解码算法如下：

.h文件：

//
//  PBEwithMD5andDes.h
//  qinglian
//
//  Created by yaoliangjun on 16/11/29.
//  Copyright © 2016年 yaoliangjun. All rights reserved.
//

#import <Foundation/Foundation.h>

@interface PBEwithMD5andDes : NSObject

/**
 加密
 @param data 需要加密的数据
 @param key 密钥
 @return 加密后的数据
 */
+ (NSData *)encryptPBEWithMD5AndDESData:(NSData *)data key:(NSString *)key;

/**
 解密
 @param data 需要解密的数据
 @param key 密钥
 @return 解密后的数据
 */
+ (NSData *)decryptPBEWithMD5AndDESData:(NSData *)data key:(NSString *)key;

/**
 加解密核心代码
 @param data 需要加密或者解密的数据
 @param key 密钥
 @param direction 1:加密, 0:解密
 @return 加密或者解密后的数据
 */
+ (NSData *)pbeWithMD5AndDESData:(NSData *)data key:(NSString *)key direction:(int)direction;

@end

.m文件：

//
//  PBEwithMD5andDes.m
//  qinglian
//
//  Created by yaoliangjun on 16/11/29.
//  Copyright © 2016年 yaoliangjun. All rights reserved.
//

#import "PBEwithMD5andDes.h"

#import <openssl/md5.h>
#import <openssl/sha.h>
#import <openssl/x509.h>
#import <openssl/err.h>
#import <openssl/evp.h>

@implementation PBEwithMD5andDes

+ (NSData *)encryptPBEWithMD5AndDESData:(NSData *)data key:(NSString *)key {
    return [self pbeWithMD5AndDESData:data key:key direction:1];
}

+ (NSData *)decryptPBEWithMD5AndDESData:(NSData *)data key:(NSString *)key {
    return [self pbeWithMD5AndDESData:data key:key direction:0];
}

+ (NSData *)pbeWithMD5AndDESData:(NSData *)data key:(NSString *)key direction:(int)direction
{
//    NSLog(@"helper data = %@", inData);
// 原来的盐
//    static const char gSalt[] =
//    {
//        (unsigned char)0xAA, (unsigned char)0xAA, (unsigned char)0xAA, (unsigned char)0xAA,
//        (unsigned char)0xAA, (unsigned char)0xAA, (unsigned char)0xAA, (unsigned char)0xAA,
//        (unsigned char)0x00
//    };
//    
//    unsigned char *salt = (unsigned char *)gSalt;
//    int saltLen = strlen(gSalt);

    // 这是服务器的盐
    NSString *saltStr = @"12345678";
    const char *saltChar = [saltStr cStringUsingEncoding:NSUTF8StringEncoding];

    unsigned char *salt = (unsigned char *)saltChar;
    int saltLen = strlen(saltChar);
    // 1000同盐一样，是和服务器商量好的
    int iterations = 1000;

    EVP_CIPHER_CTX cipherCtx;

    unsigned char *mResults; // allocated storage of results
    int mResultsLen = 0;

    const char *cKey = [key UTF8String];

    unsigned char *mData = (unsigned char *)[data bytes];
    int mDataLen = [data length];

    SSLeay_add_all_algorithms();
    X509_ALGOR *algorithm = PKCS5_pbe_set(NID_pbeWithMD5AndDES_CBC,
                                          iterations, salt, saltLen);

    memset(&cipherCtx, 0, sizeof(cipherCtx));

    if (algorithm != NULL)
    {
        EVP_CIPHER_CTX_init(&(cipherCtx));

        if (EVP_PBE_CipherInit(algorithm->algorithm, cKey, strlen(cKey),
                               algorithm->parameter, &(cipherCtx), direction))
        {
            EVP_CIPHER_CTX_set_padding(&cipherCtx, 1);

            int blockSize = EVP_CIPHER_CTX_block_size(&cipherCtx);
            int allocLen = mDataLen + blockSize + 1; // plus 1 for null terminator on decrypt
            mResults = (unsigned char *)OPENSSL_malloc(allocLen);

            unsigned char *in_bytes = mData;
            int inLen = mDataLen;
            unsigned char *out_bytes = mResults;
            int outLen = 0;

            int outLenPart1 = 0;
            if (EVP_CipherUpdate(&(cipherCtx), out_bytes, &outLenPart1, in_bytes, inLen))
            {
                out_bytes += outLenPart1;
                int outLenPart2 = 0;
                if (EVP_CipherFinal(&(cipherCtx), out_bytes, &outLenPart2))
                {
                    outLen += outLenPart1 + outLenPart2;
                    mResults[outLen] = 0;
                    mResultsLen = outLen;
                }
            } else {
                unsigned long err = ERR_get_error();

                ERR_load_crypto_strings();
                ERR_load_ERR_strings();
                char errbuff[256];
                errbuff[0] = 0;
                ERR_error_string_n(err, errbuff, sizeof(errbuff));
                NSLog(@"OpenSLL ERROR:\n\tlib:%s\n\tfunction:%s\n\treason:%s\n",
                      ERR_lib_error_string(err),
                      ERR_func_error_string(err),
                      ERR_reason_error_string(err));
                ERR_free_strings();
            }

            NSData *encryptedData = [NSData dataWithBytes:mResults length:mResultsLen]; //(NSData *)encr_buf;

            //NSLog(@"encryption result: %@\n", [encryptedData base64EncodingWithLineLength:1024]);

            EVP_cleanup();

            return encryptedData;
        }
    }

    EVP_cleanup();

    return nil;
}

@end

用法：

    NSString *account = @"JerryYao";
    NSString *password = @"123456";

    // 服务器加密规则:
    // 1.把需要加密的内容转换成NSData
    // 2.再和内容和key一起由加密工具类加密生成加密后的NSData
    // 3.把加密后的NSData转换成十六进制的字符串传到服务器端
    NSData *encryptData = [password dataUsingEncoding:NSUTF8StringEncoding];
    NSData *encData = [PBEwithMD5andDes encryptPBEWithMD5AndDESData:encryptData key:account];
    NSString *encryptPwd = [NSString convertDataToHexStr:encData];

    NSData *encryptDeviceCode = [account dataUsingEncoding:NSUTF8StringEncoding];
    NSData *encDeviceCodeData = [PBEwithMD5andDes encryptPBEWithMD5AndDESData:encryptDeviceCode key:account];
    NSString *encDeviceCode = [NSString convertDataToHexStr:encDeviceCodeData];

    NSDictionary *params = @{ @"loginName": account, @"password": encryptPwd, @"deviceCode": encDeviceCode };
    [UserService loginWithParams:params showHUD:YES success:^(NSDictionary *response) {
        if ([response[kStatusCode] intValue] == kSuccessCode) {
            LoginResponseModel *loginResponseModel = [[LoginResponseModel alloc] initWithDictionary:response[@"sysUserModel"] error:nil];
            if (!loginResponseModel) {
                return;
            }
            ILog(@"登录成功");
            [[AppDelegate sharedDelegate] showMainView];
        }
    } failure:^(NSError *error) {

    }];

使用到了两个工具类：

/** 把十六进制字符串转换成NSData（在解密的时候会用到） */
+ (NSData *)convertHexStrToData:(NSString *)str {
    if (!str || [str length] == 0) {
        return nil;
    }

    NSMutableData *hexData = [[NSMutableData alloc] initWithCapacity:8];
    NSRange range;
    if ([str length] % 2 == 0) {
        range = NSMakeRange(0, 2);
    } else {
        range = NSMakeRange(0, 1);
    }
    for (NSInteger i = range.location; i < [str length]; i += 2) {
        unsigned int anInt;
        NSString *hexCharStr = [str substringWithRange:range];
        NSScanner *scanner = [[NSScanner alloc] initWithString:hexCharStr];

        [scanner scanHexInt:&anInt];
        NSData *entity = [[NSData alloc] initWithBytes:&anInt length:1];
        [hexData appendData:entity];

        range.location += range.length;
        range.length = 2;
    }

    return hexData;
}


/** 把NSData转换成十六进制的字符串 */
+ (NSString *)convertDataToHexStr:(NSData *)data {
    if (!data || [data length] == 0) {
        return @"";
    }
    NSMutableString *string = [[NSMutableString alloc] initWithCapacity:[data length]];

    [data enumerateByteRangesUsingBlock:^(const void *bytes, NSRange byteRange, BOOL *stop) {
        unsigned char *dataBytes = (unsigned char*)bytes;
        for (NSInteger i = 0; i < byteRange.length; i++) {
            NSString *hexStr = [NSString stringWithFormat:@"%x", (dataBytes[i]) & 0xff];
            if ([hexStr length] == 2) {
                [string appendString:hexStr];
            } else {
                [string appendFormat:@"0%@", hexStr];
            }
        }
    }];

    return string;
}