109 lines
3.2 KiB
Go
109 lines
3.2 KiB
Go
// 提供自定义的随机密钥自解密加密算法支持，算法代号：Spiral。
|
||
package spiral
|
||
|
||
import (
|
||
stdaes "crypto/aes"
|
||
"crypto/cipher"
|
||
"errors"
|
||
"fmt"
|
||
"strings"
|
||
|
||
"archgrid.xyz/ag/toolsbox/encryption"
|
||
"archgrid.xyz/ag/toolsbox/encryption/aes"
|
||
"archgrid.xyz/ag/toolsbox/hash/sha512"
|
||
verifyCode "archgrid.xyz/ag/toolsbox/random/verify_code"
|
||
"archgrid.xyz/ag/toolsbox/serialize/base64"
|
||
)
|
||
|
||
type Strength int
|
||
|
||
const (
|
||
Compatible Strength = iota
|
||
Enhanced
|
||
)
|
||
|
||
// 根据给定的密钥字符串生成加解密使用的密钥。
|
||
func generateKey(key string) []byte {
|
||
keyBytes := sha512.Sha512([]byte(key))
|
||
return keyBytes[4:36]
|
||
}
|
||
|
||
// 使用原始密钥进行AES-CBC-256加密（不经过二次SHA256处理）
|
||
func encryptWithRawKey(data []byte, key []byte, ivGenerator aes.IVGenerator) ([]byte, error) {
|
||
block, err := stdaes.NewCipher(key)
|
||
if err != nil {
|
||
return nil, fmt.Errorf("创建加密单元失败，%w", err)
|
||
}
|
||
|
||
var key32 [32]byte
|
||
copy(key32[:], key)
|
||
iv := ivGenerator(key32)
|
||
|
||
plainText := encryption.Padding(data, block.BlockSize(), encryption.PKCS7Padding)
|
||
cipherText := make([]byte, len(plainText))
|
||
mode := cipher.NewCBCEncrypter(block, iv[:])
|
||
mode.CryptBlocks(cipherText, plainText)
|
||
|
||
return cipherText, nil
|
||
}
|
||
|
||
// 使用原始密钥进行AES-CBC-256解密（不经过二次SHA256处理）
|
||
func decryptWithRawKey(data []byte, key []byte, ivGenerator aes.IVGenerator) ([]byte, error) {
|
||
block, err := stdaes.NewCipher(key)
|
||
if err != nil {
|
||
return nil, fmt.Errorf("创建加密单元失败，%w", err)
|
||
}
|
||
|
||
var key32 [32]byte
|
||
copy(key32[:], key)
|
||
iv := ivGenerator(key32)
|
||
|
||
plainText := make([]byte, len(data))
|
||
mode := cipher.NewCBCDecrypter(block, iv[:])
|
||
mode.CryptBlocks(plainText, data)
|
||
|
||
return encryption.Unpadding(plainText, encryption.PKCS7Padding), nil
|
||
}
|
||
|
||
// 对给定的数据进行加密。
|
||
func Encrypt(data string, strength ...Strength) (string, error) {
|
||
// 为了与Rust版本兼容，固定使用PrefixIVGenerator
|
||
ivGen := aes.PrefixIVGenerator
|
||
key := verifyCode.RandStr(20)
|
||
keyBytes := generateKey(key)
|
||
// 直接使用keyBytes，不经过aes包的二次SHA256处理
|
||
cipherData, err := encryptWithRawKey([]byte(data), keyBytes, ivGen)
|
||
if err != nil {
|
||
return "", fmt.Errorf("加密计算失败，%w", err)
|
||
}
|
||
var result strings.Builder
|
||
result.WriteString("[")
|
||
result.WriteString(key)
|
||
result.WriteString(base64.ToBase64(cipherData))
|
||
return result.String(), nil
|
||
}
|
||
|
||
// 对给定的数据进行解密。
|
||
func Decrypt(data string, strength ...Strength) (string, error) {
|
||
// 为了与Rust版本兼容，固定使用PrefixIVGenerator
|
||
ivGen := aes.PrefixIVGenerator
|
||
if message, found := strings.CutPrefix(data, "["); found {
|
||
if len(message) > 20 {
|
||
keySeed := message[:20]
|
||
key := generateKey(keySeed)
|
||
cipherData, err := base64.FromBase64(message[20:])
|
||
if err != nil {
|
||
return "", fmt.Errorf("密文损坏无法解析，%w", err)
|
||
}
|
||
// 直接使用key，不经过aes包的二次SHA256处理
|
||
plainText, err := decryptWithRawKey(cipherData, key, ivGen)
|
||
if err != nil {
|
||
return "", fmt.Errorf("密文解密计算失败，%w", err)
|
||
}
|
||
return string(plainText), nil
|
||
}
|
||
return "", errors.New("密文缺损，无法完成解密。")
|
||
}
|
||
return data, nil
|
||
}
|