鸿蒙系统开发【加解密】安全_业界新闻

发布时间:2024-08-07 12:30

阅读量:0

加解密

介绍

本示例使用cryptoFramework接口的Cipher对象相关方法实现了字符串加解密算法，包括RSA加密算法与AES加密算法。

RSA加密算法：RSA公开密钥密码体制是一种使用不同的加密密钥与解密密钥，由已知加密密钥推导出解密密钥在计算上是不可行的密码体制。

AES加密算法：AES密码学中的高级加密标准，又称Rijndael加密法，是美国联邦政府采用的一种区块加密标准。

效果预览

使用说明

1.点击主页面的加密按钮，在加密界面中点击Encryption Algorithm下拉选择加密算法，在输入框中输入待加密的内容，点击加密按钮，下方文本框中显示加密后内容。

2.点击重置按钮，清除文本框中内容。

3.点击主页面的解密按钮，在解密界面中点击Decrypt Algorithm下拉选择解密算法，在输入框中输入待解密的内容，点击解密按钮，下方文本框中显示解密后内容。

4.点击重置按钮，清除文本框中内容。

具体实现

本示例分成加密与解密两个模块
- 加密模块
  - 使用到rsaEncrypt(RSA算法加密)与aesEncrypt(AES算法加密)两种加密方法进行加密操作。
  - 源码：[Encrypt.ets]

/*  * Copyright (c) 2022-2023 Huawei Device Co., Ltd.  * Licensed under the Apache License, Version 2.0 (the "License");  * you may not use this file except in compliance with the License.  * You may obtain a copy of the License at  *  *     http://www.apache.org/licenses/LICENSE-2.0  *  * Unless required by applicable law or agreed to in writing, software  * distributed under the License is distributed on an "AS IS" BASIS,  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  * See the License for the specific language governing permissions and  * limitations under the License.  */  import { promptAction } from '@kit.ArkUI'; import { CipherModel } from '../model/CipherModel'; import Logger from '../model/Logger';  const TAG: string = '[Encrypt]';  @Component export struct Encrypt {   @State info: string = '';   @State message: string = '';   @State algorithmType: string = 'Encrypt Algorithm';   private cipherModel: CipherModel = new CipherModel();    build() {     Stack({ alignContent: Alignment.Center }) {       Column() {         Select([{ value: 'RSA' },           { value: 'AES' }])           .id('encryptAlgorithm')           .margin(4)           .selected(0)           .value(this.algorithmType)           .font({ size: 20, weight: 300, family: 'serif', style: FontStyle.Normal })           .optionFont({ size: 16, weight: 280, family: 'serif', style: FontStyle.Normal })           .selectedOptionFont({ size: 16, weight: 280, family: 'serif', style: FontStyle.Normal })           .onSelect((index: number, value: string) => {             this.algorithmType = value;             Logger.info(TAG, `Select: ${index} value: ${value}`);           })          TextArea()           .margin(4)           .width('60%')           .id('encryptInput')           .onChange((value: string) => {             this.message = value;           })          Row() {           Button($r('app.string.encrypt'))             .margin(10)             .fontSize(20)             .width('30%')             .height('6%')             .id('encryptionBtn')             .onClick(() => {               if (this.message === '') {                 promptAction.showToast({                   message: 'This message is null.'                 })               } else {                 if (this.algorithmType === 'RSA') {                   this.cipherModel.rsaEncrypt(this.message, (result: string) => {                     Logger.info(TAG, `this result = ${JSON.stringify(result)}`);                     this.info = `Encryption result is :  ${result}`;                   })                 } else {                   this.cipherModel.aesEncrypt(this.message, (result: string) => {                     Logger.info(TAG, `this result = ${JSON.stringify(result)}`);                     this.info = `Encryption result is :  ${result}`;                   })                 }               }             })            Button($r('app.string.reset'))             .margin(10)             .fontSize(20)             .width('30%')             .height('6%')             .id('encryptionResetBtn')             .onClick(() => {               this.info = '';             })         }         .margin(10)          Text(this.info)           .id('encryptionInfo')           .fontSize(18)           .width('85%')           .height('25%')           .border({ width: 2, color: Color.Black })           .margin(10)           .copyOption(CopyOptions.InApp)       }     }     .width('100%')     .height('100%')   } }

源码[CipherModel.ts]

/*  * Copyright (c) 2022 Huawei Device Co., Ltd.  * Licensed under the Apache License, Version 2.0 (the "License");  * you may not use this file except in compliance with the License.  * You may obtain a copy of the License at  *  *     http://www.apache.org/licenses/LICENSE-2.0  *  * Unless required by applicable law or agreed to in writing, software  * distributed under the License is distributed on an "AS IS" BASIS,  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  * See the License for the specific language governing permissions and  * limitations under the License.  */  import { cryptoFramework } from "@kit.CryptoArchitectureKit"; import { buffer, util } from '@kit.ArkTS'; import Logger from './Logger'; import { BusinessError } from '@kit.BasicServicesKit';  const TAG: string = '[CipherModel]' const AES_ENCRYPT_KEY: string = '5QXzAbJj0TJN9OQNvxFhhw=='; const RSA_ENCRYPT_KEY: string =   'MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALXJZEloyLbBB6UbUQzUtM3WGTkcd4dn4HgCxL5wHcdICoLbv6EiUjcaQq8c906hqv6/J7Bv9Owj59XMauKweJUCAwEAAQ=='; const RSA_DECRYPT_KEY: string =   'MIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAtclkSWjItsEHpRtRDNS0zdYZORx3h2fgeALEvnAdx0gKgtu/oSJSNxpCrxz3TqGq/r8nsG/07CPn1cxq4rB4lQIDAQABAkA3boG2IM2TbKj4H6xHTVUUrwRh9dw83eAEuFNl/qoV6c4zRUAx+efZ29rDz6CVWuAhxaVBDUOmOHvyxOL8m8IBAiEA3EcTP1jngtiJ8lffvIVbehM6p7437+9UScKMXZSy/PkCIQDTRFj00GbAW9oKqEWTrUCWNxNFCSR82Mlw1sZvQh5LfQIgBApBrh3BUUMLdKhr8Bc6EEkeAEma2Qm4sAmjbWv2xHECIF81ux1BWj0wZ9hLs2d1Odk4ot+G2kHFdSr8L9tuIbcFAiEA2rEXmzyQTxZM1N4QDkaLJiCwSfMTYu48DxfUcevbfhA='; const RSA512_PRIMES_2: string = 'RSA512|PRIMES_2'; const RSA512_PKCS1: string = 'RSA512|PKCS1'; const AES128: string = 'AES128'; const AES128_PKCS7: string = 'AES128|PKCS7';  export class CipherModel {   stringToUint8Array(str) {     return new Uint8Array(buffer.from(str, 'utf-8').buffer);   }    uint8ArrayToString(array: Uint8Array) {     let out: string = '';     let index: number = 0;     let len: number = array.length;     while (index < len) {       let character = array[index++];       switch (character >> 4) {         case 0:         case 1:         case 2:         case 3:         case 4:         case 5:         case 6:         case 7:           out += String.fromCharCode(character);           break;         case 12:         case 13:           out += String.fromCharCode(((character & 0x1F) << 6) | (array[index++] & 0x3F));           break;         case 14:           out += String.fromCharCode(((character & 0x0F) << 12) | ((array[index++] & 0x3F) << 6) |             ((array[index++] & 0x3F) << 0));           break;         default:           break;       }     }     return out;   }    rsaEncrypt(message: string, callback) {     let rsaGenerator = cryptoFramework.createAsyKeyGenerator(RSA512_PRIMES_2);     let cipher = cryptoFramework.createCipher(RSA512_PKCS1);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(RSA_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     rsaGenerator.convertKey(pubKeyBlob, null, (err, keyPair) => {       if (err) {         Logger.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.ENCRYPT_MODE, keyPair.pubKey, null, (err, data) => {         let input: cryptoFramework.DataBlob = { data: this.stringToUint8Array(message) };         cipher.doFinal(input, (err, data) => {           Logger.info(TAG, "EncryptOutPut is " + data.data);           let result = that.encodeToStringSync(data.data)           Logger.info(TAG, "result is " + result);           callback(result)         })       })     })   }    rsaDecrypt(message: string, callback) {     let rsaGenerator = cryptoFramework.createAsyKeyGenerator(RSA512_PRIMES_2);     let cipher = cryptoFramework.createCipher(RSA512_PKCS1);     let that = new util.Base64Helper();     let priKey = that.decodeSync(RSA_DECRYPT_KEY);     let priKeyBlob: cryptoFramework.DataBlob = { data: priKey };     rsaGenerator.convertKey(null, priKeyBlob, (err, keyPair) => {       if (err) {         Logger.error(TAG, "convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.DECRYPT_MODE, keyPair.priKey, null, (err, data) => {         try {           let newMessage = that.decodeSync(message);           let input: cryptoFramework.DataBlob = { data: newMessage };           cipher.doFinal(input, (err, data) => {             if (err) {               Logger.error(TAG, "cipher doFinal." + (err as BusinessError).code);               return;             }             Logger.info(TAG, "DecryptOutPut is " + data.data);             let result = this.uint8ArrayToString(data.data);             Logger.info(TAG, "result is " + result);             callback(result)           })         } catch (err) {           Logger.info(TAG, "cipher init error: " + (err as BusinessError).code);           return err;         }       })     })   }    aesEncrypt(message: string, callback) {     let aesGenerator = cryptoFramework.createSymKeyGenerator(AES128);     let cipher = cryptoFramework.createCipher(AES128_PKCS7);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(AES_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     aesGenerator.convertKey(pubKeyBlob, (err, symKey) => {       if (err) {         console.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.ENCRYPT_MODE, symKey, null, (err, data) => {         let input: cryptoFramework.DataBlob = { data: this.stringToUint8Array(message) };         cipher.doFinal(input, (err, data) => {           Logger.info(TAG, "EncryptOutPut is " + data.data);           let result = that.encodeToStringSync(data.data)           Logger.info(TAG, "result is " + result);           callback(result)         })       })     })   }    aesDecrypt(message: string, callback) {     let aesGenerator = cryptoFramework.createSymKeyGenerator(AES128);     let cipher = cryptoFramework.createCipher(AES128_PKCS7);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(AES_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     aesGenerator.convertKey(pubKeyBlob, (err, symKey) => {       if (err) {         console.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.DECRYPT_MODE, symKey, null, (err, data) => {         try {           let newMessage = that.decodeSync(message);           let input: cryptoFramework.DataBlob = { data: newMessage };           cipher.doFinal(input, (err, data) => {             if (err) {               Logger.error(TAG, "cipher doFinal." + (err as BusinessError).code);               return;             }             Logger.info(TAG, "DecryptOutPut is " + data?.data);             let result = this.uint8ArrayToString(data?.data)             Logger.info(TAG, "result is " + result);             callback(result)           })         } catch (err) {           Logger.info(TAG, "cipher init error: " + (err as BusinessError).code);           return err;         }       })     })   } }

接口参考：@ohos.security.cryptoFramework，@ohos.promptAction，@ohos.router
解密模块
使用到rsaDecrypt(RSA算法解密)与aesDecrypt(AES算法解密)两种解密方法进行解密操作。
源码：[Decrypt.ets]

/*  * Copyright (c) 2022-2023 Huawei Device Co., Ltd.  * Licensed under the Apache License, Version 2.0 (the "License");  * you may not use this file except in compliance with the License.  * You may obtain a copy of the License at  *  *     http://www.apache.org/licenses/LICENSE-2.0  *  * Unless required by applicable law or agreed to in writing, software  * distributed under the License is distributed on an "AS IS" BASIS,  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  * See the License for the specific language governing permissions and  * limitations under the License.  */  import { promptAction } from '@kit.ArkUI'; import { CipherModel } from '../model/CipherModel'; import Logger from '../model/Logger';  const TAG: string = '[Decrypt]';  @Component export struct Decrypt {   @State info: string = '';   @State message: string = '';   @State algorithmType: string = 'Decrypt Algorithm';   private cipherModel: CipherModel = new CipherModel();    build() {     Stack({ alignContent: Alignment.Center }) {       Column() {         Select([{ value: 'RSA' },           { value: 'AES' }])           .id('decryptAlgorithm')           .margin(4)           .selected(0)           .value(this.algorithmType)           .font({ size: 20, weight: 300, family: 'serif', style: FontStyle.Normal })           .selectedOptionFont({ size: 16, weight: 280, family: 'serif', style: FontStyle.Normal })           .optionFont({ size: 16, weight: 280, family: 'serif', style: FontStyle.Normal })           .onSelect((index: number, value: string) => {             this.algorithmType = value;             Logger.info(TAG, `Select: ${index} value: ${value}`);           })          TextArea()           .id('decryptInput')           .margin(6)           .width('60%')           .onChange((value: string) => {             this.message = value;           })          Row() {           Button($r('app.string.decrypt'))             .fontSize(20)             .margin(10)             .width('30%')             .height('6%')             .id('decryptBtn')             .onClick(() => {               if (this.message === '') {                 promptAction.showToast({                   message: 'This message is null.'                 })               } else {                 if (this.algorithmType === 'RSA') {                   this.cipherModel.rsaDecrypt(this.message, (result: string) => {                     Logger.info(TAG, `this result = ${JSON.stringify(result)}`);                     this.info = `Decrypt result is :  ${result}`;                   })                 } else {                   this.cipherModel.aesDecrypt(this.message, (result: string) => {                     Logger.info(TAG, `this result = ${JSON.stringify(result)}`);                     this.info = `Decrypt result is :  ${result}`;                   })                 }               }             })            Button($r('app.string.reset'))             .fontSize(20)             .margin(10)             .width('30%')             .height('6%')             .id('decryptResetBtn')             .onClick(() => {               this.info = '';             })         }         .margin(10)          Text(this.info)           .id('decryptInfo')           .fontSize(18)           .width('85%')           .height('25%')           .border({ width: 2, color: Color.Black })           .margin(10)       }     }     .width('100%')     .height('100%')   } }

源码[CipherModel.ts]

/*  * Copyright (c) 2022 Huawei Device Co., Ltd.  * Licensed under the Apache License, Version 2.0 (the "License");  * you may not use this file except in compliance with the License.  * You may obtain a copy of the License at  *  *     http://www.apache.org/licenses/LICENSE-2.0  *  * Unless required by applicable law or agreed to in writing, software  * distributed under the License is distributed on an "AS IS" BASIS,  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  * See the License for the specific language governing permissions and  * limitations under the License.  */  import { cryptoFramework } from "@kit.CryptoArchitectureKit"; import { buffer, util } from '@kit.ArkTS'; import Logger from './Logger'; import { BusinessError } from '@kit.BasicServicesKit';  const TAG: string = '[CipherModel]' const AES_ENCRYPT_KEY: string = '5QXzAbJj0TJN9OQNvxFhhw=='; const RSA_ENCRYPT_KEY: string =   'MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALXJZEloyLbBB6UbUQzUtM3WGTkcd4dn4HgCxL5wHcdICoLbv6EiUjcaQq8c906hqv6/J7Bv9Owj59XMauKweJUCAwEAAQ=='; const RSA_DECRYPT_KEY: string =   'MIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAtclkSWjItsEHpRtRDNS0zdYZORx3h2fgeALEvnAdx0gKgtu/oSJSNxpCrxz3TqGq/r8nsG/07CPn1cxq4rB4lQIDAQABAkA3boG2IM2TbKj4H6xHTVUUrwRh9dw83eAEuFNl/qoV6c4zRUAx+efZ29rDz6CVWuAhxaVBDUOmOHvyxOL8m8IBAiEA3EcTP1jngtiJ8lffvIVbehM6p7437+9UScKMXZSy/PkCIQDTRFj00GbAW9oKqEWTrUCWNxNFCSR82Mlw1sZvQh5LfQIgBApBrh3BUUMLdKhr8Bc6EEkeAEma2Qm4sAmjbWv2xHECIF81ux1BWj0wZ9hLs2d1Odk4ot+G2kHFdSr8L9tuIbcFAiEA2rEXmzyQTxZM1N4QDkaLJiCwSfMTYu48DxfUcevbfhA='; const RSA512_PRIMES_2: string = 'RSA512|PRIMES_2'; const RSA512_PKCS1: string = 'RSA512|PKCS1'; const AES128: string = 'AES128'; const AES128_PKCS7: string = 'AES128|PKCS7';  export class CipherModel {   stringToUint8Array(str) {     return new Uint8Array(buffer.from(str, 'utf-8').buffer);   }    uint8ArrayToString(array: Uint8Array) {     let out: string = '';     let index: number = 0;     let len: number = array.length;     while (index < len) {       let character = array[index++];       switch (character >> 4) {         case 0:         case 1:         case 2:         case 3:         case 4:         case 5:         case 6:         case 7:           out += String.fromCharCode(character);           break;         case 12:         case 13:           out += String.fromCharCode(((character & 0x1F) << 6) | (array[index++] & 0x3F));           break;         case 14:           out += String.fromCharCode(((character & 0x0F) << 12) | ((array[index++] & 0x3F) << 6) |             ((array[index++] & 0x3F) << 0));           break;         default:           break;       }     }     return out;   }    rsaEncrypt(message: string, callback) {     let rsaGenerator = cryptoFramework.createAsyKeyGenerator(RSA512_PRIMES_2);     let cipher = cryptoFramework.createCipher(RSA512_PKCS1);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(RSA_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     rsaGenerator.convertKey(pubKeyBlob, null, (err, keyPair) => {       if (err) {         Logger.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.ENCRYPT_MODE, keyPair.pubKey, null, (err, data) => {         let input: cryptoFramework.DataBlob = { data: this.stringToUint8Array(message) };         cipher.doFinal(input, (err, data) => {           Logger.info(TAG, "EncryptOutPut is " + data.data);           let result = that.encodeToStringSync(data.data)           Logger.info(TAG, "result is " + result);           callback(result)         })       })     })   }    rsaDecrypt(message: string, callback) {     let rsaGenerator = cryptoFramework.createAsyKeyGenerator(RSA512_PRIMES_2);     let cipher = cryptoFramework.createCipher(RSA512_PKCS1);     let that = new util.Base64Helper();     let priKey = that.decodeSync(RSA_DECRYPT_KEY);     let priKeyBlob: cryptoFramework.DataBlob = { data: priKey };     rsaGenerator.convertKey(null, priKeyBlob, (err, keyPair) => {       if (err) {         Logger.error(TAG, "convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.DECRYPT_MODE, keyPair.priKey, null, (err, data) => {         try {           let newMessage = that.decodeSync(message);           let input: cryptoFramework.DataBlob = { data: newMessage };           cipher.doFinal(input, (err, data) => {             if (err) {               Logger.error(TAG, "cipher doFinal." + (err as BusinessError).code);               return;             }             Logger.info(TAG, "DecryptOutPut is " + data.data);             let result = this.uint8ArrayToString(data.data);             Logger.info(TAG, "result is " + result);             callback(result)           })         } catch (err) {           Logger.info(TAG, "cipher init error: " + (err as BusinessError).code);           return err;         }       })     })   }    aesEncrypt(message: string, callback) {     let aesGenerator = cryptoFramework.createSymKeyGenerator(AES128);     let cipher = cryptoFramework.createCipher(AES128_PKCS7);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(AES_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     aesGenerator.convertKey(pubKeyBlob, (err, symKey) => {       if (err) {         console.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.ENCRYPT_MODE, symKey, null, (err, data) => {         let input: cryptoFramework.DataBlob = { data: this.stringToUint8Array(message) };         cipher.doFinal(input, (err, data) => {           Logger.info(TAG, "EncryptOutPut is " + data.data);           let result = that.encodeToStringSync(data.data)           Logger.info(TAG, "result is " + result);           callback(result)         })       })     })   }    aesDecrypt(message: string, callback) {     let aesGenerator = cryptoFramework.createSymKeyGenerator(AES128);     let cipher = cryptoFramework.createCipher(AES128_PKCS7);     let that = new util.Base64Helper();     let pubKey = that.decodeSync(AES_ENCRYPT_KEY);     let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKey };     aesGenerator.convertKey(pubKeyBlob, (err, symKey) => {       if (err) {         console.error("convertKey: error." + (err as BusinessError).code);         return;       }       cipher.init(cryptoFramework.CryptoMode.DECRYPT_MODE, symKey, null, (err, data) => {         try {           let newMessage = that.decodeSync(message);           let input: cryptoFramework.DataBlob = { data: newMessage };           cipher.doFinal(input, (err, data) => {             if (err) {               Logger.error(TAG, "cipher doFinal." + (err as BusinessError).code);               return;             }             Logger.info(TAG, "DecryptOutPut is " + data?.data);             let result = this.uint8ArrayToString(data?.data)             Logger.info(TAG, "result is " + result);             callback(result)           })         } catch (err) {           Logger.info(TAG, "cipher init error: " + (err as BusinessError).code);           return err;         }       })     })   } }