1.AES 程序加密
1 package com.demo.util;
2
3 import com.demo.exception.BusinessException;
4 import com.demo.model.enums.ErrorEnum;
5 import lombok.extern.slf4j.Slf4j;
6 import org.apache.commons.lang3.RandomStringUtils;
7 import org.apache.commons.lang3.StringUtils;
8 import org.springframework.beans.factory.annotation.Value;
9 import org.springframework.stereotype.Component;
10
11 import javax.crypto.Cipher;
12 import javax.crypto.IllegalBlockSizeException;
13 import javax.crypto.spec.IvParameterSpec;
14 import javax.crypto.spec.SecretKeySpec;
15 import java.nio.charset.StandardCharsets;
16 import java.util.Base64;
17
18 @Component
19 @Slf4j
20 public class AesUtil {
21 private final static String ENCRYPTION_ALGORITHM = "AES/CBC/PKCS5Padding";
22
23 /**
24 * key
25 */
26 public static final String aesKey = "lvzVf_JJ_NjFLWULEWpCfg==";
27
28 /**
29 * key
30 */
31 public static final String aesIv = "ezmhdhlzao32dtus";
32
33 /**
34 * @return 生成密码需要的盐
35 */
36 public static String getSalt() {
37 return RandomStringUtils.randomAlphabetic(64);
38 }
39
40 /**
41 * 对字符串类型的敏感信息，例如手机号，身份证号，银行卡号等进行加密
42 * 注意尽量将加密数据控制在域内，不同域使用不同的aes key及iv
43 * 如对同一个加密信息，需要跨服务加解密或匹配，则需要共享key及iv
44 *
45 * @param plainText
46 * @return
47 * @throws Exception
48 */
49 public static String encrypt(String plainText) throws BusinessException {
50 if (StringUtils.isBlank(plainText)) {
51 return plainText;
52 }
53 try {
54 Cipher cipher = Cipher.getInstance(ENCRYPTION_ALGORITHM);
55 byte[] keyBytes = aesKey.getBytes(StandardCharsets.UTF_8);
56 byte[] iv = aesIv.getBytes(StandardCharsets.UTF_8);
57 SecretKeySpec keySpec = new SecretKeySpec(keyBytes, "AES");
58 IvParameterSpec ivSpec = new IvParameterSpec(iv);
59 cipher.init(Cipher.ENCRYPT_MODE, keySpec, ivSpec);
60 byte[] cipherText = cipher.doFinal(plainText.getBytes());
61 return Base64.getUrlEncoder()
62 .encodeToString(cipherText);
63 } catch (Exception ex) {
64 log.error("加密失败:------" + ex.getMessage());
65 throw new BusinessException(ErrorEnum.ENCRYPTION_ERROR);
66 }
67 }
68
69 /**
70 * 对字符串类型的敏感信息，例如手机号，身份证号，银行卡号等进行解密
71 *
72 * @param cipherText
73 * @return 考虑对未加密内容的兼容，对出现异常的返回原始值
74 * @throws Exception
75 */
76 public static String decrypt(String cipherText) {
77 if (StringUtils.isBlank(cipherText)) {
78 return cipherText;
79 }
80 try {
81 Cipher cipher = Cipher.getInstance(ENCRYPTION_ALGORITHM);
82 byte[] keyBytes = aesKey.getBytes(StandardCharsets.UTF_8);
83 byte[] iv = aesIv.getBytes(StandardCharsets.UTF_8);
84 SecretKeySpec keySpec = new SecretKeySpec(keyBytes, "AES");
85 IvParameterSpec ivSpec = new IvParameterSpec(iv);
86 cipher.init(Cipher.DECRYPT_MODE, keySpec, ivSpec);
87 byte[] plainText = cipher.doFinal(Base64.getUrlDecoder().decode(cipherText));
88 return new String(plainText);
89 } catch (IllegalBlockSizeException | IllegalArgumentException ex) {
90 return cipherText;
91 } catch (Exception ex) {
92 log.error("解密失败:------" + ex.getMessage());
93 throw new BusinessException(ErrorEnum.DECRYPTION_ERROR);
94 }
95 }
96
97 public String getRandom(int length) {
98 char[] arr = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k',
99 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z'};
100 String result = String.valueOf(arr[(int) Math.floor(Math.random() * 36)]);
101 for (int i = 1; i < length; i++) {
102 result += arr[(int) Math.floor(Math.random() * 36)];
103 }
104 return result;
105 }
106
107 /**
108 * 处理查询手机号加密字符串，假如不是手机号则返回原字符串
109 *
110 * @param rawStr
111 * @return
112 */
113 public String getQueryPhone(String rawStr) {
114 return TelephoneUtil.isPhoneNumber(rawStr) ? encrypt(rawStr) : rawStr;
115 }
116
117 public static void main(String... args) {
118 //key
119 AesUtil securityUtil = new AesUtil();
120 // System.out.println(securityUtil.getRandom(32));
121 //iv
122 System.out.println(securityUtil.getRandom(16));
123 String param = "1231546";
124 System.out.println("param:" + param);
125 String encrypt = encrypt(param);
126 System.out.println("encrypt:" + encrypt);
127 String decrypt = decrypt(encrypt);
128 System.out.println("decrypt:" + decrypt);
129 }
130 }
