AES 加密

1.AES 程序加密

package com.demo.util;

import com.demo.exception.BusinessException;
import com.demo.model.enums.ErrorEnum;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.RandomStringUtils;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;

import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.util.Base64;

@Component
@Slf4j
public class AesUtil {
    private final static String ENCRYPTION_ALGORITHM = "AES/CBC/PKCS5Padding";

    /**
     * key
     */
    public static final String aesKey = "lvzVf_JJ_NjFLWULEWpCfg==";

    /**
     * key
     */
    public static final String aesIv = "ezmhdhlzao32dtus";

    /**
     * @return 生成密码需要的盐
     */
    public static String getSalt() {
        return RandomStringUtils.randomAlphabetic(64);
    }

    /**
     * 对字符串类型的敏感信息，例如手机号，身份证号，银行卡号等进行加密
     * 注意尽量将加密数据控制在域内，不同域使用不同的aes key及iv
     * 如对同一个加密信息，需要跨服务加解密或匹配，则需要共享key及iv
     *
     * @param plainText
     * @return
     * @throws Exception
     */
    public static String encrypt(String plainText) throws BusinessException {
        if (StringUtils.isBlank(plainText)) {
            return plainText;
        }
        try {
            Cipher cipher = Cipher.getInstance(ENCRYPTION_ALGORITHM);
            byte[] keyBytes = aesKey.getBytes(StandardCharsets.UTF_8);
            byte[] iv = aesIv.getBytes(StandardCharsets.UTF_8);
            SecretKeySpec keySpec = new SecretKeySpec(keyBytes, "AES");
            IvParameterSpec ivSpec = new IvParameterSpec(iv);
            cipher.init(Cipher.ENCRYPT_MODE, keySpec, ivSpec);
            byte[] cipherText = cipher.doFinal(plainText.getBytes());
            return Base64.getUrlEncoder()
                    .encodeToString(cipherText);
        } catch (Exception ex) {
            log.error("加密失败:------" + ex.getMessage());
            throw new BusinessException(ErrorEnum.ENCRYPTION_ERROR);
        }
    }

    /**
     * 对字符串类型的敏感信息，例如手机号，身份证号，银行卡号等进行解密
     *
     * @param cipherText
     * @return 考虑对未加密内容的兼容，对出现异常的返回原始值
     * @throws Exception
     */
    public static String decrypt(String cipherText) {
        if (StringUtils.isBlank(cipherText)) {
            return cipherText;
        }
        try {
            Cipher cipher = Cipher.getInstance(ENCRYPTION_ALGORITHM);
            byte[] keyBytes = aesKey.getBytes(StandardCharsets.UTF_8);
            byte[] iv = aesIv.getBytes(StandardCharsets.UTF_8);
            SecretKeySpec keySpec = new SecretKeySpec(keyBytes, "AES");
            IvParameterSpec ivSpec = new IvParameterSpec(iv);
            cipher.init(Cipher.DECRYPT_MODE, keySpec, ivSpec);
            byte[] plainText = cipher.doFinal(Base64.getUrlDecoder().decode(cipherText));
            return new String(plainText);
        } catch (IllegalBlockSizeException | IllegalArgumentException ex) {
            return cipherText;
        } catch (Exception ex) {
            log.error("解密失败:------" + ex.getMessage());
            throw new BusinessException(ErrorEnum.DECRYPTION_ERROR);
        }
    }

    public String getRandom(int length) {
        char[] arr = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k',
                'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z'};
        String result = String.valueOf(arr[(int) Math.floor(Math.random() * 36)]);
        for (int i = 1; i < length; i++) {
            result += arr[(int) Math.floor(Math.random() * 36)];
        }
        return result;
    }

    /**
     * 处理查询手机号加密字符串，假如不是手机号则返回原字符串
     *
     * @param rawStr
     * @return
     */
    public String getQueryPhone(String rawStr) {
        return TelephoneUtil.isPhoneNumber(rawStr) ? encrypt(rawStr) : rawStr;
    }

    public static void main(String... args) {
        //key
        AesUtil securityUtil = new AesUtil();
//        System.out.println(securityUtil.getRandom(32));
        //iv
        System.out.println(securityUtil.getRandom(16));
        String param = "1231546";
        System.out.println("param:" + param);
        String encrypt = encrypt(param);
        System.out.println("encrypt:" + encrypt);
        String decrypt = decrypt(encrypt);
        System.out.println("decrypt:" + decrypt);
    }
}