javascript - The wordArray that CryptoJS.AES.decrypt() output was padded with 0x8080808 -

-

i use cryptojs decrypt encryption web server(use php , aes-128-ecb), can't right wordarray , it's length long. here test code:

var pwd = "abcdefghijklmnop"; var words = [0x86c5464, 0x7335231]; var plain_array= cryptojs.lib.wordarray.create(words); var base64_pwd = cryptojs.enc.utf8.parse(pwd).tostring(cryptojs.enc.base64); var pwd_key = cryptojs.enc.base64.parse(base64_pwd); var encryption = aes.encrypt(plain_array,pwd_key, {mode: cryptojs.mode.ecb,padding: cryptojs.pad.pkcs7}).tostring(); var decrypt = aes.decrypt(encryption,pwd_key, {mode: cryptojs.mode.ecb,padding: cryptojs.pad.pkcs7});

and decrypt :

decrypt == {     sigbytes : 8,     words : [0x86c5464, 0x7335231, 0x8080808, 0x8080808]     }

why decrypt.words padded 0x8080808? how can right length wordarray?

thanks in advance.

aes block cipher , requires input in block size chunks, 16-bytes aes. if data encrypted not multiple of block size padding bytes need added. pkcs#7 padding common padding mode. aes libraries support pkcs#7 padding mode add padding on encryption , remove padding on decryption.

in case 8-bytes of paddig added , 8 bytes of value 0x08.

see pkcs#7 padding.

note: not use ecb mode, insecure, see ecb mode, scroll down penguin. instead use cbc mode random iv, prefix encrypted data iv use in decryption.


Comments

Post a Comment

Popular posts from this blog

php - How to display all orders for a single product showing the most recent first? Woocommerce -

-
i have password protected page on frontend. on page, want display full list of purchases associated single woocommerce product id. option 1: i've looked through woocommerce docs , , found: wc_cli_order , list_( $args, $assoc_args ) function lists orders. presumably, orders can filtered product id [--=] filter orders based on order property. line item fields (numeric array, started index zero): line_items.0.product_id option 2: i found article , based on customer id. i've modified code based on guesses meta_key , meta_value. $customer_orders = get_posts( array( 'numberposts' => -1, 'meta_key' => '_product', 'meta_value' => get_product_id(), 'post_type' => wc_get_order_types(), 'post_status' => array_keys( wc_get_order_statuses() ), ) ); how display orders single product showing recent order first? here solution put based on these articles: http://www.w...
Read more

asp.net - How to correctly use QUERY_STRING in ISAPI rewrite? -

-
i'm having difficult time , hope guys can help. using helicon isapi rewrite version 3.1.0.104 on our iis server. edit http.conf file , have tried , still fail. this trying do: redirect url: https://www.domain.com/switch-by-version?version=2.8.5.2594 to: https://test.domain.com/load/load.aspx?tver=2.8.5.2594 the version number @ end source url change, , need target url have same version number @ end of url example above shows. i tried following not work: rewritecond %{query_string} ^version=(\d\d?)\.(\d\d?)\.(\d\d?)\.(.*)$ [nc] rewriterule ^/switch-by-version(.*)$ https://test.domain.com/load/load.aspx?tver=%1 [r=307,nc,l] any appreciated! thanks. if it's running in equivalent context of .htaccess , rule shouldn't start / . here's simpler version: rewritecond %{query_string} ^version=(\d+\.\d+\.\d+(?:\..+)?)$ [nc] rewriterule ^switch-by-version/?$ https://test.domain.com/load/load.aspx?tver=%1 [r=307,nc,l]
Read more

angularjs - How restrict admin panel using in backend laravel and admin panel on angular? -

-
https://scotch.io/tutorials/token-based-authentication-for-angularjs-and-laravel-apps following tutorials, try write authentication restrict admin panel, didn't understood how can that. this admin panel, admin panel don't want show , request database unauthenticated users. my laravel-routes route::get('/admin',function(){ return view('index'); }); route::get('/api/v1/employees/{id?}', 'employees@index'); route::get('/api/v1/users/{id?}', 'employees@users'); route::post('/api/v1/employees', 'employees@store'); route::post('/api/v1/employees/{id}', 'employees@update'); route::delete('/api/v1/employees/{id}', 'employees@destroy'); route::group(['prefix' => 'api'], function() { route::resource('authenticate', 'authenticatecontroller', ['only' => ['index']]); route::post('authenticate', 'authentic...
Read more