javascript - Javascript/NodeJs 中这个函数的等价物是什么？

Question

这是php中用来加密的函数

function generatetoken()
{
    $token = ['id' => '123456','name' => 'username','email' => 'useremail@example.com','type' => 'user'];
    $cipher = "AES-128-CBC";
    $plaintext = json_encode($token);
    $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");
    $iv = openssl_random_pseudo_bytes($ivlen);
    $ciphertext_raw = openssl_encrypt($plaintext, $cipher, '123456789', $options = OPENSSL_RAW_DATA, $iv);
    $hmac = hash_hmac('sha256', $ciphertext_raw, '123456789', $as_binary = true);
    $ciphertext = base64_encode($iv . $hmac . $ciphertext_raw);       
    return ciphertext;
}

我有这个函数来解密 php 中的文本:

function decodetokeninPhp($request_token)
{
    $cipher = "AES-128-CBC";
    $c = base64_decode($request_token);
    $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");
    $iv = substr($c, 0, $ivlen);
    $hmac = substr($c, $ivlen, $sha2len = 32);
    $ciphertext_raw = substr($c, $ivlen + $sha2len);
    $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, '123456789', $options = OPENSSL_RAW_DATA, $iv);
    $calcmac = hash_hmac('sha256', $ciphertext_raw, '123456789', $as_binary = true);
    if (hash_equals($hmac, $calcmac)) {
      return json_encode($original_plaintext);
    } else {
       return null;
    }
}

我想要在 javascript/Nodejs 中等效，我试过这个:

function decode(token){
var password = 'My-key';
const ivLength = 16;
const sha2len = 32;
let replacedToken = token.toString();
const base64decoded = Buffer.from(replacedToken, 'base64').toString('binary');
const iv = replacedToken.substr(0,ivLength);
const hMac= replacedToken.substr( ivLength,sha2len);
const ciphertext_raw = replacedToken.substr(ivLength+sha2len);

var DataEncrypt = ciphertext_raw;
var DataKey = CryptoJS.enc.Utf8.parse(password);
var DataVector = CryptoJS.enc.Utf8.parse(iv);
var decrypted = CryptoJS.AES.decrypt(DataEncrypt, DataKey, { iv: DataVector });        
var decrypted = CryptoJS.enc.Utf8.stringify(JSON.stringify(decrypted));
console.log("token decoded"+ decrypted);
}
  

但是console.log 只是打印“token decoded:”，结果是空的:(
请有人帮助我，我快疯了:/

Answer 1

如果要使用 NodeJS 的加密模块，则必须更改整个 CryptoJS 部分。一个可能的加密实现是:

var crypto = require('crypto');

function decode(token){

    var keyDec = Buffer.from('0123456789012345', 'utf8'); // sample key for encryption/decryption
    var keyAuth = Buffer.from('0123456789', 'utf8');      // sample key for authentication
    var ivLen = 16;
    var macLen = 32;
    var tokenBuf = Buffer.from(token, 'base64');
    var iv = tokenBuf.slice(0, ivLen);
    var mac = tokenBuf.slice(ivLen, ivLen + macLen);
    var ciphertext = tokenBuf.slice(ivLen + macLen);

    // Authenticate
    var hmac = crypto.createHmac('sha256', keyAuth);
    hmac.update(ciphertext);
    var macCalc = hmac.digest();

    if (macCalc.equals(mac)) {

        // Decrypt, if authentication is successfull
        var decipher = crypto.createDecipheriv("AES-128-CBC", keyDec, iv);
        var decrypted = decipher.update(ciphertext, '', 'utf-8');
        decrypted += decipher.final('utf-8');
        return JSON.parse(decrypted);
    } else {
        console.log("Decryption failed");
    }
}

var token = decode('U3pukkS48yeNpsusv43Tmv2AmmDfYVtQ8jPw2izEQ0CVOfutGtA9e3ZWXJo2Ibi2axo31blnW6uq/yCz/KRSltwGhCmwpiHQ8mP5ulMf0Nr9V9Gzr6r+R6y3ZOpzTsV9IEkaKDxZTihfoDAzeyN9LYKS9uUW6URL0Do1HGaZ51o='); // from PHP code
console.log(token);

在这里，使用示例 key 0123456789012345 和 0123456789 分别使用发布的 PHP 代码生成密文，用于加密和身份验证。
我怀疑用于解密的 PHP 代码中的 json_encode()。在这里，我希望有一个 json_decode()，因此，在 NodeJS 代码中有一个 JSON.parse()(但您可以根据需要修改它)。