PHP5.2以下低版本 SM4 国密加密算法, 实测可用
网络上查来的代码, 再经过自己的调试调整, 终于可以在PHP5.2下正常运行, 大部分网络找到的都是在5.2以上高版本下运行正常, 5.2下运行结果不对的程序, 包括很多AI提供的代码也是在5.2下无法得到正确结果的,下面直接上代码:
<?php
header("Expires:-1");
header("Content-type: text/html; charset=utf-8");
date_default_timezone_set('Asia/Shanghai');
/**
* Sm4加密解密类
* Class Sm4Helper
*/
class Sm4Helper
{
//PHP5.2及以下版本int为32位有符号数, 以下左右移运算会超出最大整形数21亿多,
//所以需要转为浮点数来存大于21亿以上的整数, 间接实现有符号整形转无符号整形
private $SM4_CK = array(
0x00070e15, 0x1c232a31, 0x383f464d, 0x545b6269,
0x70777e85, 0x8c939aa1, 0xa8afb6bd, 0xc4cbd2d9,
0xe0e7eef5, 0xfc030a11, 0x181f262d, 0x343b4249,
0x50575e65, 0x6c737a81, 0x888f969d, 0xa4abb2b9,
0xc0c7ced5, 0xdce3eaf1, 0xf8ff060d, 0x141b2229,
0x30373e45, 0x4c535a61, 0x686f767d, 0x848b9299,
0xa0a7aeb5, 0xbcc3cad1, 0xd8dfe6ed, 0xf4fb0209,
0x10171e25, 0x2c333a41, 0x484f565d, 0x646b7279
);
private $SM4_SBOX = array(
0xd6,0x90,0xe9,0xfe,0xcc,0xe1,0x3d,0xb7,0x16,0xb6,0x14,0xc2,0x28,0xfb,0x2c,0x05,
0x2b,0x67,0x9a,0x76,0x2a,0xbe,0x04,0xc3,0xaa,0x44,0x13,0x26,0x49,0x86,0x06,0x99,
0x9c,0x42,0x50,0xf4,0x91,0xef,0x98,0x7a,0x33,0x54,0x0b,0x43,0xed,0xcf,0xac,0x62,
0xe4,0xb3,0x1c,0xa9,0xc9,0x08,0xe8,0x95,0x80,0xdf,0x94,0xfa,0x75,0x8f,0x3f,0xa6,
0x47,0x07,0xa7,0xfc,0xf3,0x73,0x17,0xba,0x83,0x59,0x3c,0x19,0xe6,0x85,0x4f,0xa8,
0x68,0x6b,0x81,0xb2,0x71,0x64,0xda,0x8b,0xf8,0xeb,0x0f,0x4b,0x70,0x56,0x9d,0x35,
0x1e,0x24,0x0e,0x5e,0x63,0x58,0xd1,0xa2,0x25,0x22,0x7c,0x3b,0x01,0x21,0x78,0x87,
0xd4,0x00,0x46,0x57,0x9f,0xd3,0x27,0x52,0x4c,0x36,0x02,0xe7,0xa0,0xc4,0xc8,0x9e,
0xea,0xbf,0x8a,0xd2,0x40,0xc7,0x38,0xb5,0xa3,0xf7,0xf2,0xce,0xf9,0x61,0x15,0xa1,
0xe0,0xae,0x5d,0xa4,0x9b,0x34,0x1a,0x55,0xad,0x93,0x32,0x30,0xf5,0x8c,0xb1,0xe3,
0x1d,0xf6,0xe2,0x2e,0x82,0x66,0xca,0x60,0xc0,0x29,0x23,0xab,0x0d,0x53,0x4e,0x6f,
0xd5,0xdb,0x37,0x45,0xde,0xfd,0x8e,0x2f,0x03,0xff,0x6a,0x72,0x6d,0x6c,0x5b,0x51,
0x8d,0x1b,0xaf,0x92,0xbb,0xdd,0xbc,0x7f,0x11,0xd9,0x5c,0x41,0x1f,0x10,0x5a,0xd8,
0x0a,0xc1,0x31,0x88,0xa5,0xcd,0x7b,0xbd,0x2d,0x74,0xd0,0x12,0xb8,0xe5,0xb4,0xb0,
0x89,0x69,0x97,0x4a,0x0c,0x96,0x77,0x7e,0x65,0xb9,0xf1,0x09,0xc5,0x6e,0xc6,0x84,
0x18,0xf0,0x7d,0xec,0x3a,0xdc,0x4d,0x20,0x79,0xee,0x5f,0x3e,0xd7,0xcb,0x39,0x48
);
private $SM4_FK = array(0xA3B1BAC6, 0x56AA3350, 0x677D9197, 0xB27022DC);
public $_rk = array();
public $_block_size = 16;
public function __construct()
{
}
/**
* sm4加密（ecb）
* @param $key 16位十六进制的字符，比如asw34a5ses5w81wf
* @param $data 原始数据
* @return string
*/
public function encrypt($key, $data, $padflag = true)
{
$data = pack('H*', $data);
$key = pack('H*', $key);
$this->sm4KeySchedule($key);
if($padflag) $bytes = $this->pad($data, $this->_block_size);
else $bytes = $this->stringToBytes($data);
$chunks = array_chunk($bytes, $this->_block_size);
$ciphertext = "";
foreach ($chunks as $chunk) {
$ciphertext .= $this->sm4Encrypt($chunk);
}
return strtoupper(bin2hex($ciphertext));
}
/**
* sm4解密
* @param $key
* @param $data
* @return bool|string
*/
public function decrypt($key, $data, $padflag = true)
{
$data = pack("H*", $data);
$key = pack("H*", $key);
if (strlen($data) < 0 || strlen($data) % $this->_block_size != 0) {
return false;
}
$this->sm4KeySchedule($key);
$bytes = unpack("C*", $data);
$chunks = array_chunk($bytes, $this->_block_size);
//echo str_replace("\n","<br>",print_r($bytes,true));
$plaintext = "";
foreach ($chunks as $chunk) {
$plaintext .= substr($this->sm4Decrypt($chunk), 0, 16);
}
if($padflag) $plaintext = $this->unPad($plaintext);
return strtoupper(bin2hex($plaintext));
}
private function sm4Decrypt($cipherText)
{
$x = array();
for ($j=0; $j<4; $j++) {
$k1 = ($cipherText[$j*4]<<24);
$k1 = (float) sprintf("%u", $k1);
$k2 = ($cipherText[$j*4+1]<<16);
$k2 = (float) sprintf("%u", $k2);
$k3 = ($cipherText[$j*4+2]<<8);
$k3 = (float) sprintf("%u", $k3);
$k4 = ($cipherText[$j*4+3]);
$k4 = (float) sprintf("%u", $k4);
$x[$j]= $k1 | $k2 | $k3 | $k4;
$x[$j] = (float) sprintf("%u", $x[$j]);
//echo "{$k1}({$cipherText[$j*4]}) | {$k2}({$cipherText[$j*4+1]}) | {$k3}({$cipherText[$j*4+2]}) | {$k4}({$cipherText[$j*4+3]}) = {$x[$j]}<br>\n";
}
for ($i=0; $i<32; $i++) {
$tmp = $x[$i+1]^$x[$i+2]^$x[$i+3]^$this->_rk[31-$i];
$tmp = (float)sprintf("%u", $tmp);
$k1 = ($this->SM4_SBOX[($tmp >> 24) & 0xFF]) << 24;
$k1 = (float)sprintf("%u", $k1);
$k2 = ($this->SM4_SBOX[($tmp >> 16) & 0xFF]) << 16;
$k2 = (float)sprintf("%u", $k2);
$k3 = ($this->SM4_SBOX[($tmp >> 8) & 0xFF]) << 8;
$k3 = (float)sprintf("%u", $k3);
$k4 = $this->SM4_SBOX[$tmp & 0xFF];
$k4 = (float)sprintf("%u", $k4);
$buf= $k1 | $k2 | $k3 | $k4;
$buf = (float) sprintf("%u", $buf);
$x[$i+4]=$x[$i]^($buf^$this->sm4Rotl32(($buf), 2)^ $this->sm4Rotl32(($buf), 10) ^ $this->sm4Rotl32(($buf), 18)^ $this->sm4Rotl32(($buf), 24));
$x[$i+4] = (float) sprintf("%u", $x[$i+4]);
//echo $x[$i+4]."<br>\n";
}
$plainText = array();
for ($k=0; $k<4; $k++) {
$tmp = ($x[35-$k]>> 24)& 0xFF;
//echo "{$x[35-$k]} >> 24 = {$tmp}<br>\n";
$plainText[4*$k]=$tmp;
$plainText[4*$k+1]=($x[35-$k]>> 16)& 0xFF;
$plainText[4*$k+2]=($x[35-$k]>> 8)& 0xFF;
$plainText[4*$k+3]=($x[35-$k])& 0xFF;
}
return $this->bytesToString($plainText);
}
private function sm4Encrypt($plainText)
{
$x = array();
for ($j=0; $j<4; $j++) {
$k1 = ($plainText[$j*4]<<24);
$k1 = (float)sprintf("%u", $k1); // 将k1转换为无符号整数,其实php没有无符号型, 把整形转为浮点型让它能存更大的数
$k2 = ($plainText[$j*4+1]<<16);
$k2 = (float)sprintf("%u", $k2);
$k3 = ($plainText[$j*4+2]<<8);
$k3 = (float)sprintf("%u", $k3);
$k4 = $plainText[$j*4+3];
$k4 = (float)sprintf("%u", $k4);
$x[$j]= $k1 | $k2 | $k3 | $k4;
$x[$j] = (float) sprintf("%u", $x[$j]);
//echo $x[$j]."<br>\n";
}
for ($i=0; $i<32; $i++) {
$tmp = $x[$i+1]^$x[$i+2]^$x[$i+3]^$this->_rk[$i];
$tmp = (float)sprintf("%u", $tmp);
$k1 = ($this->SM4_SBOX[($tmp >> 24) & 0xFF]) << 24;
$k1 = (float)sprintf("%u", $k1);
$k2 = ($this->SM4_SBOX[($tmp >> 16) & 0xFF]) << 16;
$k2 = (float)sprintf("%u", $k2);
$k3 = ($this->SM4_SBOX[($tmp >> 8) & 0xFF]) << 8;
$k3 = (float)sprintf("%u", $k3);
$k4 = $this->SM4_SBOX[$tmp & 0xFF];
$k4 = (float)sprintf("%u", $k4);
$buf= $k1 | $k2 | $k3 | $k4;
$buf = (float) sprintf("%u", $buf);
$x[$i+4]=$x[$i]^($buf^$this->sm4Rotl32(($buf), 2)^ $this->sm4Rotl32(($buf), 10) ^ $this->sm4Rotl32(($buf), 18)^ $this->sm4Rotl32(($buf), 24));
}
$cipherText = array();
for ($k=0; $k<4; $k++) {
$cipherText[4*$k]=($x[35-$k]>> 24)& 0xFF;
$cipherText[4*$k+1]=($x[35-$k]>> 16)& 0xFF;
$cipherText[4*$k+2]=($x[35-$k]>> 8)& 0xFF;
$cipherText[4*$k+3]=($x[35-$k])& 0xFF;
}
return $this->bytesToString($cipherText);
}
private function stringToBytes($string)
{
return unpack('C*', $string);
}
private function bytesToString($bytes)
{
return vsprintf(str_repeat('%c', count($bytes)), $bytes);
}
private function pad($data)
{
$bytes = $this->stringToBytes($data);
$rem = $this->_block_size - count($bytes) % $this->_block_size;
for ($i = 0; $i < $rem; $i++) {
array_push($bytes, $rem);
}
return $bytes;
}
private function unPad($data)
{
$bytes = $this->stringToBytes($data);
$rem = $bytes[count($bytes)];
$bytes = array_slice($bytes, 0, count($bytes) - $rem);
return $this->bytesToString($bytes);
}
private function sm4Rotl32($buf, $n)
{
$k1 = ($buf << $n) & 0xffffffff;
$k1 = (float)sprintf("%u", $k1);
$k0 = (32-$n);
$k0 = 2<<($k0-1); //a>>b = a / (2的(b-1)次方)
$k2 = (int)($buf / $k0); // $buf >> $k0; //这里php5.2又会把$buf转为有符号整形参与右移运算,所以换成除法
$k2 = (float)sprintf("%u", $k2);
//echo "{$buf} / {$k0} = {$k2} <br>\n";
$k3 = $k1 | $k2;
$k3 = (float)sprintf("%u", $k3);
return $k3;
}
private function sm4KeySchedule($key)
{
$this->_rk = array();
$key = array_values(unpack("C*", $key));
$k = array();
for ($i=0; $i<4; $i++) {
$k0 = $key[4*$i]<<24;
$k1 = (float)sprintf("%u", $k0);
$k2 = ($key[4*$i+1]<<16);
$k3 = ($key[4*$i+2]<<8);
$k4 = $key[4*$i+3];
$k[$i] = $this->SM4_FK[$i] ^ ($k1 | $k2 |$k3 | $k4);
$k[$i] = (float)sprintf("%u", $k[$i]);
//echo $k[$i]."<br>\n";
}
//echo "<br>\n";
for ($j=0; $j<32; $j++) {
$k1 = $k[$j+1];
$k1 = (float)sprintf("%u", $k1);
$k2 = $k[$j+2];
$k2 = (float)sprintf("%u", $k2);
$k3 = $k[$j+3];
$k3 = (float)sprintf("%u", $k3);
$k4 = $this->SM4_CK[$j];
$k4 = (float)sprintf("%u", $k4);
$tmp = $k1 ^ $k2 ^ $k3 ^ $k4;
$tmp = (float)sprintf("%u", $tmp);
//echo "{$k1} ^ {$k2} ^ {$k3} ^ {$k4} = {$tmp} <br>\n";
$k1 = ($this->SM4_SBOX[($tmp >> 24) & 0xFF]) << 24;
$k1 = (float)sprintf("%u", $k1);
$k2 = ($this->SM4_SBOX[($tmp >> 16) & 0xFF]) << 16;
$k2 = (float)sprintf("%u", $k2);
$k3 = ($this->SM4_SBOX[($tmp >> 8) & 0xFF]) << 8;
$k3 = (float)sprintf("%u", $k3);
$k4 = $this->SM4_SBOX[$tmp & 0xFF];
$k4 = (float)sprintf("%u", $k4);
$buf = $k1 | $k2 | $k3 | $k4;
$buf = (float)sprintf("%u", $buf);
//echo $buf.' ';
$k[$j+4]=$k[$j]^(($buf)^($this->sm4Rotl32(($buf), 13))^($this->sm4Rotl32(($buf), 23)));
$k[$j+4] = (float)sprintf("%u", $k[$j+4]);
$this->_rk[$j]=$k[$j+4];
//echo $this->_rk[$j]."<br>\n";
//if($j == 1)exit;
}
}
}
// 测试用例 (数据以16进制传入,避免编码问题, 也可以改为base64)
$key = 'F1774E4EDB4396B1647304EB4A6A4E3D'; // 16字节密钥
$data = 'F186F4B793A501124185CC47CD91C225'; // UTF-8字符串
echo "原始数据: {$data}<br>\n";
$sm4 = new Sm4Helper();
// 加密
$encrypted = $sm4->encrypt($key, $data, false);
echo "加密结果: $encrypted<br>\n";
//$encrypted = 'd36a3239a2bb44af6ed0a56c11a708bf';
// 解密
$decrypted = $sm4->decrypt($key, $encrypted, false);
echo "解密结果: $decrypted<br>\n";
运行结果示例:
原始数据: F186F4B793A501124185CC47CD91C225
加密结果: D36A3239A2BB44AF6ED0A56C11A708BF
解密结果: F186F4B793A501124185CC47CD91C225
这个是网络找的原始代码(php7.3下运行正常):
<?php
$key = 'F1774E4EDB4396B1647304EB4A6A4E3D'; // 16字节密钥
$data = 'F186F4B793A501124185CC47CD91C225'; // UTF-8字符串
$sm4 = new Sm4Helper();
$enc = $sm4->encrypt($key, $data, false);
echo "encrypt: $enc\n";
$decdata = $sm4->decrypt($key, $enc, false);
echo "decrypt: $decdata\n";
/**
* Sm4加密解密类
* Class Sm4Helper
*/
class Sm4Helper
{
const SM4_CK = [
0x00070e15, 0x1c232a31, 0x383f464d, 0x545b6269,
0x70777e85, 0x8c939aa1, 0xa8afb6bd, 0xc4cbd2d9,
0xe0e7eef5, 0xfc030a11, 0x181f262d, 0x343b4249,
0x50575e65, 0x6c737a81, 0x888f969d, 0xa4abb2b9,
0xc0c7ced5, 0xdce3eaf1, 0xf8ff060d, 0x141b2229,
0x30373e45, 0x4c535a61, 0x686f767d, 0x848b9299,
0xa0a7aeb5, 0xbcc3cad1, 0xd8dfe6ed, 0xf4fb0209,
0x10171e25, 0x2c333a41, 0x484f565d, 0x646b7279
];
const SM4_SBOX = [
0xd6,0x90,0xe9,0xfe,0xcc,0xe1,0x3d,0xb7,0x16,0xb6,0x14,0xc2,0x28,0xfb,0x2c,0x05,
0x2b,0x67,0x9a,0x76,0x2a,0xbe,0x04,0xc3,0xaa,0x44,0x13,0x26,0x49,0x86,0x06,0x99,
0x9c,0x42,0x50,0xf4,0x91,0xef,0x98,0x7a,0x33,0x54,0x0b,0x43,0xed,0xcf,0xac,0x62,
0xe4,0xb3,0x1c,0xa9,0xc9,0x08,0xe8,0x95,0x80,0xdf,0x94,0xfa,0x75,0x8f,0x3f,0xa6,
0x47,0x07,0xa7,0xfc,0xf3,0x73,0x17,0xba,0x83,0x59,0x3c,0x19,0xe6,0x85,0x4f,0xa8,
0x68,0x6b,0x81,0xb2,0x71,0x64,0xda,0x8b,0xf8,0xeb,0x0f,0x4b,0x70,0x56,0x9d,0x35,
0x1e,0x24,0x0e,0x5e,0x63,0x58,0xd1,0xa2,0x25,0x22,0x7c,0x3b,0x01,0x21,0x78,0x87,
0xd4,0x00,0x46,0x57,0x9f,0xd3,0x27,0x52,0x4c,0x36,0x02,0xe7,0xa0,0xc4,0xc8,0x9e,
0xea,0xbf,0x8a,0xd2,0x40,0xc7,0x38,0xb5,0xa3,0xf7,0xf2,0xce,0xf9,0x61,0x15,0xa1,
0xe0,0xae,0x5d,0xa4,0x9b,0x34,0x1a,0x55,0xad,0x93,0x32,0x30,0xf5,0x8c,0xb1,0xe3,
0x1d,0xf6,0xe2,0x2e,0x82,0x66,0xca,0x60,0xc0,0x29,0x23,0xab,0x0d,0x53,0x4e,0x6f,
0xd5,0xdb,0x37,0x45,0xde,0xfd,0x8e,0x2f,0x03,0xff,0x6a,0x72,0x6d,0x6c,0x5b,0x51,
0x8d,0x1b,0xaf,0x92,0xbb,0xdd,0xbc,0x7f,0x11,0xd9,0x5c,0x41,0x1f,0x10,0x5a,0xd8,
0x0a,0xc1,0x31,0x88,0xa5,0xcd,0x7b,0xbd,0x2d,0x74,0xd0,0x12,0xb8,0xe5,0xb4,0xb0,
0x89,0x69,0x97,0x4a,0x0c,0x96,0x77,0x7e,0x65,0xb9,0xf1,0x09,0xc5,0x6e,0xc6,0x84,
0x18,0xf0,0x7d,0xec,0x3a,0xdc,0x4d,0x20,0x79,0xee,0x5f,0x3e,0xd7,0xcb,0x39,0x48
];
const SM4_FK = [0xA3B1BAC6, 0x56AA3350, 0x677D9197, 0xB27022DC];
public $_rk = [];
public $_block_size = 16;
public function __construct()
{
}
/**
* sm4加密（ecb）
* @param $key 16位十六进制的字符，比如asw34a5ses5w81wf
* @param $data 原始数据
* @return string
*/
public function encrypt($key, $data, $padflag = true)
{
$data = pack('H*', $data);
$key = pack('H*', $key);
$this->sm4KeySchedule($key);
if($padflag) $bytes = $this->pad($data, $this->_block_size);
else $bytes = $this->stringToBytes($data);
$chunks = array_chunk($bytes, $this->_block_size);
$ciphertext = "";
foreach ($chunks as $chunk) {
$ciphertext .= $this->sm4Encrypt($chunk);
}
return bin2hex($ciphertext);
}
/**
* sm4解密
* @param $key
* @param $data
* @return bool|string
*/
public function decrypt($key, $data, $padflag = true)
{
$data = pack('H*', $data);
//echo $data."<br>\n";
$key = pack('H*', $key);
//$data = base64_decode($data);
if (strlen($data) < 0 || strlen($data) % $this->_block_size != 0) {
return false;
}
$this->sm4KeySchedule($key);
$bytes = unpack("C*", $data);
$chunks = array_chunk($bytes, $this->_block_size);
//echo print_r($bytes,true);
$plaintext = "";
foreach ($chunks as $chunk) {
$plaintext .= substr($this->sm4Decrypt($chunk), 0, 16);
}
if($padflag) $plaintext = $this->unPad($plaintext);
return bin2hex($plaintext);
}
private function sm4Decrypt($cipherText)
{
$x = [];
for ($j=0; $j<4; $j++) {
$k1 = ($cipherText[$j*4]<<24);
$k2 = ($cipherText[$j*4+1]<<16);
$k3 = ($cipherText[$j*4+2]<<8);
$k4 = ($cipherText[$j*4+3]);
$x[$j]= $k1 | $k2 | $k3 | $k4;
echo "{$k1}({$cipherText[$j*4]}) | {$k2}({$cipherText[$j*4+1]}) | {$k3}({$cipherText[$j*4+2]}) | {$k4}({$cipherText[$j*4+3]}) = {$x[$j]}<br>\n";
}
for ($i=0; $i<32; $i++) {
$tmp = $x[$i+1]^$x[$i+2]^$x[$i+3]^$this->_rk[31-$i];
$buf= (self::SM4_SBOX[($tmp >> 24) & 0xFF]) << 24 |(self::SM4_SBOX[($tmp >> 16) & 0xFF]) << 16 |(self::SM4_SBOX[($tmp >> 8) & 0xFF]) << 8 |(self::SM4_SBOX[$tmp & 0xFF]);
$x[$i+4]=$x[$i]^($buf^$this->sm4Rotl32(($buf), 2)^ $this->sm4Rotl32(($buf), 10) ^ $this->sm4Rotl32(($buf), 18)^ $this->sm4Rotl32(($buf), 24));
}
$plainText = [];
for ($k=0; $k<4; $k++) {
$tmp = ($x[35-$k]>> 24)& 0xFF;
//echo "{$x[35-$k]} >> 24 = {$tmp}<br>\n";
$plainText[4*$k]=$tmp;
$plainText[4*$k+1]=($x[35-$k]>> 16)& 0xFF;
$plainText[4*$k+2]=($x[35-$k]>> 8)& 0xFF;
$plainText[4*$k+3]=($x[35-$k])& 0xFF;
}
return $this->bytesToString($plainText);
}
private function sm4Encrypt($plainText)
{
$x = [];
for ($j=0; $j<4; $j++) {
$x[$j]=($plainText[$j*4]<<24) |($plainText[$j*4+1]<<16)| ($plainText[$j*4+2]<<8)|($plainText[$j*4+3]);
}
for ($i=0; $i<32; $i++) {
$tmp = $x[$i+1]^$x[$i+2]^$x[$i+3]^$this->_rk[$i];
$buf= (self::SM4_SBOX[($tmp >> 24) & 0xFF]) << 24 |(self::SM4_SBOX[($tmp >> 16) & 0xFF]) << 16 |(self::SM4_SBOX[($tmp >> 8) & 0xFF]) << 8 |(self::SM4_SBOX[$tmp & 0xFF]);
$x[$i+4]=$x[$i]^($buf^$this->sm4Rotl32(($buf), 2)^ $this->sm4Rotl32(($buf), 10) ^ $this->sm4Rotl32(($buf), 18)^ $this->sm4Rotl32(($buf), 24));
}
$cipherText = [];
for ($k=0; $k<4; $k++) {
$cipherText[4*$k]=($x[35-$k]>> 24)& 0xFF;
$cipherText[4*$k+1]=($x[35-$k]>> 16)& 0xFF;
$cipherText[4*$k+2]=($x[35-$k]>> 8)& 0xFF;
$cipherText[4*$k+3]=($x[35-$k])& 0xFF;
}
return $this->bytesToString($cipherText);
}
private function stringToBytes($string)
{
return unpack('C*', $string);
}
private function bytesToString($bytes)
{
return vsprintf(str_repeat('%c', count($bytes)), $bytes);
}
private function pad($data)
{
$bytes = $this->stringToBytes($data);
$rem = ($this->_block_size - count($bytes) % $this->_block_size) % $this->_block_size;
for ($i = 0; $i < $rem; $i++) {
array_push($bytes, $rem);
}
return $bytes;
}
private function unPad($data)
{
$bytes = $this->stringToBytes($data);
$rem = $bytes[count($bytes)];
//echo $rem."<br>\n";
$bytes = array_slice($bytes, 0, count($bytes) - $rem);
return $this->bytesToString($bytes);
}
private function sm4Rotl32($buf, $n)
{
return (($buf << $n) & 0xffffffff) | ($buf >> (32-$n));
}
private function sm4KeySchedule($key)
{
$this->_rk = [];
$key = array_values(unpack("C*", $key));
$k = [];
for ($i=0; $i<4; $i++) {
$k[$i] = self::SM4_FK[$i]^(($key[4*$i]<<24) | ($key[4*$i+1]<<16) |($key[4*$i+2]<<8) | ($key[4*$i+3]));
}
for ($j=0; $j<32; $j++) {
$tmp = $k[$j+1]^$k[$j+2]^$k[$j+3]^ self::SM4_CK[$j];
$buf = (self::SM4_SBOX[($tmp >> 24) & 0xFF]) << 24 |(self::SM4_SBOX[($tmp >> 16) & 0xFF]) << 16 |(self::SM4_SBOX[($tmp >> 8) & 0xFF]) << 8 |(self::SM4_SBOX[$tmp & 0xFF]);
$k[$j+4]=$k[$j]^(($buf)^($this->sm4Rotl32(($buf), 13))^($this->sm4Rotl32(($buf), 23)));
$this->_rk[$j]=$k[$j+4];
}
}
}
这里附上对应的java代码:
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.util.encoders.Hex;
import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.spec.SecretKeySpec;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.SecureRandom;
import java.security.Security;
public class SM4 {
/**
* 指定加密算法
*/
private static final String ALGORITHM_NAME = "SM4";
/**
* BC中SM4默认使用ECB模式和PKCS5Padding填充方式
*/
private static final String ALGORITHM_ECB_PKCS7PADDING = "SM4/ECB/PKCS7Padding";
/**
* SM4算法目前只支持128位（即密钥16字节）
*/
private static final int DEFAULT_KEY_SIZE = 128;
static {
// 防止内存中出现多次BouncyCastleProvider的实例
if (null == Security.getProvider(BouncyCastleProvider.PROVIDER_NAME)) {
Security.addProvider(new BouncyCastleProvider());
}
}
public static void main(String[] args){
String rlt = run("encrypt", "F186F4B793A501124185CC47CD91C225", "F1774E4EDB4396B1647304EB4A6A4E3D");
System.out.println(rlt);
}
public static final String run(String method, String arg0, String arg1) {
String ret = "";
switch (method) {
case "getkey":
ret = generateKey();
break;
case "encrypt":
ret = sm4Encrypt(arg0, arg1);
break;
case "decrypt":
ret = sm4Encrypt(arg0, arg1);
break;
}
return ret;
}
/**
* 生成密钥
* <p>建议使用org.bouncycastle.util.encoders.Hex将二进制转成HEX字符串</p>
*
* @return 密钥16位
* @throws Exception 生成密钥异常
*/
public static String generateKey() {
try {
KeyGenerator kg = KeyGenerator.getInstance(ALGORITHM_NAME, BouncyCastleProvider.PROVIDER_NAME);
kg.init(DEFAULT_KEY_SIZE, new SecureRandom());
return Hex.toHexString(kg.generateKey().getEncoded());
}catch (NoSuchAlgorithmException | NoSuchProviderException e){
e.printStackTrace();
return "";
}
}
/**
* SM4对称加解密 加密
*
* @param plainString 待加密的字符串
* @param key 密钥
* @return 密文
*/
public static String sm4Encrypt(String plainString, String key) {
String cipherString = null;
try {
// 创建密钥规范
SecretKeySpec secretKeySpec = new SecretKeySpec(hexToBytes(key), ALGORITHM_NAME);
// 获取Cipher对象实例
Cipher cipher = Cipher.getInstance(ALGORITHM_ECB_PKCS7PADDING, BouncyCastleProvider.PROVIDER_NAME);
// 初始化Cipher为加密模式
cipher.init(Cipher.ENCRYPT_MODE, secretKeySpec);
// 获取加密byte数组
byte[] cipherBytes = cipher.doFinal(hexToBytes(plainString));
// 输出为Base64编码Base64.encode
cipherString = bytesToHex(cipherBytes);
} catch (Exception e) {
e.printStackTrace();
}
return cipherString;
}
/**
* SM4对称加解密 解密
* @param cipherString 密文
* @param key 密钥
* @return 明文
*/
public static String sm4Decrypt(String cipherString, String key) {
String plainString = null;
try {
// 创建密钥规范
SecretKeySpec secretKeySpec = new SecretKeySpec(hexToBytes(key), ALGORITHM_NAME);
// 获取Cipher对象实例
Cipher cipher = Cipher.getInstance(ALGORITHM_ECB_PKCS7PADDING, BouncyCastleProvider.PROVIDER_NAME);
// 初始化Cipher为解密模式
cipher.init(Cipher.DECRYPT_MODE, secretKeySpec);
// 获取加密byte数组
byte[] cipherBytes = cipher.doFinal(hexToBytes(cipherString));
// 输出为字符串
plainString = new String(cipherBytes);
} catch (Exception e) {
e.printStackTrace();
}
return plainString;
}
/**
* 十六进制字符串转字节数组
*/
public static byte[] hexToBytes(String hex) {
int len = hex.length();
byte[] data = new byte[len / 2];
for (int i = 0; i < len; i += 2) {
data[i / 2] = (byte) ((Character.digit(hex.charAt(i), 16) << 4)
+ Character.digit(hex.charAt(i+1), 16));
}
return data;
}
/**
* 字节数组转十六进制字符串
*/
public static String bytesToHex(byte[] bytes) {
StringBuilder result = new StringBuilder();
for (byte b : bytes) {
result.append(String.format("%02x", b));
}
return result.toString();
}
}
运行结果示例:
加密结果: d36a3239a2bb44af6ed0a56c11a708bf3b3600c91a7003772a4ef07ddbd594a0
说明: java的运行结果64位, 是因为额外对原数据做了padding操作, 因为我们传入的数据是16位(hex32位)的, 不需要padding, 所以结果就应该是16位(hex32位)
浙公网安备 33010602011771号