从字符串解密在python应用程序中加密的NodeJS中的ChaCha20-Poly1305二进制数据

问题描述

我们有一个 Python 应用程序,它将字符串作为加密的二进制数据存储在 MongoDB 中,它使用

from cryptography.hazmat.primitives.ciphers.aead import ChaCha20Poly1305

在 NodeJS 方面,我一直无法弄清楚如何解密数据,我有我们的盐,我们的密钥,但据我所知没有 IV,或者 python 模块可能只是隐藏了所有所有python应用程序必须做的就是调用encrypt(value,salt)和decrypt(value,salt)

蟒蛇:

class ChaChaEncryptedStringField(EncryptedStringField):
"""
A field which,given an encryption key and salt,will automatically encrypt/decrypt
sensitive data to avoid needing to do this before passing in. This encryption
method reliably produces a searchable string.
"""

def __init__(self,key,salt,*args,**kwargs):
    """Initialize the ChaChaEncryptedStringField.
    Args:
        key (str) -
        salt (str) -
    """
    class Hook:
        def __init__(self,salt):
            self.salt = salt
            self.chacha = ChaCha20Poly1305(key)

        def encrypt(self,value):
            return self.chacha.encrypt(self.salt,value,None)

        def decrypt(self,value):
            return self.chacha.decrypt(self.salt,None)

    self.encryption_hook = Hook(b64decode(key),b64decode(salt))
    super(EncryptedStringField,self).__init__(*args,**kwargs)

Javascript(不起作用但已关闭):

const authTagLocation = data.buffer.length - 16;
const ivLocation = data.buffer.length - 28;
const authTag = data.buffer.slice(authTagLocation);
const iv = data.buffer.slice(ivLocation,authTagLocation);
const encrypted = data.buffer.slice(0,ivLocation);
const decipher = crypto.createDecipheriv('chacha20-poly1305',keyBuffer,iv,{ authTagLength: 16 } );
let dec = decipher.update(
  data.buffer,'utf-8','utf-8'
);
dec += decipher.final('utf-8');

return dec.toString();

通过一些研究和反复试验,我克服了它,抱怨 IV 不正确,并且密钥长度正确,但仍然返回乱码

所以我实际上让以下代码工作,但我不会声称完全理解正在发生的事情:

正在运行的 Javascript(从秘密中提取盐,使用提取的 IV 失败)

const authTagLength = 16
const authTagLocation = data.buffer.length - authTagLength;
const ivLocation = data.buffer.length - 16;
const authTag = data.buffer.slice(authTagLocation);
const iv = data.buffer.slice(ivLocation,ivLocation);

const decipher = crypto.createDecipheriv('chacha20-poly1305',saltBuffer,{ authTagLength: authTagLength } );
let dec = decipher.update(
  encrypted,'utf-8'
);
dec += decipher.final('utf-8');

return dec.toString();

解决方法

暂无找到可以解决该程序问题的有效方法,小编努力寻找整理中!

如果你已经找到好的解决方法,欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@)