The following encryption and decryption work normally in mysql (aes-256-cbc) mode
SET block_encryption_mode = 'aes-256-cbc';
select
cast(
aes_decrypt(
from_base64('StThdNXA+CWvlg+of/heJQ=='),
sha2(concat('ssshhhhhhhhhhh!!','ENCRYPTION_KEY$&'),256),
'ssshhhhhhhhhhh!!'
)
as char);
select to_base64(aes_encrypt(
'test_value',
sha2(concat('ssshhhhhhhhhhh!!','ENCRYPTION_KEY$&'),256),
'ssshhhhhhhhhhh!!'
));
I'm trying to decrypt a value encrypted in mysql without success.
The following is the key in my mysql query sha256 (salt key)
select sha2(concat('ssshhhhhhhhhhh!!','ENCRYPTION_KEY$&'),256);
Same value as I was able to get in java:
Hashing.sha256().hashString("ssshhhhhhhhhhh!!ENCRYPTION_KEY$&", StandardCharsets.UTF_8).toString();
Is there a custom way to make bouncy castle/other APIs use the same key for decryption?
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
MySQL uses the OpenSSL algorithm internally, using EVP_BytesToKey as the derivation function. Look at this URL
MySQL encryption and decryption example:
SET block_encryption_mode = 'aes-128-cbc'; SET block_encryption_mode = 'aes-256-cbc'; select cast( aes_decrypt( from_base64('MKicK+vAcZkq/g3wpTKxVg=='), 'ENCRYPTION_KEY$&', 'ssshhhhhhhhhhh!!' ) as char); select to_base64(aes_encrypt( 'test_value', 'ENCRYPTION_KEY$&', 'ssshhhhhhhhhhh!!' ));There is a JAR that supports this EVP_BytesToKey key derivation function.
byte[] key = "ENCRYPTION_KEY$&".getBytes(StandardCharsets.UTF_8); byte[] iv = "ssshhhhhhhhhhh!!".getBytes(StandardCharsets.UTF_8); String cipher = "AES-128-CBC"; @Test public void testEncrypt() throws Exception { byte[] data = "test_message".getBytes(StandardCharsets.UTF_8); byte[] encrypted = OpenSSL.encrypt(cipher, key, iv, data, true); System.out.println(new String(encrypted)); } @Test public void testDecrypt() throws GeneralSecurityException, IOException { byte[] encrypted = "rQ8Y0ClNu5d4ODZQ3XcQtw==".getBytes(StandardCharsets.UTF_8); byte[] decrypted = OpenSSL.decrypt(cipher, key, iv, encrypted); System.out.println(new String(decrypted)); }}
This finally achieves interoperability! Hope this helps someone trying to do the same thing.