How to decipher strings encrypted using JS crypto in Java

Question

How to decipher strings encrypted using JS crypto in Java

How can I translate this JavaScript code into Java using javax.crypto.xxx?

    encryptString : function encryptString(str, password) {
        var cipher = crypto.createCipher("aes128", password);
        return cipher.update(str, "binary", "base64") +
            cipher.final("base64");
    },

    decryptString : function decryptString(str, password) {
        var desipher = crypto.createDecipher("aes128", password);
        return desipher.update(str, "base64", "binary") +
            desipher.final("binary");
    }

I plan to encode in JS and decode in Java, as well as vice versa. Both 'str' and 'password' variables are strings, with the 'password' being 16 characters long.

It seems that the createCipher(algorithm, password) method utilizes a unique approach to generate raw key and IV, which may not be standard across different platforms. Switching to createCipheriv(algorithm, key, iv) could provide a more versatile solution. For more information, check out: http://nodejs.org/api/crypto.html#crypto_crypto_createcipheriv_algorithm_key_iv I will make sure to update with the latest information soon.

java javascript encryption

Answer 1

Answer №1

Here are the steps to encrypt and decrypt data in JavaScript and Java using the Crypto library for JS and javax.crypto for Java.

If cross-environment compatibility is not a concern, you can start quickly by using the createCipher(algorithm, password) method in your JavaScript code. However, this approach lacks portability as it doesn't specify how the raw key and initialization vector are derived from the password.

To achieve portable encryption/decryption in JavaScript, switch to using the createCipheriv(algorithm, key, iv) method:

    encryptData : function encryptData(data, encryptionKey, iv) {
        var cipher = crypto.createCipheriv('aes-128-cbc', encryptionKey, iv);
        var encryptedData = cipher.update(data, 'binary', 'base64');
        var remainingEncryptedData = cipher.final('base64');
        return encryptedData + remainingEncryptedData;
    },

    decryptData : function decryptData(data, decryptionKey, iv) {
        var decipher = crypto.createDecipheriv('aes-128-cbc', decryptionKey, iv);
        var decryptedData = decipher.update(data, 'base64', 'binary');
        var remainingDecryptedData = decipher.final('binary');
        return decryptedData + remainingDecryptedData;
    },

For Java, here is the equivalent code snippet that performs the same operations:

public static String encryptData(String plainText, byte[] key, byte[] iv) throws Exception
{
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    SecretKeySpec secretKey = new SecretKeySpec(key, "AES");
    IvParameterSpec ivParams = new IvParameterSpec(iv);
    cipher.init(Cipher.ENCRYPT_MODE, secretKey, ivParams);
    byte[] encryptedData = cipher.doFinal(plainText.getBytes());
    return new String(Base64.encodeBase64(encryptedData));
}

public static String decryptData(String encryptedText, byte[] key, byte[] iv) throws Exception
{
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    SecretKeySpec secretKey = new SecretKeySpec(key, "AES");
    IvParameterSpec ivParams = new IvParameterSpec(iv);
    cipher.init(Cipher.DECRYPT_MODE, secretKey, ivParams);
    return new String(cipher.doFinal(Base64.decodeBase64(encryptedText)));
}

Answer 2

Here are the steps to encrypt and decrypt data in JavaScript and Java using the Crypto library for JS and javax.crypto for Java.

If cross-environment compatibility is not a concern, you can start quickly by using the createCipher(algorithm, password) method in your JavaScript code. However, this approach lacks portability as it doesn't specify how the raw key and initialization vector are derived from the password.

To achieve portable encryption/decryption in JavaScript, switch to using the createCipheriv(algorithm, key, iv) method:

    encryptData : function encryptData(data, encryptionKey, iv) {
        var cipher = crypto.createCipheriv('aes-128-cbc', encryptionKey, iv);
        var encryptedData = cipher.update(data, 'binary', 'base64');
        var remainingEncryptedData = cipher.final('base64');
        return encryptedData + remainingEncryptedData;
    },

    decryptData : function decryptData(data, decryptionKey, iv) {
        var decipher = crypto.createDecipheriv('aes-128-cbc', decryptionKey, iv);
        var decryptedData = decipher.update(data, 'base64', 'binary');
        var remainingDecryptedData = decipher.final('binary');
        return decryptedData + remainingDecryptedData;
    },

For Java, here is the equivalent code snippet that performs the same operations:

public static String encryptData(String plainText, byte[] key, byte[] iv) throws Exception
{
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    SecretKeySpec secretKey = new SecretKeySpec(key, "AES");
    IvParameterSpec ivParams = new IvParameterSpec(iv);
    cipher.init(Cipher.ENCRYPT_MODE, secretKey, ivParams);
    byte[] encryptedData = cipher.doFinal(plainText.getBytes());
    return new String(Base64.encodeBase64(encryptedData));
}

public static String decryptData(String encryptedText, byte[] key, byte[] iv) throws Exception
{
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    SecretKeySpec secretKey = new SecretKeySpec(key, "AES");
    IvParameterSpec ivParams = new IvParameterSpec(iv);
    cipher.init(Cipher.DECRYPT_MODE, secretKey, ivParams);
    return new String(cipher.doFinal(Base64.decodeBase64(encryptedText)));
}

Answer 3

Answer №2

We encountered a similar issue and decided to tackle it by encrypting the voucherCode on the Java side before sending it to the front end. It was crucial to ensure the security of the voucher code through encryption.

On the front end, a third-party JavaScript library required the voucherCode in a way that allowed for decryption to retrieve the original value.

This is how we approached the solution:

On the Java side

import javax.xml.bind.DatatypeConverter;

    public class Controller{

     @RequestMapping("voucherCode")
     public String getVoucherCode{
       String voucherCode = voucherService.getVoucherCode()
             return  DatatypeConverter.printBase64Binary(voucherCode.getBytes("UTF-8"))

}
    }

For example, if the voucher code is "50%OFF," the above code will encode it as NTAlT0ZG.

Once we have the encoded value on the front end, we can retrieve the original value using JavaScript:

window.atob("NTAlT0ZG") // this will return 50%OFF

This approach allows for seamless encryption/decryption between Java and JavaScript.

The window object provides two methods for encryption and decryption:

 window.btoa("50%OFF") // returns NTAlT0ZG
    window.atob("NTAlT0ZG") // return original value as "50%OFF"

Answer 4

We encountered a similar issue and decided to tackle it by encrypting the voucherCode on the Java side before sending it to the front end. It was crucial to ensure the security of the voucher code through encryption.

On the front end, a third-party JavaScript library required the voucherCode in a way that allowed for decryption to retrieve the original value.

This is how we approached the solution:

On the Java side

import javax.xml.bind.DatatypeConverter;

    public class Controller{

     @RequestMapping("voucherCode")
     public String getVoucherCode{
       String voucherCode = voucherService.getVoucherCode()
             return  DatatypeConverter.printBase64Binary(voucherCode.getBytes("UTF-8"))

}
    }

For example, if the voucher code is "50%OFF," the above code will encode it as NTAlT0ZG.

Once we have the encoded value on the front end, we can retrieve the original value using JavaScript:

window.atob("NTAlT0ZG") // this will return 50%OFF

This approach allows for seamless encryption/decryption between Java and JavaScript.

The window object provides two methods for encryption and decryption:

 window.btoa("50%OFF") // returns NTAlT0ZG
    window.atob("NTAlT0ZG") // return original value as "50%OFF"

How to decipher strings encrypted using JS crypto in Java

Answer №1

Answer №2

Similar questions

What is the process for retrieving data from a server and filling an SQL database on an Android device?

Filtering the values of an array nested within objects

"I am having trouble with req.body in my Express JavaScript application as it is not returning the data from POST requests. Can

Displaying Google Picker results in an error due to an invalid origin value

The 'checked' property cannot be bound to 'mat-button-toggle' as it is not recognized as a valid property in Angular 9

I am looking for a way to automatically close an existing window and open a new window whenever a button is clicked in Angular. How can I achieve this

Adding several entries into mysql with the assistance of php

Dealing with Wrapped Exceptions and Utilizing the getCause() Method in Spring Framework's @

Is the order of items guaranteed when reading a file in node.js?

Java Game Lag becomes a major hurdle to smooth gameplay

Is it possible to utilize a global constant in Angular without the need for injection into the controller?

Issues encountered when utilizing a provider alongside a controller for implementing Highcharts visualizations in angularjs

Encountered an unexpected element during JSON unmarshalling that caused a javax.xml.bind.UnmarshalException with the URI "" and a local context

Interactive Map Markers on JMapViewer with OpenStreetMaps

Incorporating CSS classes conditionally in an Angular child component using input values

Issue encountered when trying to access WCF Service on Android Device

After being redrawn, the line on the canvas vanishes

Guide on adjusting the darkness of a MaterialUI Avatar component image and adding text to it

What is the most efficient method for showcasing a downloaded image in a ListView?

Errors and warnings caught off guard while running json-server with the --watch flag