我花了一些時間(〜2天)來解決同樣的問題。將「des.exe」重寫到C#中。最後,我得到了libdes資源,並對邏輯進行了逆向設計。
初始化向量都是(8)個零。即新的字節[8]應該做。
但是,訣竅可能是如何將字符串密碼轉換爲8個字節長的密鑰。如果您使用簡單的DES(未三重DES),這個代碼可以爲你做的伎倆:
public class LibDesPasswordConvertor
{
public byte[] PasswordToKey(string password)
{
if (password == null)
throw new ArgumentNullException("password");
if (password == "")
throw new ArgumentException("password");
var key = new byte[8];
for (int i = 0; i < password.Length; i++)
{
var c = (int)password[i];
if ((i % 16) < 8)
{
key[i % 8] ^= (byte)(c << 1);
}
else
{
// reverse bits e.g. 11010010 -> 01001011
c = (((c << 4) & 0xf0) | ((c >> 4) & 0x0f));
c = (((c << 2) & 0xcc) | ((c >> 2) & 0x33));
c = (((c << 1) & 0xaa) | ((c >> 1) & 0x55));
key[7 - (i % 8)] ^= (byte)c;
}
}
AddOddParity(key);
var target = new byte[8];
var passwordBuffer =
Encoding.ASCII.GetBytes(password).Concat(new byte[8]).Take(password.Length + (8 - (password.Length % 8)) % 8).ToArray();
var des = DES.Create();
var encryptor = des.CreateEncryptor(key, key);
for (int x = 0; x < passwordBuffer.Length/8; ++x)
{
encryptor.TransformBlock(passwordBuffer, 8 * x, 8, target, 0);
}
AddOddParity(target);
return target;
}
private void AddOddParity(byte[] buffer)
{
for (int i = 0; i < buffer.Length; ++i)
{
buffer[i] = _oddParityTable[buffer[i]];
}
}
private static byte[] _oddParityTable = {
1, 1, 2, 2, 4, 4, 7, 7, 8, 8, 11, 11, 13, 13, 14, 14,
16, 16, 19, 19, 21, 21, 22, 22, 25, 25, 26, 26, 28, 28, 31, 31,
32, 32, 35, 35, 37, 37, 38, 38, 41, 41, 42, 42, 44, 44, 47, 47,
49, 49, 50, 50, 52, 52, 55, 55, 56, 56, 59, 59, 61, 61, 62, 62,
64, 64, 67, 67, 69, 69, 70, 70, 73, 73, 74, 74, 76, 76, 79, 79,
81, 81, 82, 82, 84, 84, 87, 87, 88, 88, 91, 91, 93, 93, 94, 94,
97, 97, 98, 98,100,100,103,103,104,104,107,107,109,109,110,110,
112,112,115,115,117,117,118,118,121,121,122,122,124,124,127,127,
128,128,131,131,133,133,134,134,137,137,138,138,140,140,143,143,
145,145,146,146,148,148,151,151,152,152,155,155,157,157,158,158,
161,161,162,162,164,164,167,167,168,168,171,171,173,173,174,174,
176,176,179,179,181,181,182,182,185,185,186,186,188,188,191,191,
193,193,194,194,196,196,199,199,200,200,203,203,205,205,206,206,
208,208,211,211,213,213,214,214,217,217,218,218,220,220,223,223,
224,224,227,227,229,229,230,230,233,233,234,234,236,236,239,239,
241,241,242,242,244,244,247,247,248,248,251,251,253,253,254,254};
}
(重複使用的libdes一些代碼塊,雖然我不得不找出DES「校驗」的一部分我自己)。
最後一個缺點是,libdes使用非標準的填充機制。它幾乎和ISO一樣,但最後一個字節不是添加的字節數,而是8 - 這個數字。我將Padding屬性設置爲None並自己處理填充。
在回答下面的答案時,初始化向量是必需的。我相信第三方使用CBC模式。 – 2009-10-24 13:37:35
好吧,正如我所說,如果他們使用IV,他們必須把它給你,因爲你無法猜測它。 – svens 2009-10-24 21:26:06
不知何故,它們不需要它們提供des.exe的命令行工具。你只需輸入密鑰。這就是爲什麼我相信這是可以推導出來的。感謝您的意見。 – 2009-10-24 23:24:21