| C#做的一个加密/解密的类 | |
| 前两年写的东西&＃xff0c;现在整理一下发出来&＃xff01;以前公司需要做WebService&＃xff0c;并且对WebService的SoapHeader进行加密&＃xff0c;所以就写了这么个东东&＃xff01;使用这个类&＃xff0c;需要密钥管理&＃xff01;为了保证数据的安全性往往要对数据进行加密&＃xff0c;但是加密的缺点之一&＃xff0c;就是影响程序的运行效率&＃xff0c;所以&＃xff0c;当时我的思路是只对用户的登录信息&＃xff08;用户名&＃xff0c;密码&＃xff09;进行加密&＃xff01;数据用明文传输&＃xff0c;用户信息验证没有通过的情况下, 不进行数据传输。 实际在网络通讯中&＃xff0c;使用密钥匙的方式并非无懈可击&＃xff0c;如果黑客可以捕捉到用密钥加密的&＃xff0c;用户验证信息&＃xff0c;然后&＃xff0c;做个模拟请求&＃xff0c;向提供WebService的服务器发请求&＃xff0c;还是可以获得请求数据&＃xff01;所以&＃xff0c;我又使用了IP或者域名绑定的方式&＃xff01;毕竟&＃xff0c;WebService不是直接对最终用户提供的&＃xff01;所以&＃xff0c;加上以上这些手段后&＃xff0c;就算有不良企图者想通过非法方式获得WebService提供的服务&＃xff0c;就再费点劲吧&＃xff01; 还有一点安全建议&＃xff0c;就是定期的更换密钥&＃xff0c;在这个例子中&＃xff0c;我用的是对称加密&＃xff0c;加密方和解密方的密钥一致&＃xff01;定期的更换密钥可以让安全性提高一大截&＃xff01; 大家要有更好的方法&＃xff0c;或者建议&＃xff0c;可以留言讨论一下&＃xff01;共同提高&＃xff01; 代码如下&＃xff1a; using System; using System.Security.Cryptography ; using System.Text; using System.IO; namespace SEDO { /// /// SEDO 的摘要说明。 /// SEDO 实现的是用一个封装了4种对称加密方法(Des,Rc2,Rijndael,TripleDes)的组件 /// /// 注意事项&＃xff1a; /// 1:TripleDes和Rijndael加密/解密对象使用16或者24位byte的Key /// 2:Rijndael只能使用16位的初始化向量IV /// 3:Des和Rc2均使用8位Byte的Key和IV /// 4:对需要加密/解密的数据流采用何种方法进行编码/解码&＃xff0c;由调用组件的用户自己决定 /// 5:密钥和初始化向量IV由使用者自己定义 /// 程序员&＃xff1a; 王海波 2003-05-19 hwnanghb&＃64;21cn.com /// //定义加密类型的枚举 public enum EncryptionAlgorithm {Des &＃61; 1, Rc2, Rijndael, TripleDes}; //定义加密类 internal class EncryptTransformer { private EncryptionAlgorithm algorithmID; private byte[] initVec; private byte[] encKey; internal EncryptTransformer(EncryptionAlgorithm algId) { //Save the algorithm being used. algorithmID &＃61; algId; } internal ICryptoTransform GetCryptoServiceProvider(byte[] bytesKey) { //当数据密钥Key或者初始化向量IV为空的时候&＃xff0c;将使用加密对象自动产生的密钥Key或者初始化向量IV switch (algorithmID) { case EncryptionAlgorithm.Des: { DES des &＃61; new DESCryptoServiceProvider(); des.Mode &＃61; CipherMode.CBC; // See if a key was provided if (null &＃61;&＃61; bytesKey) { encKey &＃61; des.Key; } else { des.Key &＃61; bytesKey; encKey &＃61; des.Key; } // See if the client provided an initialization vector if (null &＃61;&＃61; initVec) { // Have the algorithm create one initVec &＃61; des.IV; } else { //No, give it to the algorithm des.IV &＃61; initVec; } return des.CreateEncryptor(); } case EncryptionAlgorithm.TripleDes: { TripleDES des3 &＃61; new TripleDESCryptoServiceProvider(); des3.Mode &＃61; CipherMode.CBC; // See if a key was provided if (null &＃61;&＃61; bytesKey) { encKey &＃61; des3.Key; } else { des3.Key &＃61; bytesKey; encKey &＃61; des3.Key; } // See if the client provided an IV if (null &＃61;&＃61; initVec) { //Yes, have the alg create one initVec &＃61; des3.IV; } else { //No, give it to the alg. des3.IV &＃61; initVec; } return des3.CreateEncryptor(); } case EncryptionAlgorithm.Rc2: { RC2 rc2 &＃61; new RC2CryptoServiceProvider(); rc2.Mode &＃61; CipherMode.CBC; // Test to see if a key was provided if (null &＃61;&＃61; bytesKey) { encKey &＃61; rc2.Key; } else { rc2.Key &＃61; bytesKey; encKey &＃61; rc2.Key; } // See if the client provided an IV if (null &＃61;&＃61; initVec) { //Yes, have the alg create one initVec &＃61; rc2.IV; } else { //No, give it to the alg. rc2.IV &＃61; initVec; } return rc2.CreateEncryptor(); } case EncryptionAlgorithm.Rijndael: { Rijndael rijndael &＃61; new RijndaelManaged(); rijndael.Mode &＃61; CipherMode.CBC; // Test to see if a key was provided if(null &＃61;&＃61; bytesKey) { encKey &＃61; rijndael.Key; } else { rijndael.Key &＃61; bytesKey; encKey &＃61; rijndael.Key; } // See if the client provided an IV if(null &＃61;&＃61; initVec) { //Yes, have the alg create one initVec &＃61; rijndael.IV; } else { //No, give it to the alg. rijndael.IV &＃61; initVec; } return rijndael.CreateEncryptor(); } default: { throw new CryptographicException("Algorithm ID &＃39;&＃39;" &＃43; algorithmID &＃43; "&＃39;&＃39; not supported."); } } } //加密的偏移向量 internal byte[] IV { get{return initVec;} set{initVec &＃61; value;} } //加密的密钥 internal byte[] Key { get{return encKey;} set{encKey &＃61; value;} } } //定义解密类 internal class DecryptTransformer { private EncryptionAlgorithm algorithmID; private byte[] initVec; private byte[] encKey; internal DecryptTransformer(EncryptionAlgorithm deCryptId) { algorithmID &＃61; deCryptId; } //加密的偏移向量 internal byte[] IV { get{return initVec;} set{initVec &＃61; value;} } //加密的密钥 internal byte[] Key { get{return encKey;} set{encKey &＃61; value;} } internal ICryptoTransform GetCryptoServiceProvider(byte[] bytesKey) { //当数据密钥Key或者初始化向量IV为空的时候&＃xff0c;将使用加密对象自动产生的密钥Key或者初始化向量IV switch (algorithmID) { case EncryptionAlgorithm.Des: { DES des &＃61; new DESCryptoServiceProvider(); des.Mode &＃61; CipherMode.CBC; des.Key &＃61; bytesKey; des.IV &＃61; initVec; return des.CreateDecryptor(); } case EncryptionAlgorithm.TripleDes: { TripleDES des3 &＃61; new TripleDESCryptoServiceProvider(); des3.Mode &＃61; CipherMode.CBC; return des3.CreateDecryptor(bytesKey, initVec); } case EncryptionAlgorithm.Rc2: { RC2 rc2 &＃61; new RC2CryptoServiceProvider(); rc2.Mode &＃61; CipherMode.CBC; return rc2.CreateDecryptor(bytesKey, initVec); } case EncryptionAlgorithm.Rijndael: { Rijndael rijndael &＃61; new RijndaelManaged(); rijndael.Mode &＃61; CipherMode.CBC; return rijndael.CreateDecryptor(bytesKey, initVec); } default: { throw new CryptographicException("Algorithm ID &＃39;&＃39;" &＃43; algorithmID &＃43; "&＃39;&＃39; not supported."); } } } //end GetCryptoServiceProvider } //定义加密者类 public class Encryptor { private EncryptTransformer transformer; private byte[] initVec; private byte[] encKey; public Encryptor(EncryptionAlgorithm algId) { transformer &＃61; new EncryptTransformer(algId); } public byte[] Encrypt(byte[] bytesData, byte[] bytesKey,byte[] bytesIV) { //设置流对象用来保存加密数据字节流. MemoryStream memStreamEncryptedData &＃61; new MemoryStream(); transformer.IV&＃61;bytesIV; transformer.Key&＃61;bytesKey; ICryptoTransform transform &＃61; transformer.GetCryptoServiceProvider(bytesKey); CryptoStream encStream &＃61; new CryptoStream(memStreamEncryptedData,transform,CryptoStreamMode.Write); try { //将加密数据写进流对象 encStream.Write(bytesData, 0, bytesData.Length); } catch(Exception ex) { throw new Exception("在数据加密的时候出现错误&＃xff01;错误提示&＃xff1a; \n" &＃43; ex.Message); } //设置加密的Key和初始向量IV属性 encKey &＃61; transformer.Key; initVec &＃61; transformer.IV; encStream.FlushFinalBlock(); encStream.Close(); //Send the data back. return memStreamEncryptedData.ToArray(); } public byte[] IV { get{return initVec;} set{initVec &＃61; value;} } public byte[] Key { get{return encKey;} set{encKey &＃61; value;} } } //定义解密者类 public class Decryptor { private DecryptTransformer transformer; private byte[] initVec; private byte[] encKey; public Decryptor(EncryptionAlgorithm algId) { transformer &＃61; new DecryptTransformer(algId); } public byte[] Decrypt(byte[] bytesData, byte[] bytesKey,byte[] bytesIV) { //设置流对象用来保存解密数据字节流. MemoryStream memStreamDecryptedData &＃61; new MemoryStream(); //Pass in the initialization vector. transformer.IV &＃61; bytesIV; transformer.Key &＃61; bytesKey; ICryptoTransform transform &＃61; transformer.GetCryptoServiceProvider(bytesKey); CryptoStream decStream &＃61; new CryptoStream(memStreamDecryptedData,transform, CryptoStreamMode.Write); try { decStream.Write(bytesData, 0, bytesData.Length); } catch(Exception ex) { throw new Exception("在数据解密的时候出现错误&＃xff01;错误提示&＃xff1a; \n" &＃43; ex.Message); } decStream.FlushFinalBlock(); decStream.Close(); // 返回解密数据. return memStreamDecryptedData.ToArray(); } public byte[] IV { get{return initVec;} set{initVec &＃61; value;} } public byte[] Key { get{return encKey;} set{encKey &＃61; value;} } } //类描述&＃xff1a;文件加密/解密类 public class SecurityFile { private DecryptTransformer Dec_Transformer; //解密转换器 private EncryptTransformer Enc_Transformer; //加密转换器 private byte[] initVec; private byte[] encKey; public SecurityFile(EncryptionAlgorithm algId) { Dec_Transformer &＃61; new DecryptTransformer(algId); Enc_Transformer &＃61; new EncryptTransformer(algId); } //加密的偏移向量 internal byte[] IV { get{return initVec;} set{initVec &＃61; value;} } //加密的密钥 internal byte[] Key { get{return encKey;} set{encKey &＃61; value;} } //功能描述&＃xff1a;加密文件 public void EncryptFile(string inFileName, string outFileName, byte[] bytesKey, byte[] bytesIV) { try { FileStream fin &＃61; new FileStream(inFileName, FileMode.Open, FileAccess.Read); FileStream fout &＃61; new FileStream(outFileName, FileMode.OpenOrCreate, FileAccess.Write); fout.SetLength(0); //Create variables to help with read and write. byte[] bin &＃61; new byte[100]; //This is intermediate storage for the encryption. long rdlen &＃61; 0; //This is the total number of bytes written. long totlen &＃61; fin.Length; //This is the total length of the input file. int len; //This is the number of bytes to be written at a time. Enc_Transformer.IV&＃61;bytesIV; Enc_Transformer.Key&＃61;bytesKey; ICryptoTransform transform &＃61; Enc_Transformer.GetCryptoServiceProvider(bytesKey); CryptoStream encStream &＃61; new CryptoStream(fout, transform, CryptoStreamMode.Write); //Read from the input file, then encrypt and write to the output file. while(rdlen len &＃61; fin.Read(bin, 0, 100); encStream.Write(bin, 0, len); rdlen &＃61; rdlen &＃43; len; } encStream.Close(); fout.Close(); fin.Close(); } catch(Exception ex) { throw new Exception("在文件加密的时候出现错误&＃xff01;错误提示&＃xff1a; \n" &＃43; ex.Message); } } //功能描述&＃xff1a;解密文件 public void DecryptFile(string inFileName, string outFileName, byte[] bytesKey, byte[] bytesIV) { try { FileStream fin &＃61; new FileStream(inFileName, FileMode.Open, FileAccess.Read); FileStream fout &＃61; new FileStream(outFileName, FileMode.OpenOrCreate, FileAccess.Write); fout.SetLength(0); //Create variables to help with read and write. byte[] bin &＃61; new byte[100]; //This is intermediate storage for the encryption. long rdlen &＃61; 0; //This is the total number of bytes written. long totlen &＃61; fin.Length; //This is the total length of the input file. int len; //This is the number of bytes to be written at a time. Dec_Transformer.IV&＃61;bytesIV; Dec_Transformer.Key&＃61;bytesKey; ICryptoTransform transform &＃61; Dec_Transformer.GetCryptoServiceProvider(bytesKey); CryptoStream encStream &＃61; new CryptoStream(fout, transform, CryptoStreamMode.Write); //Read from the input file, then encrypt and write to the output file. while(rdlen len &＃61; fin.Read(bin, 0, 100); encStream.Write(bin, 0, len); rdlen &＃61; rdlen &＃43; len; } encStream.Close(); fout.Close(); fin.Close(); } catch(Exception ex) { throw new Exception("在文件加密的时候出现错误&＃xff01;错误提示&＃xff1a; \n" &＃43; ex.Message); } } } } |
![[译]技术公司十年经验的职场生涯回顾](https://img8.php1.cn/3cdc5/24912/711/b6574f3292f9dc00.png)
京公网安备 11010802041100号