Question

我使用此功能使用openssl AES 256 CBC加密数据：

int encryptAES(unsigned char *plaintext, int plaintext_len, unsigned char *key,
  unsigned char *iv, unsigned char *ciphertext)
{
  EVP_CIPHER_CTX *ctx;

  int len;

  int ciphertext_len;

  /* Create and initialise the context */
  if(!(ctx = EVP_CIPHER_CTX_new())) return handleErrors();

  /* Initialise the encryption operation. IMPORTANT - ensure you use a key
   * and IV size appropriate for your cipher
   * In this example we are using 256 bit AES (i.e. a 256 bit key). The
   * IV size for *most* modes is the same as the block size. For AES this
   * is 128 bits */
  if(1 != EVP_EncryptInit_ex(ctx, EVP_aes_256_cbc(), NULL, key, iv))
    return handleErrors();

  /* Provide the message to be encrypted, and obtain the encrypted output.
   * EVP_EncryptUpdate can be called multiple times if necessary
   */

  if(1 != EVP_EncryptUpdate(ctx, ciphertext, &len, plaintext, plaintext_len))
    return handleErrors();
  ciphertext_len = len;

  /* Finalise the encryption. Further ciphertext bytes may be written at
   * this stage.
   */

  if(1 != EVP_EncryptFinal_ex(ctx, ciphertext + len, &len)) return handleErrors();
  ciphertext_len += len;

  /* Clean up */
  EVP_CIPHER_CTX_free(ctx);

  return ciphertext_len;
}

我想为此函数提供固定大小的缓冲区ciphertext，如何计算加密邮件的最大可能长度（ciphertext）

感谢。

Answer 1

假设PKCS＃7填充（这是OpenSSL ECB和CBC模式的默认值），加密长度将为：

plaintext_len + block_size - (plaintext_len % block_size)

，其中

block_size = 16

用于AES。最终结果始终是block_size的倍数。

计算AES加密消息的最大长度

1 个答案: