Home Backend Development PHP Problem How to solve php aes cbc decryption garbled code

How to solve php aes cbc decryption garbled code

Apr 11, 2023 am 10:30 AM

In PHP, it is very common to use AES CBC mode for encryption and decryption. However, when using AES CBC mode to decrypt, you may encounter garbled characters. This problem is very common, but easy to solve. In this article, I will introduce how to normally decrypt AES CBC encrypted data through PHP and avoid garbled characters.

1. Problem description

In PHP, we can use openssl_encrypt and openssl_decrypt functions to perform encryption and decryption operations respectively. For example, the following code uses AES CBC mode to encrypt data:

$key = '1234567890123456';
$data = 'hello world';
$iv = '1234567890123456';

$encrypted = openssl_encrypt($data, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv);
Copy after login

where $key is the key, $data is the data to be encrypted, and $iv is the initial vector. After encryption, the $encrypted variable will get the encrypted data. Now, we need to decrypt it:

$key = '1234567890123456';
$encrypted = 'soLPpFUpwJdVEaYpuu6zRg==';
$iv = '1234567890123456';

$decrypted = openssl_decrypt($encrypted, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv);
echo $decrypted;
Copy after login

However, after running the above code, you may get the following output:

纭洏鍥?J    鍗虫槑涓?
Copy after login

This is a piece of gibberish, not the original data "hello world ". This is because the decryption function has strict limits on the length of the input parameters, so if the length of the data to be decrypted is incorrect, garbled characters will occur.

2. Solution

In order to solve this problem, we need to understand some basic knowledge of AES CBC mode.

In AES CBC mode, both encryption and decryption require an initialization vector (Initialization Vector, IV). This initial vector needs to use the same value during encryption and decryption, otherwise it will cause data errors during decryption.

The length of the initialization vector must be equal to the block size required by the encryption algorithm. For example, when using 128-bit AES CBC mode, the initialization vector must be 16 bytes long (128 bits / 8 bits). If this requirement is not met, garbled characters or other problems will occur during decryption.

Therefore, we need to check whether the length of the input parameter meets the requirements. When the length is illegal, padding operation is required. Padding can be done before decryption to ensure that the length of the input data is the same as that used when encrypting.

In view of the above problems and solutions, we can modify the original code to adapt to the requirements of AES CBC mode, as shown below:

$key = '1234567890123456';
$encrypted = 'soLPpFUpwJdVEaYpuu6zRg==';
$iv = '1234567890123456';

// 检查初始向量长度是否正确
if (strlen($iv) != 16) {
    echo 'Error: IV length is not valid!';
    exit;
}

// 检查输入参数长度是否正确
$decrypted = openssl_decrypt($encrypted, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv);
if ($decrypted === false) {
    // 进行填充操作
    $padded_data = $encrypted . str_repeat(chr(16), 16 - (strlen($encrypted) % 16));
    $decrypted = openssl_decrypt($padded_data, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv);
}

echo $decrypted;
Copy after login

In the above code, first check whether the initial vector length is correct. If it is incorrect, an error is output and the program exits. Next, the input data length before decryption is checked. If the length is incorrect, padding is performed to ensure that the data length meets the requirements.

In this way, garbled characters can be avoided during decryption.

3. Summary

When using AES CBC mode for encryption and decryption, if the length of the input parameter is incorrect, decryption may fail and garbled characters may appear. To avoid this problem, we need to check the length of the input parameters and perform necessary padding.

The above is my solution to the problem of decrypting garbled characters in PHP AES CBC mode. Hope it helps.

The above is the detailed content of How to solve php aes cbc decryption garbled code. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

PHP 8 JIT (Just-In-Time) Compilation: How it improves performance. PHP 8 JIT (Just-In-Time) Compilation: How it improves performance. Mar 25, 2025 am 10:37 AM

PHP 8's JIT compilation enhances performance by compiling frequently executed code into machine code, benefiting applications with heavy computations and reducing execution times.

OWASP Top 10 PHP: Describe and mitigate common vulnerabilities. OWASP Top 10 PHP: Describe and mitigate common vulnerabilities. Mar 26, 2025 pm 04:13 PM

The article discusses OWASP Top 10 vulnerabilities in PHP and mitigation strategies. Key issues include injection, broken authentication, and XSS, with recommended tools for monitoring and securing PHP applications.

PHP Secure File Uploads: Preventing file-related vulnerabilities. PHP Secure File Uploads: Preventing file-related vulnerabilities. Mar 26, 2025 pm 04:18 PM

The article discusses securing PHP file uploads to prevent vulnerabilities like code injection. It focuses on file type validation, secure storage, and error handling to enhance application security.

PHP Encryption: Symmetric vs. asymmetric encryption. PHP Encryption: Symmetric vs. asymmetric encryption. Mar 25, 2025 pm 03:12 PM

The article discusses symmetric and asymmetric encryption in PHP, comparing their suitability, performance, and security differences. Symmetric encryption is faster and suited for bulk data, while asymmetric is used for secure key exchange.

PHP Authentication & Authorization: Secure implementation. PHP Authentication & Authorization: Secure implementation. Mar 25, 2025 pm 03:06 PM

The article discusses implementing robust authentication and authorization in PHP to prevent unauthorized access, detailing best practices and recommending security-enhancing tools.

How do you retrieve data from a database using PHP? How do you retrieve data from a database using PHP? Mar 20, 2025 pm 04:57 PM

Article discusses retrieving data from databases using PHP, covering steps, security measures, optimization techniques, and common errors with solutions.Character count: 159

PHP CSRF Protection: How to prevent CSRF attacks. PHP CSRF Protection: How to prevent CSRF attacks. Mar 25, 2025 pm 03:05 PM

The article discusses strategies to prevent CSRF attacks in PHP, including using CSRF tokens, Same-Site cookies, and proper session management.

What is the purpose of prepared statements in PHP? What is the purpose of prepared statements in PHP? Mar 20, 2025 pm 04:47 PM

Prepared statements in PHP enhance database security and efficiency by preventing SQL injection and improving query performance through compilation and reuse.Character count: 159

See all articles