在java中加密字符串，在node.js中解密，错误：解密失败

我正在尝试用 java 加密一个字符串，将其发送到我的 node.js 服务器，然后解密。但是，当我尝试执行此操作时，尝试解密时会不断出现错误。

Java加密：

String privateKey = "someprivatekey";
String data = "dataToEncrypt";

DESKeySpec keySpec = new DESKeySpec(privateKey.getBytes("UTF-8"));
SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
SecretKey key = keyFactory.generateSecret(keySpec);

byte[] dataToBytes = data.getBytes("UTF-8");      

Cipher cipher = Cipher.getInstance("DES"); 
cipher.init(Cipher.ENCRYPT_MODE, key);

// send this string to server 
String encryptedStr = Base64.encodeToString(cipher.doFinal(dataToBytes), 0);

Node.js解密：

var privateKey = 'someprivatekey';
var decipher = crypto.createDecipher('des', privateKey);
var dec = decipher.update(textToDecipher, 'base64', 'utf8'); 
dec += decipher.final('utf8'); 
console.log('deciphered: ' + dec);

但是，我在 decipher.final() 行的 node.js 端收到此错误：

TypeError: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

我尝试解码字符串并在节点端使用缓冲区，但它似乎也不起作用，我得到了同样的错误解密错误。

var buffer = new Buffer(textToDecipher, 'base64');
var decipher = crypto.createDecipher('des', privateKey);
var dec = Buffer.concat([decipher.update(buffer), decipher.final()]);

有什么想法我可能做错了什么吗？

当您在节点服务器上创建解密对象时，您将传递一个password而不是实际的钥匙。为了指定实际的密钥，您需要使用crypto.createDecipheriv()，但这需要实际的IV（此示例使用 8 个空字节，但不建议将其用于真正的加密；维基百科上的初始化向量 https://en.wikipedia.org/wiki/Initialization_vector)

我能够通过显式指定填充、块模式和 IV 来使您的示例正常工作：

String privateKey = "someprivatekey";
String data = "dataToEncrypt";

DESKeySpec keySpec = new DESKeySpec(privateKey.getBytes("UTF-8"));
SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
SecretKey key = keyFactory.generateSecret(keySpec);

byte[] dataToBytes = data.getBytes("UTF-8");      

Cipher cipher = Cipher.getInstance("DES/CBC/PKCS5Padding"); 
cipher.init(Cipher.ENCRYPT_MODE, key, new IvParameterSpec(new byte[8]));

// send this string to server 
String encryptedStr = Base64.encodeToString(cipher.doFinal(dataToBytes), 0);

解密版本还明确指定了块模式（des-cbc），并将密钥文本正确截断为前 8 个字节：

var privateKey = 'someprivatekey';
var textToDecipher = '9Y8GTNxhQkKSIm5pmH91VA=='; // Text "dataToEncrypt" encrypted using DES using CBC and PKCS5 padding with the key "someprivatekey"

var iv = new Buffer(8);
iv.fill(0);

var decipher = crypto.createDecipheriv('des-cbc', privateKey.substr(0,8), iv);
var dec = decipher.update(textToDecipher, 'base64', 'utf8');
dec += decipher.final('utf8');
console.log('deciphered: ' + dec);