I need to implement the same encryption/decryption application on Java and plsql(DBMS_CRYPTO for Oracle 10g).
The both implementation are working fine but the pb here is that I am getting different output for the encryption of the same plain text. Below the both code used for the encryption/decryption process (Java and PLSQL).
I used the same encryption algorithm "AES/CBC/PKCS5Padding" for DBMS_CRYPTO and Java.The problem here is that I am getting different output for the encryption of the same plain text.
import java.security.*;
import javax.crypto.*;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import sun.misc.*;
import org.apache.commons.codec.binary.Hex;
public class AESencrp {
private static final String ALGO = "AES/CBC/PKCS5Padding";
private static final byte[] keyValue = "MyEncryptionKey1".getBytes();
private static Key key;
private static Cipher decryptor;
private static Cipher encryptor;
public static void init() throws Exception
{
key = generateKey();
encryptor = Cipher.getInstance(ALGO);
IvParameterSpec iv = new IvParameterSpec(Hex.decodeHex("12345678901234567890123456789012".toCharArray()));
decryptor=Cipher.getInstance(ALGO);
encryptor.init(Cipher.ENCRYPT_MODE, key,iv);
decryptor.init(Cipher.DECRYPT_MODE, key,iv);
}
public static String encrypt(String Data) throws Exception {
byte[] encVal = encryptor.doFinal(Data.getBytes());
String encryptedValue = new BASE64Encoder().encode(encVal);
return encryptedValue;
}
public static String decrypt(String encryptedData) throws Exception {
byte[] decordedValue = new BASE64Decoder().decodeBuffer(encryptedData);
byte[] decValue = decryptor.doFinal(decordedValue);
String decryptedValue = new String(decValue);
return decryptedValue;
}
private static Key generateKey() throws Exception {
if (key==null)
key = new SecretKeySpec(keyValue, "AES");
return key;
}
public static void main(String[] args) throws Exception {
init();
String password = "mypassword";
String passwordEnc = AESencrp.encrypt(password);
String passwordDec = AESencrp.decrypt(passwordEnc);
System.out.println("Plain Text : " + password);
System.out.println("Encrypted Text : " + passwordEnc);
System.out.println("Decrypted Text : " + passwordDec);
}
}
- Java execution :
Plain Text : mypassword
Encrypted Text : +pvG30k4/KFkeim47tslFQ==
Decrypted Text : mypassword
CREATE OR REPLACE PACKAGE BODY SYSADM.enc_dec
AS
encryption_type PLS_INTEGER :=DBMS_CRYPTO.AES_CBC_PKCS5;
encryption_key RAW (32) := UTL_RAW.cast_to_raw('MyEncryptionKey1');
FUNCTION encrypt (p_plainText VARCHAR2) RETURN RAW DETERMINISTIC
IS
encrypted_raw RAW (2000);
BEGIN
encrypted_raw := DBMS_CRYPTO.ENCRYPT
(
src => UTL_RAW.CAST_TO_RAW (p_plainText),
typ => encryption_type,
key => encryption_key,
iv => hextoraw('12345678901234567890123456789012')
);
RETURN encrypted_raw;
END encrypt;
FUNCTION decrypt (p_encryptedText RAW) RETURN VARCHAR2 DETERMINISTIC
IS
decrypted_raw RAW (2000);
BEGIN
decrypted_raw := DBMS_CRYPTO.DECRYPT
(
src => p_encryptedText,
typ => encryption_type,
key => encryption_key,
iv => hextoraw('12345678901234567890123456789012')
);
RETURN (UTL_RAW.CAST_TO_VARCHAR2 (decrypted_raw));
END decrypt;
END;
/
- PlSQL Execution:
select enc_dec.encrypt('mypassword') encrypted from dual;
FA9BC6DF4938FCA1647A29B8EEDB2515
select enc_dec.decrypt(enc_dec.encrypt('mypassword')) decrypted from dual;
mypassword
Java -->+pvG30k4/KFkeim47tslFQ==
PLSQL -->FA9BC6DF4938FCA1647A29B8EEDB2515
Can you please advise why we have this difference between the two encrypted output? there is a programming language dependency for the AES encrytion??
