我的任务是用运行 PHP的东西替换遗留的java系统.

我在用PHP代码替换java加密时遇到了一点困难.

cipherAlgorythm = "PBEWIThMD5AndDES";                           
cipherTransformation = "PBEWithMD5AndDES/CBC/PKCS5Padding";     
PBEParameterSPEc ps = new javax.crypto.spec.PBEParameterSpec(salt,iterations);
SecretKeyFactory kf = SecretKeyFactory.getInstance(cipherAlgorythm);
SecretKey key = kf.generateSecret(new javax.crypto.spec.PBEKeySpec(password.tocharArray()));
Cipher encryptCipher = Cipher.getInstance(cipherTransformation);   
encryptCipher.init(Cipher.ENCRYPT_MODE,key,ps);
byte[] output = encryptCipher.doFinal("This is a test string".getBytes("UTF-8"));

似乎是Java的胆量

在PHP我正在做

$hashed_key = pbkdf2('md5',$this->key,$this->salt,$this->reps,<GUESS 1>,TRUE);
$output = mcrypt_encrypt(MCRYPT_DES,$hashed_key,"This is a test string",MCRYPT_MODE_CBC,<GUESS 2>);

pbkDF2起自here.

所以< GUESS 1>是关键尺寸和< GUESS 2>是IV.我玩过这些无济于事.有没有人对这些价值观有所建议？据我所知,加密本身应该是可移植的,但我不确定某些Java方法会发生什么.

看起来java正在某处创建一个IV,但我不明白如何或在哪里.

有关

Decrypt ( with PHP ) a Java encryption ( PBEWithMD5AndDES )

function pkcs5_pad ($text,$blocksize) 
{ 
    $pad = $blocksize - (strlen($text) % $blocksize); 
    return $text . str_repeat(chr($pad),$pad); 
}