PBE encryption shows different output on IBMJCE and SunJCE providers

> byte[] abyte0 =

> = pbeCipher.doFinal(password.getBytes());

>

> String encoded = new String(abyte0, "UTF-8");

>

An example of just about the most common problem posted on this forum. This about as wrong as you can get. It is almost always wrong to convert arbitrary byte to a String, even with utf-8, because not all byte sequences create valid characters and it almost certainly will not be reversible.

If you must have a String version of encrypted bytes then use Base64 or Hex encoding.

sabre150a at 2007-7-14 16:36:02 >

Plz consider this code...

I have removed encoding related snipplets from the code.

import java.security.*;

import javax.crypto.*;

import javax.crypto.spec.*;

import java.io.*;

public class PbeEncryption{

public static void main(String args[]) throws Exception{

String MYPBEALG = "PBEWithSHA1AndDESede" ;

byte[] salt = new byte[] {103 , -73 , -94 , 12 , -73 , -33 , 1 , 109};

int count = 10;

char[] pwd = {103 , 123 , 84 , 92 , 63 , 83 , 40 , 100};

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

PBEKeySpec pbeKeySpec = new PBEKeySpec(pwd);

SecretKeyFactory keyFac = SecretKeyFactory.getInstance(MYPBEALG);

SecretKey pbeKey = keyFac.generateSecret(pbeKeySpec);

MYPBEALG = MYPBEALG + "/CBC/PKCS5PADDING";

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

pbeCipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);

byte[] abyte0 = pbeCipher.doFinal(new byte[]{103 , 23 , 84 , 92 , 23 , 83 , 10 , 100});

System.out.println("********* E N C O D E D B Y T E S **********");

for(int i=0; i<abyte0.length;i++){

System.out.print((int)abyte0 + " ");

}

System.out.println("********************************************");

}

}>

Mkarattua at 2007-7-14 16:36:02 >

I can run this on Sun JDK but until I can find out how to download the IBM unlimted strength policy files I cannot run it on IBM!

import java.util.*;

import javax.crypto.*;

import javax.crypto.spec.*;

public class PbeEncryption

{

public static void main(String args[]) throws Exception

{

String MYPBEALG = "PBEWithSHA1AndDESede" ;

byte[] salt = new byte[] {103 , -73 , -94 , 12 , -73 , -33 , 1 , 109};

int count = 10;

char[] pwd = {103 , 123 , 84 , 92 , 63 , 83 , 40 , 100};

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

PBEKeySpec pbeKeySpec = new PBEKeySpec(pwd);

SecretKeyFactory keyFac = SecretKeyFactory.getInstance(MYPBEALG);

SecretKey pbeKey = keyFac.generateSecret(pbeKeySpec);

MYPBEALG = MYPBEALG + "/CBC/PKCS5PADDING";

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

pbeCipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);

byte[] abyte0 = pbeCipher.doFinal(new byte[]{103 , 23 , 84 , 92 , 23 , 83 , 10 , 100});

System.out.println("********* E N C O D E D B Y T E S **********");

System.out.println(Arrays.toString(abyte0));

System.out.println("********************************************");

}

}

produces

********* E N C O D E D B Y T E S **********

[-48, 0, 75, -35, -18, 52, -121, -30, -7, -120, 11, 14, 23, -8, 40, -42]

********************************************

sabre150a at 2007-7-14 16:36:02 >

I am now convinced you have a found a real problem. If I use MD5 rather than SHA1 then the two give the same results

Java vendor : IBM Corporation

Algorithm: PBEWithMD5AndTripleDES

class com.ibm.crypto.provider.PBEKey [103, 123, 84, 92, 63, 83, 40, 100]

********* E N C R Y P T E DB Y T E S **********

[-104, 58, -113, -77, 58, -8, -92, 82, 76, 44, 126, 90, 62, 34, 120, -73]

**************************************************

Java vendor : Sun Microsystems Inc.

Algorithm: PBEWithMD5AndTripleDES

class com.sun.crypto.provider.PBEKey [103, 123, 84, 92, 63, 83, 40, 100]

********* E N C R Y P T E DB Y T E S **********

[-104, 58, -113, -77, 58, -8, -92, 82, 76, 44, 126, 90, 62, 34, 120, -73]

**************************************************

sabre150a at 2007-7-14 16:36:02 >

> Did u change anything otherthan Algorithm in the

> code? I am getting java.security.InvalidKeyException:

> Illegal key size on Sun JDK.

Quite a bit of simplification (my view anyway)

import java.util.*;

import javax.crypto.*;

import javax.crypto.spec.*;

public class PbeEncryption

{

public static void main(String args[]) throws Exception

{

String MYPBEALG = "PBEWithMD5AndTripleDES" ;

System.out.println("Java vendor : " + System.getProperty("java.vendor"));

System.out.println("Algorithm: " + MYPBEALG);

byte[] salt = new byte[] {103 , -73 , -94 , 12 , -73 , -33 , 1 , 109};

int count = 10;

char[] pwd = {103 , 123 , 84 , 92 , 63 , 83 , 40 , 100};

PBEKeySpec pbeKeySpec = new PBEKeySpec(pwd);

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

SecretKey pbeKey = SecretKeyFactory.getInstance(MYPBEALG).generateSecret(pbeKeySpec);

System.out.println(pbeKey.getClass() + " " + Arrays.toString(pbeKey.getEncoded()));

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

pbeCipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);

byte[] abyte0 = pbeCipher.doFinal(new byte[]{103 , 23 , 84 , 92 , 23 , 83 , 10 , 100});

System.out.println("********* E N C R Y P T E DB Y T E S **********");

System.out.println(Arrays.toString(abyte0));

System.out.println("**************************************************");

}

}

sabre150a at 2007-7-14 16:36:02 >

> My requirement is to decrypt a file on IBM JDK which

> is encrypted on Sun JDK. I couldnt do it even with

> PBEWithMD5AndTripleDES, though both shows same output

> while encryption...

So what does your decryption code look like and how are you shipping teh encrypted data from the encrypting process to the decrypting process?

sabre150a at 2007-7-14 16:36:02 >

I have not problem encryption with one an ddecryption with the other using algorithm "PBEWithMD5AndTripleDES".

I use this to encrypt for both IBM and Sun

import java.util.*;

import javax.crypto.*;

import javax.crypto.spec.*;

import java.io.*;

public class PbeEncryption

{

public static void main(String args[]) throws Exception

{

String MYPBEALG = "PBEWithMD5AndTripleDES" ;

String dataToEncrypt = "The quick brown fox jumps over the lazy dog.";

System.out.println("Java vendor : " + System.getProperty("java.vendor"));

System.out.println("Algorithm: " + MYPBEALG);

byte[] salt = new byte[] {103 , -73 , -94 , 12 , -73 , -33 , 1 , 109};

int count = 10;

char[] pwd = {103 , 123 , 84 , 92 , 63 , 83 , 40 , 100};

PBEKeySpec pbeKeySpec = new PBEKeySpec(pwd);

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

SecretKey pbeKey = SecretKeyFactory.getInstance(MYPBEALG).generateSecret(pbeKeySpec);

System.out.println(pbeKey.getClass() + " " + Arrays.toString(pbeKey.getEncoded()));

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

pbeCipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);

byte[] abyte0 = pbeCipher.doFinal(dataToEncrypt.getBytes("UTF-8"));

System.out.println("********* E N C R Y P T E DB Y T E S **********");

System.out.println(Arrays.toString(abyte0));

System.out.println("**************************************************");

DataOutputStream dostrm = new DataOutputStream(new FileOutputStream(System.getProperty("user.home") + "/zz"));

dostrm.writeShort(abyte0.length);

dostrm.write(abyte0);

dostrm.flush();

dostrm.close();

}

}

and this to decrypt using IBM or Sun

import java.util.*;

import javax.crypto.*;

import javax.crypto.spec.*;

import java.io.*;

public class PbeDecryption

{

public static void main(String args[]) throws Exception

{

String MYPBEALG = "PBEWithMD5AndTripleDES" ;

System.out.println("Java vendor : " + System.getProperty("java.vendor"));

System.out.println("Algorithm: " + MYPBEALG);

byte[] salt = new byte[] {103 , -73 , -94 , 12 , -73 , -33 , 1 , 109};

int count = 10;

char[] pwd = {103 , 123 , 84 , 92 , 63 , 83 , 40 , 100};

PBEKeySpec pbeKeySpec = new PBEKeySpec(pwd);

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

SecretKey pbeKey = SecretKeyFactory.getInstance(MYPBEALG).generateSecret(pbeKeySpec);

System.out.println(pbeKey.getClass() + " " + Arrays.toString(pbeKey.getEncoded()));

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

pbeCipher.init(Cipher.DECRYPT_MODE, pbeKey, pbeParamSpec);

DataInputStream distrm = new DataInputStream(new FileInputStream(System.getProperty("user.home") + "/zz"));

int len = distrm.readShort();

byte[] encryptedBytes = new byte[len];

distrm.readFully(encryptedBytes);

distrm.close();

byte[] decryptedBytes = pbeCipher.doFinal(encryptedBytes);

System.out.println(new String(decryptedBytes,"UTF-8"));

}

}

Note that I do not convert encrypted data to Java Strings.

sabre150a at 2007-7-21 8:53:27 >