为什么mcrypt_encrypt()将二进制字符放在字符串的末尾?

dav*_*jhp 8 php encryption mcrypt

这是一个加密和解密数据的PHP演示脚本:

<?

$encryptionkey = 'h8y2p9d1';

$card_nbr = "1234";
echo "original card_nbr: $card_nbr <br>\n";

$card_nbr_encrypted=encrypt_data($card_nbr);
echo "card_nbr_encrypted: $card_nbr_encrypted <br>\n";

$card_nbr_decrypted=decrypt_data($card_nbr_encrypted);
echo "card_nbr_decrypted: $card_nbr_decrypted <br>\n";

$len=strlen($card_nbr_decrypted);
echo "length: $len <br>\n";



function encrypt_data($text){
  global $encryptionkey;
  $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
  $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
  $encrypted_text = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $encryptionkey, $text, MCRYPT_MODE_ECB, $iv);
  return $encrypted_text;
}

function decrypt_data($text){
  global $encryptionkey;
  $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
  $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
  $decrypted_text = mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $encryptionkey, $text, MCRYPT_MODE_ECB, $iv);
  return $decrypted_text;
}

?>
Run Code Online (Sandbox Code Playgroud)


输出是:

original card_nbr: 1234
card_nbr_encrypted: vY¨(Z$<§G3-žÃ-Éù3Ý2Ê×rz¨VÛ
card_nbr_decrypted: 1234  (and 28 binary characters)
length: 32 
Run Code Online (Sandbox Code Playgroud)


输出成功解密,但最后添加了28个二进制字符.在查看HTML源代码时,最容易在Firefox中看到这一点.字符串长度32也证明了这一点.有任何想法吗?

在此输入图像描述

dre*_*010 8

填充返回的字符串以n * blocksize使用空字符填充字节\0,这就是您看到额外数据的原因.

如果你运行$card_nbr_decrypted= rtrim($card_nbr_decrypted, "\0");它应该返回实际数据.