C# 用于RijndaelManaged的AES OFB加密

我需要在OFB模式下通过加密消息从一个C#应用程序通信到另一个应用程序。我知道，

RijndaelManaged

不支持AES OFB模式。有没有比我更有经验的人知道使用OFB模式加密/解密的任何其他方法？

以下流通过使用零反馈CBC密码流生成的密钥流实现OFB

public class OFBStream : Stream
{
    private const int BLOCKS = 16;
    private const int EOS = 0; // the goddess of dawn is found at the end of the stream

    private Stream parent;
    private CryptoStream cbcStream;
    private CryptoStreamMode mode;
    private byte[] keyStreamBuffer;
    private int keyStreamBufferOffset;
    private byte[] readWriteBuffer;

    public OFBStream (Stream parent, SymmetricAlgorithm algo, CryptoStreamMode mode)
    {
        if (algo.Mode != CipherMode.CBC)
            algo.Mode = CipherMode.CBC;
        if (algo.Padding != PaddingMode.None)
            algo.Padding = PaddingMode.None;
        this.parent = parent;
        this.cbcStream = new CryptoStream (new ZeroStream (), algo.CreateEncryptor (), CryptoStreamMode.Read);
        this.mode = mode;
        keyStreamBuffer = new byte[algo.BlockSize * BLOCKS];
        readWriteBuffer = new byte[keyStreamBuffer.Length];
    }

    public override int Read (byte[] buffer, int offset, int count)
    {
        if (!CanRead) {
            throw new NotSupportedException ();
        }

        int toRead = Math.Min (count, readWriteBuffer.Length);
        int read = parent.Read (readWriteBuffer, 0, toRead);
        if (read == EOS)
            return EOS;

        for (int i = 0; i < read; i++) {
            // NOTE could be optimized (branches for each byte)
            if (keyStreamBufferOffset % keyStreamBuffer.Length == 0) {
                FillKeyStreamBuffer ();
                keyStreamBufferOffset = 0;
            }

            buffer [offset + i] = (byte)(readWriteBuffer [i]
                ^ keyStreamBuffer [keyStreamBufferOffset++]);
        }

        return read;
    }

    public override void Write (byte[] buffer, int offset, int count)
    {
        if (!CanWrite) {
            throw new NotSupportedException ();
        }

        int readWriteBufferOffset = 0;
        for (int i = 0; i < count; i++) {
            if (keyStreamBufferOffset % keyStreamBuffer.Length == 0) {
                FillKeyStreamBuffer ();
                keyStreamBufferOffset = 0;
            }

            if (readWriteBufferOffset % readWriteBuffer.Length == 0) {
                parent.Write (readWriteBuffer, 0, readWriteBufferOffset);
                readWriteBufferOffset = 0;
            }

            readWriteBuffer [readWriteBufferOffset++] = (byte)(buffer [offset + i]
                ^ keyStreamBuffer [keyStreamBufferOffset++]);
        }

        parent.Write (readWriteBuffer, 0, readWriteBufferOffset);
    }

    private void FillKeyStreamBuffer ()
    {
        int read = cbcStream.Read (keyStreamBuffer, 0, keyStreamBuffer.Length);
        // NOTE undocumented feature
        // only works if keyStreamBuffer.Length % blockSize == 0
        if (read != keyStreamBuffer.Length)
            throw new InvalidOperationException ("Implementation error: could not read all bytes from CBC stream");
    }

    public override bool CanRead {
        get { return mode == CryptoStreamMode.Read; }
    }

    public override bool CanWrite {
        get { return mode == CryptoStreamMode.Write; }
    }

    public override void Flush ()
    {
        // should never have to be flushed, implementation empty
    }

    public override bool CanSeek {
        get { return false; }
    }

    public override long Seek (long offset, System.IO.SeekOrigin origin)
    {
        throw new NotSupportedException ();
    }

    public override long Position {
        get { throw new NotSupportedException (); }
        set { throw new NotSupportedException (); }
    }

    public override long Length {
        get { throw new NotSupportedException (); }
    }

    public override void SetLength (long value)
    {
        throw new NotSupportedException ();
    }

}

你可以像我对测试向量一样使用它：

// NIST CAVP test vector F.4.1: OFB-AES128.Encrypt from NIST SP 800-38A

RijndaelManaged aes = new RijndaelManaged ();
aes.Key = FromHex ("2b7e151628aed2a6abf7158809cf4f3c");
aes.IV = FromHex ("000102030405060708090A0B0C0D0E0F");
MemoryStream testVectorStream = new MemoryStream (FromHex (
    "6bc1bee22e409f96e93d7e117393172aae2d8a571e03ac9c9eb76fac45af8e5130c81c46a35ce411e5fbc1191a0a52eff69f2445df4f9b17ad2b417be66c3710"));
OFBStream testOFBStream = new OFBStream (testVectorStream, aes, CryptoStreamMode.Read);
MemoryStream cipherTextStream = new MemoryStream ();
testOFBStream.CopyTo (cipherTextStream);
Console.WriteLine (ToHex (cipherTextStream.ToArray ()));

---

---

请注意，流处理尚未经过全面测试。

您能否明确说明您的平台要求？似乎需要注意的是，您不需要在标题中提及语言，但应该使用标记来表示。否则这些标签后面的人不会被提醒。CipherMode.OFB对所有框架都有效，我将“其他版本”更改为“.NET Framework 1.1”，并列出了OFB。但当使用它时，我得到类似于“指定的密码模式对此算法无效”的错误，我使用VS 2013，目标框架设置为“.NET Framework 4.5”，我还得到“System.Security.Cryptography.CryptographyException”-“发生了内部错误”。另外，请参阅有关我的C#技能的任何评论。这不是我的主要语言。请注意，并非所有参数在使用前都经过了充分测试。感谢您的工作，您介意提供一些关于如何使用这个新类的代码吗？如何调用它，传递密钥，IV和明文，在我的情况下，所有这些都是字节[]。你如何处理这些？如果您需要一个ToHex/FromHex实现，它被窃取并重命名。几天来，我的代码与解决方案非常接近（我尝试以自己的方式实现），现在我注意到0的字节[]太短，我发送了3个字节，因为这是我计划加密的文本的长度。我发送了16字节的0，现在一切正常。非常感谢你的帮助。是的，这就是加密的问题。如果它不起作用，它通常只会产生垃圾。请注意，NIST测试向量还包含密钥流（中间）信息。查阅官方文档/测试向量永远不会有什么坏处。很高兴能帮上忙，实施起来很有趣。

// NIST CAVP test vector F.4.1: OFB-AES128.Encrypt from NIST SP 800-38A

RijndaelManaged aes = new RijndaelManaged ();
aes.Key = FromHex ("2b7e151628aed2a6abf7158809cf4f3c");
aes.IV = FromHex ("000102030405060708090A0B0C0D0E0F");
MemoryStream testVectorStream = new MemoryStream (FromHex (
    "6bc1bee22e409f96e93d7e117393172aae2d8a571e03ac9c9eb76fac45af8e5130c81c46a35ce411e5fbc1191a0a52eff69f2445df4f9b17ad2b417be66c3710"));
OFBStream testOFBStream = new OFBStream (testVectorStream, aes, CryptoStreamMode.Read);
MemoryStream cipherTextStream = new MemoryStream ();
testOFBStream.CopyTo (cipherTextStream);
Console.WriteLine (ToHex (cipherTextStream.ToArray ()));