Node.js/javascript encrypt AES-128 like mcrypt_ecb in PHP

Question

I have a PHP code that encrypt in AES-128 an ip address:

$ip = "MY_IP";
$secret = "MY_KEY";
$ip = @mcrypt_ecb(MCRYPT_RIJNDAEL_128, $secret, $ip, MCRYPT_ENCRYPT); 
$encrypted = bin2hex($ip);  // encrypted: 2854edb405cb7230ba1f4b87acddba8a

What I need to do is to have the same piece of code but using javascript/node.js. I've searched in the crypto node.js native module but I wasn't able to reproduce the same result:

var crypto = require('crypto');
var ip = "MY_IP";
var secret = "MY_KEY";
var cipher = crypto.createCipher("AES-128-ECB", secret);
var encrypted = cipher.update(ip, 'utf8', 'hex');
encrypted += cipher.final('hex'); // encrypted: e84c06888696edda0139e98fc2c0a8cc

Does someone have an idea ?

What is the connection? Moreover this php code is not mine, so your comment does not help. — Jérémy Pouyet
– Jérémy Pouyet, Commented Jul 17, 2015 at 20:45
The connection is that it's bad practice that will make bugs happen that are hard to track down. If you do any PHP work, avoid the @ operator in virtually all cases. — ceejayoz
– ceejayoz, Commented Jul 17, 2015 at 20:53

Jérémy Pouyet · Accepted Answer · 2015-07-17 14:58:16Z

3

I've posted too quickly, found the solution:

$> npm install mcrypt

And then the code:

var MCrypt = require('mcrypt').MCrypt;
var ip = "MY_IP";
var secret = "MY_KEY"
var desEcb = new MCrypt('rijndael-128', 'ecb');
desEcb.open(secret);
var cipherText = desEcb.encrypt(ip); // cipherText: 2854edb405cb7230ba1f4b87acddba8a

MCrypt github for more encryption tool: https://github.com/tugrul/node-mcrypt

answered Jul 17, 2015 at 14:58

Jérémy Pouyet

2,0296 gold badges30 silver badges57 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

mscdex · Accepted Answer · 2015-07-17 16:22:49Z

3

The problem here is that there are some things that PHP's mcrypt extension (and node's createCipher()) does behind the scenes that you're probably not aware of.

First off, createCipher() accepts a 'password' that is hashed with MD5 to derive the actual key. So instead what you should be using is createCipheriv(), which allows you to pass the key (and IV) directly, like PHP's mcrypt accepts. In ECB mode, IVs are ignored, so you can just pass in an empty string for the IV parameter.

Secondly, PHP's mcrypt will magically pad both your input and your key with null bytes if they are less than the cipher's block size and key size, respectively.

So for AES-128-ECB, we need to make sure the input and key lengths are a multiple of 16 bytes. With all of this knowledge we then find that appropriate code for the built-in crypto module might look something like:

var crypto = require('crypto');

function makePadded(str) {
  var buf;
  var len = str.length;
  if (str.length % 16)
    len = str.length + (16 - str.length % 16);
  buf = new Buffer(len);
  buf.fill(0);
  buf.write(str, 0, str.length);
  return buf;
}

var ip = makePadded('MY_IP');
var secret = makePadded('MY_KEY');
var cipher = crypto.createCipheriv("AES-128-ECB", secret, '');
var encrypted = cipher.update(ip, 'binary', 'hex');
encrypted += cipher.final('hex');
// Slice off at 16 bytes to match the input length
encrypted = encrypted.slice(0, 32);

console.log(encrypted);

One last thing that might be worth mentioning is that MCRYPT_RIJNDAEL_128 in PHP can be used to do 128, 192, or 256 bit encryption. So in PHP if 0 < keylen <= 16 then 128-bit encryption will be used, 192-bit encryption will be used if 16 < keylen <= 24 and 256-bit encryption will be used if 24 < keylen <= 32. However in node, you will need to adjust the cipher name appropriately, as node does not do the kind of "automatic adjustment" that PHP does.

edited Jul 17, 2015 at 16:22

answered Jul 17, 2015 at 15:27

mscdex

107k15 gold badges201 silver badges159 bronze badges

4 Comments

Jérémy Pouyet Over a year ago

Well, I've learn many thing with your answer. Meanwhile I got an error on var cipher = crypto.createCipheriv("AES-128-ECB", secret, ''); ==> crypto.js:346 this._binding.initiv(cipher, toBuf(key), toBuf(iv)); Error: error:0607A082:digital envelope routines:EVP_CIPHER_CTX_set_key_length:invalid key length

mscdex Over a year ago

What is the size of your key? Also is it hex encoded already?

Jérémy Pouyet Over a year ago

It is 32 and encoded in utf-8. Moreover, what solution do you find the best between yours and the use of the mcrypt package that I've found on npm ?

mscdex Over a year ago

If your key size is 32 bytes long, then you should be using AES-256-ECB instead. You'll also need to change the 16 to 32 in makePadded and slice(0, 32) to slice(0, 64).

Jaromanda X · Accepted Answer · 2015-07-17 14:51:26Z

0

in nodejs - password must be a 'binary' encoded string or a buffer. in PHP, the deprecated @mcrypt_ecb expects a key to be a string

answered Jul 17, 2015 at 14:51

Jaromanda X

57.1k6 gold badges82 silver badges96 bronze badges

1 Comment

Jérémy Pouyet Over a year ago

Maybe passing the password in binary will work but I prefer to use the package I found, it doesn't use native crypto module that is unstable

Collectives™ on Stack Overflow

Node.js/javascript encrypt AES-128 like mcrypt_ecb in PHP

3 Answers 3

Comments

4 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

4 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related