Python进行CBC加密的完整流程

pip install pycryptodome

from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad
from Crypto.Random import get_random_bytes
import base64

# 密钥管理：推荐使用密钥管理系统而非硬编码
key = get_random_bytes(16)  # AES-128

def aes_cbc_encrypt(plaintext):
    """CBC模式加密函数"""
    iv = get_random_bytes(AES.block_size)  # 随机生成IV
    cipher = AES.new(key, AES.MODE_CBC, iv)
    padded_data = pad(plaintext.encode(), AES.block_size)
    ciphertext = cipher.encrypt(padded_data)
    # 返回IV+密文，base64编码便于传输
    return base64.b64encode(iv + ciphertext).decode()

def aes_cbc_decrypt(ciphertext):
    """CBC模式解密函数"""
    decoded = base64.b64decode(ciphertext)
    iv = decoded[:AES.block_size]  # 提取IV
    cipher = AES.new(key, AES.MODE_CBC, iv)
    decrypted = cipher.decrypt(decoded[AES.block_size:])
    return unpad(decrypted, AES.block_size).decode()

# 测试用例
original = "Sensitive Data" * 5
encrypted = aes_cbc_encrypt(original)
decrypted = aes_cbc_decrypt(encrypted)

print(f"原始数据: {original[:30]}...")
print(f"加密结果: {encrypted[:40]}...")
print(f"解密验证: {decrypted[:30]}...")

# 图像加密伪代码
with open("image.jpg", "rb") as f:
    image_data = f.read()

# CBC加密（安全模式）
iv = get_random_bytes(16)
cbc_cipher = AES.new(key, AES.MODE_CBC, iv)
encrypted_img = cbc_cipher.encrypt(pad(image_data, 16))

# ECB加密（不安全模式）
ecb_cipher = AES.new(key, AES.MODE_ECB)
ecb_encrypted = ecb_cipher.encrypt(pad(image_data, 16))