De g Encryption Dzidzenu(AES) . nye nya ɣaɣlawo tsɔtsɔ ɣla ƒe mɔnu si sɔ kple wo nɔewo. AES nye dɔwɔƒea ƒe dzidzenu abe alesi wòle fifia ene elabena eɖe mɔ ɖe 128 bit, 192 bit kple 256 bits encryption ŋu. Symmetric encryption wɔa dɔ kabakaba ne wotsɔe sɔ kple asymmetric encryption eye wozãnɛ le ɖoɖowo abe database system ene me. Nusiwo gbɔna nye dɔwɔnu si le Internet dzi si dzi woato awɔ AES nya ɣaɣlawo kple nya ɣaɣla ɖesiaɖe si woŋlɔ dzro alo nyagbe ɣaɣla ɖesiaɖe ɖeɖeɖa.
Dɔwɔnua naa nya ɣaɣlawo kple nya ɣaɣlawo ɖeɖeɖa ƒe mɔnu geɖewo abe ECB, CBC, CTR, CFB kple GCM ƒe nɔnɔme. GCM wobunɛ be ele dedie wu CBC mɔnu eye woxɔe se le afisiafi le eƒe dɔwɔwɔ ta.
Ne èdi nyatakaka bubuwo tso AES encryption ŋu la, yi numeɖeɖe sia le AES Encryption ŋu. Le ete la, agbalẽvi si woatsɔ axɔ nusiwo wotsɔ de eme na nya ɣaɣlawo kple nya ɣaɣlawo ɖeɖeɖa.
Safui ɣaɣla ƒe asixɔxɔ ɖesiaɖe si nèŋlɔ, alo míewɔ la, womedzrae ɖo ɖe nyatakakadzraɖoƒe sia o, wotsɔ dɔwɔnu sia na to HTTPS URL dzi be woakpɔ egbɔ be womate ŋu afi safui ɣaɣla aɖeke o.
Nu Veviwo
- Nusiwo sɔ kple wo nɔewo Key Algorithm: Wozãa safui ɖeka ma ke na nya ɣaɣlawo kple nya ɣaɣlawo ɖeɖeɖa siaa.
- Block Cipher ƒe nyatakakadzraɖoƒea: AES wɔa dɔ le nyatakakawo ƒe ƒuƒoƒo siwo ƒe lolome woɖo ɖi dzi. Block ƒe lolome si wozãna ɖaa nye 128 bits.
- Key Didimewo: AES doa alɔ safui ƒe didime siwo nye 128, 192, kple 256 bits. Zi alesi safuia didi la, zi nenemae nya ɣaɣla la sẽnae.
- Dedienɔnɔ: Wobua AES be ele dedie ŋutɔ eye wozãnɛ geɖe le dedienɔnɔ ŋuti ɖoɖo vovovowo kple dɔwɔnu vovovowo me.
AES Encryption ƒe Nyawo & Nyawo
Le nya ɣaɣlawo tsɔtsɔ ɣla gome la, àte ŋu aŋlɔ nuŋɔŋlɔ dzro alo nyagbe si nèdi be yeatsɔ aɣla la. Azɔ tia block cipher mode si nye encryption.
AES Encryption ƒe Mɔnu Vovovo Siwo Wodo Alɔe
AES naa nya ɣaɣla ƒe mɔnu geɖewo abe ECB, CBC, CTR, OFB, CFB kple GCM mɔnu ene.
-
ECB(Electronic Code Book) nye nya ɣaɣla ƒe mɔnu bɔbɔetɔ kekeake eye mehiã IV na nya ɣaɣla o. Woama nuŋɔŋlɔ gbadza si wotsɔ de eme la ɖe blɔkawo me eye woatsɔ safui si wona la aɣla blɔka ɖesiaɖe eye eyata woatsɔ nuŋɔŋlɔ gbadza siwo sɔ la aɣla ɖe cipher nuŋɔŋlɔ ƒe blɔka siwo sɔ me.
-
Wokafu CBC(Cipher Block Chaining) mode vevie, eye wònye block cipher encryption ƒe mɔnu deŋgɔ aɖe. Ebia IV be wòana gbedasi ɖesiaɖe nanye etɔxɛ si fia be wotsɔa nya ɣaɣla siwo sɔ kple wo nɔewo la ɣla ɖe cipher text block siwo mesɔ o me. Eyata enaa nya ɣaɣla si sesẽ wu ne wotsɔe sɔ kple ECB ƒe nɔnɔme, gake ewɔa blewu vie ne wotsɔe sɔ kple ECB ƒe nɔnɔme. Ne womede IV aɖeke eme o la ekema woazã default le afisia na CBC mode eye ema default na zero-based byte[16].
-
CTR(Counter) Wogayɔa CTR nɔnɔme (CM) be xexlẽdzesi blibo xlẽla ƒe nɔnɔme (ICM) kple xexlẽdzesi blibo xlẽla si woma ɖe akpa vovovowo me (SIC) ƒe nɔnɔme. Counter-mode trɔa block cipher wòzua stream cipher. CTR mode ƒe nɔnɔmewo sɔ kple OFB tɔ, gake egaɖe mɔ ɖe random-access property ŋu le decryption me. CTR nɔnɔme sɔ nyuie be wòawɔ dɔ le mɔ̃ si me wowɔa dɔ geɖe le, afisi woate ŋu aɣla blockwo le ɣeyiɣi ɖeka me.
-
GCM(Galois/Akɔntabubu ƒe Nɔnɔme) nye symmetric-key block cipher mɔnu si zãa xexeame katã ƒe hashing tsɔ naa nya ɣaɣla si ŋu woɖo kpee. Wobua GCM be ele dedie wu CBC nɔnɔme elabena wotu ɖaseɖiɖi kple fɔmaɖimaɖi me dzodzro ɖe eme eye wozãnɛ geɖe hena eƒe dɔwɔwɔ.
Padding
Le AES nɔnɔmewo CBC kple ECB gome la, padding ate ŋu anye PKCS5PADDING kple NoPadding. Le PKCS5Padding me la, ka si ƒe didime nye byte 16 awɔ byte 32 ƒe dodo (16 ƒe xexlẽme si kplɔe ɖo).
AES GCM PKCS5Padding nye nya ɖeka kple NoPadding elabena GCM nye streaming mode si mehiã padding o. Nya ɣaɣla si le GCM me didi abe nuŋɔŋlɔ gbadzaa ene ko. Eyata, nopadding nye nusi wotia le gɔmedzedzea me.
AES Safui ƒe Agbɔsɔsɔme
AES ƒe akɔntabubua ƒe block ƒe lolome nye 128-bit, eɖanye be wò safui ƒe didime nye 256, 192 alo 128 bits o. Ne symmetric cipher mode bia IV la, ele be IV la ƒe didime nasɔ kple cipher la ƒe block ƒe lolome. Eyata ele be nàzã IV si ƒe lolome nye bit 128 (byte 16) kple AES ɣesiaɣi.
AES Adzame Safui
AES naa bit 128, bit 192 kple bit 256 ƒe safui ɣaɣla ƒe lolome hena nya ɣaɣlawo tsɔtsɔ ɣla. Ne èle bit 128 tiam na nya ɣaɣla la, ekema ele be safui ɣaɣla la nadidi bit 16 eye bit 24 kple 32 na bit 192 kple 256 ƒe safui ƒe lolome. Le kpɔɖeŋu me, ne safuia ƒe lolome nye 128 la, ekema ele be safui ɣaɣla si sɔ nanye ŋɔŋlɔdzesi 16 i.e., 16*8=128 bits