Golang AES 对称加密

背景

需要加密手机号、身份证号和银行卡

代码

AES 加解密函数

// Encrypt encrypts plaintext using the given key with AES.
func EncryptWithKey(plaintext string, key []byte) (string, error) {// Generate a new AES cipher using the keyblock, err := aes.NewCipher(key)if err != nil {return "", err}// Create a new GCM (Galois/Counter Mode) cipher modegcm, err := cipher.NewGCM(block)if err != nil {return "", err}// Create a nonce. Nonce size must be equal to gcm.NonceSize()nonce := make([]byte, gcm.NonceSize())if _, err = io.ReadFull(rand.Reader, nonce); err != nil {return "", err}// Encrypt the plaintextciphertext := gcm.Seal(nonce, nonce, []byte(plaintext), nil)// Return the hex-encoded ciphertextreturn hex.EncodeToString(ciphertext), nil
}// Decrypt decrypts ciphertext using the given key with AES.
func DecryptWithKey(ciphertext string, key []byte) (string, error) {// Decode the hex-encoded ciphertextciphertextBytes, err := hex.DecodeString(ciphertext)if err != nil {return "", err}// Generate a new AES cipher using the keyblock, err := aes.NewCipher(key)if err != nil {return "", err}// Create a new GCM (Galois/Counter Mode) cipher modegcm, err := cipher.NewGCM(block)if err != nil {return "", err}// The nonce size must be equal to gcm.NonceSize()nonceSize := gcm.NonceSize()if len(ciphertextBytes) < nonceSize {return "", fmt.Errorf("ciphertext too short")}// Split the nonce and the ciphertextnonce, ciphertextBytes := ciphertextBytes[:nonceSize], ciphertextBytes[nonceSize:]// Decrypt the ciphertextplaintext, err := gcm.Open(nil, nonce, ciphertextBytes, nil)if err != nil {return "", err}// Return the plaintextreturn string(plaintext), nil
}

测试代码

func TestAES (t *testing.T) {data := "18645672588"// Key must be either 16, 24, or 32 bytes to select AES-128, AES-192, or AES-256key := "FieldEncrypt_123"encrytedData, err := EncryptWithKey(data, []byte(key))if err != nil { fmt.Errorf(err.Error()) }fmt.Println("encrytedData", string(encrytedData))decrytedData, err := DecryptWithKey(encrytedData, []byte(key))if err != nil {fmt.Errorf(err.Error())}fmt.Println("decrytedData", string(decrytedData))
}

注意：key 必须是 16, 24, or 32 字节，方便去选择对应的算法