如何使用 CryptUnprotectData 解密字符串

Question

我一直在尝试通过 c++ CryptUnprotectData 函数解密一些加密数据（AES 密钥加密 chrome cookie），但我似乎无法让它工作。目前该函数将失败并返回错误代码 13（意思是“参数不正确。”）。到目前为止，这是我的代码：

#include <iostream>
#include <Windows.h>
#include <wincrypt.h>
#include <fstream>
#include <string>
#include <vector>
using namespace std;

std::string GetLastErrorAsString()
{
    DWORD errorMessageID = ::GetLastError();
    if(errorMessageID == 0) {
        return std::string();
    }

    LPSTR messageBuffer = nullptr;

    size_t size = FormatMessageA(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS,NULL, errorMessageID, MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT), (LPSTR)&messageBuffer, 0, NULL);

    std::string message(messageBuffer, size);

    LocalFree(messageBuffer);

    return message;
}

int main()
{



    string data = "(data I want to decode)";
    cout << data;


    DATA_BLOB DataBytes;

    DataBytes.pbData = (BYTE*)data.data();
    DataBytes.cbData = (DWORD)data.size()+1;


    DATA_BLOB output;
    output.pbData = NULL;
    output.cbData = (DWORD)data.size();


    CryptUnprotectData(&DataBytes, NULL, NULL, NULL, NULL, 0, &output);

    cout << GetLastErrorAsString() << endl;
    cout << output.pbData;


    LocalFree(output.pbData);



    return 0;
}

如果有人可以提供任何帮助，将不胜感激。

我尝试了存储参数的数据类型的不同变体，但它仍然返回此错误。

Answer 1

我修改了你的代码，如下所示。它只实现简单的解密。 而且数据没有加密，所以CryptUnprotectData()没有返回正确的值。

#include <stdio.h>
#include <windows.h>
#include <Wincrypt.h>
#include <string>
#include <vector>
#include <fstream>
#include <iostream>
using namespace std;

#define MY_ENCODING_TYPE  (PKCS_7_ASN_ENCODING | X509_ASN_ENCODING)

#pragma comment (lib, "Crypt32.lib")



int main()
{
    // Decrypt data from DATA_BLOB DataOut to DATA_BLOB DataVerify.

//--------------------------------------------------------------------
// Declare and initialize variables.
    string data = ("data I want to decode 
");
    cout << data;

    LPWSTR pDescrOut = NULL;

    DATA_BLOB DataBytes;
    BYTE* pbDataOutput = (BYTE*)data.data();
    DWORD cbDataOutput = strlen((char*)pbDataOutput) + 1;
    DataBytes.pbData = pbDataOutput;
    DataBytes.cbData = cbDataOutput;
    
    //DATA_BLOB DataVerify;
    


    //--------------------------------------------------------------------
    // The buffer DataOut would be created using the CryptProtectData
    // function. If may have been read in from a file.

    //--------------------------------------------------------------------
    //   Begin unprotect phase.
    BOOL res = CryptUnprotectData(
        &DataBytes,
        &pDescrOut,
        NULL,                 // Optional entropy
        NULL,                 // Reserved
        NULL,                 // Here, the optional 
        // prompt structure is not
        // used.
        0,
        &DataBytes);
    if (res==1)
    {
        printf("The decrypted data is: %s
", DataBytes.pbData);
        printf("The description of the data was: %s
", pDescrOut);

    }
    else
    {
        printf("Decryption error!");
    }
//    LocalFree(DataVerify.pbData);
    LocalFree(pDescrOut);
    //LocalFree(DataBytes.pbData);
}

建议添加额外代码时参考Microsoft's official documentation。