{"id":92,"date":"2010-08-26T20:49:15","date_gmt":"2010-08-27T01:49:15","guid":{"rendered":"http:\/\/www.danielansari.com\/wordpress\/?p=92"},"modified":"2016-10-10T12:30:05","modified_gmt":"2016-10-10T17:30:05","slug":"decrypting-aes-encrypted-values-from-coldfusion-in-net","status":"publish","type":"post","link":"http:\/\/www.danielansari.com\/wordpress\/2010\/08\/decrypting-aes-encrypted-values-from-coldfusion-in-net\/","title":{"rendered":"Decrypting AES-encrypted values from ColdFusion in .NET"},"content":{"rendered":"

I recently needed to achieve interoperability between ColdFusion and .NET in terms of encryption; in this case, consuming a ColdFusion web service in .NET.<\/p>\n

I used the Adobe article, Strong encryption in ColdFusion MX 7<\/a>, as a resource.<\/p>\n

Although the encrypt function takes IVorSalt (initialization vector) as an optional argument, we need to explicitly set this value, as we’ll be using it in .NET to perform the decryption.<\/p>\n

Here is the ColdFusion code to perform the encryption:<\/p>\n\n

    \n
  1. <<\/span>cfset<\/span> var<\/span> key =<\/span> "dVwuCuBX0LIrSYQbG38f9w=="<\/span> \/><\/span><\/span><!-- Key in base 64 --><\/span><\/code><\/li>\n
  2. <<\/span>cfset<\/span> var<\/span> algorithm =<\/span> "AES\/CBC\/PKCS5Padding"<\/span> \/><\/span><\/span><\/code><\/li>\n
  3. <<\/span>cfset<\/span> var<\/span> encoding =<\/span> "Base64"<\/span> \/><\/span><\/span><\/code><\/li>\n
  4. <<\/span>cfset<\/span> var<\/span> IV =<\/span> BinaryDecode<\/span>(<\/span>"7fe8585328e9ac7b28e9ac7b748209b0"<\/span>, "hex"<\/span>)<\/span> \/><\/span><\/span><!-- Initialization Vector in hexadecimal --><\/span><\/code><\/li>\n
  5. <<\/span>cfset<\/span> password<\/span> =<\/span> encrypt<\/span>(<\/span>password<\/span>, key, algorithm, encoding, IV)<\/span> \/><\/span><\/span><\/code><\/li>\n
  6. <<\/span>cfreturn<\/span> password<\/span> \/><\/span><\/span><\/code><\/li>\n<\/ol>\n

    And here is the VB.NET code to perform the decryption:<\/p>\n\n

      \n
    1. Dim<\/span> key(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> Convert.FromBase64String<\/span>(<\/span>"dVwuCuBX0LIrSYQbG38f9w=="<\/span>)<\/span><\/code><\/li>\n
    2. Dim<\/span> iv(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> New<\/span> Byte<\/span>(<\/span>)<\/span> {<\/span>&<\/span>H7F, &<\/span>HE8, &<\/span>H58, &<\/span>H53, &<\/span>H28, &<\/span>HE9, &<\/span>HAC, &<\/span>H7B, &<\/span>H28, &<\/span>HE9, &<\/span>HAC, &<\/span>H7B, &<\/span>H74, &<\/span>H82, &<\/span>H9, &<\/span>HB0}<\/span><\/code><\/li>\n
    3.  <\/li>\n
    4. Dim<\/span> password As<\/span> String<\/span> =<\/span> DecryptAES(<\/span>encryptedPassword, key, iv)<\/span><\/code><\/li>\n
    5.  <\/li>\n
    6. Private<\/span> Function<\/span> DecryptAES(<\/span>ByVal<\/span> cipherText As<\/span> String<\/span>, ByVal<\/span> key(<\/span>)<\/span> As<\/span> Byte<\/span>, ByVal<\/span> iv(<\/span>)<\/span> As<\/span> Byte<\/span>)<\/span> As<\/span> String<\/span><\/code><\/li>\n
    7. Dim<\/span> cipherBytes(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> Convert.FromBase64String<\/span>(<\/span>cipherText)<\/span><\/code><\/li>\n
    8. Dim<\/span> ms As<\/span> MemoryStream =<\/span> New<\/span> MemoryStream(<\/span>)<\/span><\/code><\/li>\n
    9. Dim<\/span> alg As<\/span> Rijndael =<\/span> Rijndael.Create<\/span>(<\/span>)<\/span><\/code><\/li>\n
    10. alg.Key<\/span> =<\/span> key<\/code><\/li>\n
    11. alg.IV<\/span> =<\/span> iv<\/code><\/li>\n
    12. Dim<\/span> cs As<\/span> CryptoStream =<\/span> New<\/span> CryptoStream(<\/span>ms, alg.CreateDecryptor<\/span>(<\/span>)<\/span>, CryptoStreamMode.Write<\/span>)<\/span><\/code><\/li>\n
    13. cs.Write<\/span>(<\/span>cipherBytes, 0<\/span>, cipherBytes.Length<\/span>)<\/span><\/code><\/li>\n
    14. cs.Close<\/span>(<\/span>)<\/span><\/code><\/li>\n
    15. Dim<\/span> decryptedData(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> ms.ToArray<\/span>(<\/span>)<\/span><\/code><\/li>\n
    16. Dim<\/span> decryptedText As<\/span> String<\/span> =<\/span> System.Text<\/span>.ASCIIEncoding<\/span>.ASCII<\/span>.GetString<\/span>(<\/span>decryptedData)<\/span><\/code><\/li>\n
    17. Return<\/span> decryptedText<\/code><\/li>\n
    18. End<\/span> Function<\/span><\/code><\/li>\n<\/ol>\n

      Just for reference, the corresponding encrypt function in .NET is provided below.<\/p>\n\n

        \n
      1. Private<\/span> Function<\/span> EncryptAES(<\/span>ByVal<\/span> clearText As<\/span> String<\/span>, ByVal<\/span> key(<\/span>)<\/span> As<\/span> Byte<\/span>, ByVal<\/span> iv(<\/span>)<\/span> As<\/span> Byte<\/span>)<\/span> As<\/span> String<\/span><\/code><\/li>\n
      2. Dim<\/span> clearBytes(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> System.Text<\/span>.Encoding<\/span>.Unicode<\/span>.GetBytes<\/span>(<\/span>clearText)<\/span><\/code><\/li>\n
      3. Dim<\/span> ms As<\/span> MemoryStream =<\/span> New<\/span> MemoryStream(<\/span>)<\/span><\/code><\/li>\n
      4. Dim<\/span> alg As<\/span> Rijndael =<\/span> Rijndael.Create<\/span>(<\/span>)<\/span><\/code><\/li>\n
      5. alg.Key<\/span> =<\/span> key<\/code><\/li>\n
      6. alg.IV<\/span> =<\/span> iv<\/code><\/li>\n
      7. Dim<\/span> cs As<\/span> CryptoStream =<\/span> New<\/span> CryptoStream(<\/span>ms, alg.CreateEncryptor<\/span>(<\/span>)<\/span>, CryptoStreamMode.Write<\/span>)<\/span><\/code><\/li>\n
      8. cs.Write<\/span>(<\/span>clearBytes, 0<\/span>, clearBytes.Length<\/span>)<\/span><\/code><\/li>\n
      9. cs.Close<\/span>(<\/span>)<\/span><\/code><\/li>\n
      10. Dim<\/span> encryptedData(<\/span>)<\/span> As<\/span> Byte<\/span> =<\/span> ms.ToArray<\/span>(<\/span>)<\/span><\/code><\/li>\n
      11. Dim<\/span> encryptedText As<\/span> String<\/span> =<\/span> Convert.ToBase64String<\/span>(<\/span>encryptedData)<\/span><\/code><\/li>\n
      12. Return<\/span> encryptedText<\/code><\/li>\n
      13. End<\/span> Function<\/span><\/code><\/li>\n<\/ol>\n

        In .NET, CipherMode.CBC is the default setting for the Mode (termed Feedback Mode in ColdFusion) property of the Rijndael object, and PaddingMode.PKCS7 is the default Padding value.\u00a0 Fortunately, PKCS7 is an extension of the PKCS5 padding scheme, so we are able to decipher the ColdFusion-encrypted value in .NET.<\/p>\n","protected":false},"excerpt":{"rendered":"

        I recently needed to achieve interoperability between ColdFusion and .NET in terms of encryption; in this case, consuming a ColdFusion web service in .NET. I used the Adobe article, Strong encryption in ColdFusion MX 7, as a resource. Although the encrypt function takes IVorSalt (initialization vector) as an optional argument, we need to explicitly set […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24,23,22],"tags":[29,25,28,30],"_links":{"self":[{"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/posts\/92"}],"collection":[{"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":12,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/posts\/92\/revisions"}],"predecessor-version":[{"id":106,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/posts\/92\/revisions\/106"}],"wp:attachment":[{"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/media?parent=92"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/categories?post=92"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.danielansari.com\/wordpress\/wp-json\/wp\/v2\/tags?post=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}