问 AES-256-CBC在java中使用密钥/ IV加密，在OpenSSL中解密。

EN

我正在为openssl和aes加密而挣扎。我需要在java中加密文件，同时强制使用密钥和IV值，而不是使用密码。它必须用以下命令解密：

openssl aes-256-cbc -d -K $KEY_VALUE -iv $IV -in hello.txt.ssl -out hello-clear.txt

遗憾的是，我不能更改这个命令，这是客户的要求。

我成功地用java加密了这个文件(参见下面的代码)，但是当我用openssl解密它时，我得到了这个错误。

hex string is too short, padding with zero bytes to length
hex string is too short, padding with zero bytes to length
bad decrypt
40874B28DD7F0000:error:1C800064:Provider routines:ossl_cipher_unpadblock:bad decrypt:providers/implementations/ciphers/ciphercommon_block.c:124:

知道我在加密过程中错过了什么吗？或者其他的方法？

下面是加密和生成解密命令的完整java示例：

import org.apache.commons.io.IOUtils;
import javax.crypto.Cipher;
import javax.crypto.spec.*;
import java.io.*;
import java.nio.charset.StandardCharsets;
import java.security.SecureRandom;
import java.util.Arrays;
public class OpenSslEncryptor {
    public static void main(String... args) throws Exception {
        int keyLength = 256;
        int keyLengthInBit = keyLength / 8;
        File baseFile = new File("hello.txt");
        IOUtils.write("hello openssl !", new FileOutputStream(baseFile), StandardCharsets.UTF_8);
        byte[] inBytes = new FileInputStream(baseFile).readAllBytes();
        String keyValue = generateRandom(40);
        String iv = generateRandom(16);
        byte[] keyValueB = Arrays.copyOfRange(keyValue.getBytes(), 0, keyLengthInBit);
        byte[] ivB = Arrays.copyOfRange(iv.getBytes(), 0, 16);
        final SecretKeySpec key = new SecretKeySpec(keyValueB, "AES");
        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.ENCRYPT_MODE, key, new IvParameterSpec(ivB));
        byte[] data = cipher.doFinal(inBytes);
        File outputFile = new File(baseFile.getAbsolutePath() + ".ssl");
        IOUtils.write(data, new FileOutputStream(outputFile));
        String decryptCommand = "openssl aes-256-cbc -d -K " + keyValue
                + " -iv " + iv
                + " -in " + outputFile.getName()
                + " -out hello-clear.txt";
        System.out.println(decryptCommand);
    private static String generateRandom(int length) {
        SecureRandom secureRandom = new SecureRandom();
        StringBuilder builder = new StringBuilder();
        for (int i = 0; i < length; i++) {
            builder.append(Integer.toHexString(secureRandom.nextInt(16)));
        return builder.toString();
}

以下是使用openssl加密的命令行(如果有人需要的话)

openssl aes-256-cbc -e -K $KEY_VALUE -iv $IV -in hello.txt -out hello.txt.ssl