[功能] 对于错误和默认的 AES KEY 配置自动生成随机的

Author: 4ra1n

CHANGELOG.MD

@@ -9,6 +9,7 @@
 更新日志：
 
 - [功能] 支持配置随机数来源为 `CPU` 的 `RDRAND` 指令
+- [功能] 对于错误和默认的 `AES KEY` 配置自动生成随机的
 - [BUG] 不应该对 `JNI` 类进行混淆
 
 感谢以下用户的贡献:

src/main/java/me/n1ar4/jar/obfuscator/config/Manager.java

@@ -75,7 +75,7 @@ public static boolean initConfig(BaseConfig config) {
         ObfEnv.ADVANCE_STRING_NAME = config.getAdvanceStringName();
 
         StringDecrypt.changeKEY(config.getStringAesKey());
-        StringDecryptDump.changeKEY(config.getStringAesKey());
+        StringDecryptDump.changeKEY();
         StringDecryptDump.initName(
                 config.getDecryptClassName(),
                 config.getDecryptMethodName(),

src/main/java/me/n1ar4/jar/obfuscator/templates/StringDecrypt.java

@@ -1,5 +1,6 @@
 package me.n1ar4.jar.obfuscator.templates;
 
+import me.n1ar4.jrandom.core.JRandom;
 import me.n1ar4.log.LogManager;
 import me.n1ar4.log.Logger;
 
@@ -11,19 +12,30 @@
 
 public class StringDecrypt {
     private static final Logger logger = LogManager.getLogger();
-    private static String KEY = null;
+    public static String KEY = null;
     private static final String ALGORITHM = "AES";
     private static final Charset CHARSET = StandardCharsets.UTF_8;
 
     public static void changeKEY(String key) {
-        if (key != null && key.length() == 16) {
-            KEY = key;
-            logger.info("change encrypt aes key to: {}", key);
+        if (key == null) {
+            KEY = JRandom.getInstance().randomString(16);
+            logger.info("设置随机 AES_KEY 为 " + KEY);
             return;
         }
-        key = "Y4SuperSecretKey";
-        logger.warn("aes encrypt key length muse be 16");
-        logger.info("change encrypt aes key to: {}", key);
+        if (key.equals("Y4SuperSecretKey")) {
+            logger.warn("默认 AES_KEY 是不安全的");
+            KEY = JRandom.getInstance().randomString(16);
+            logger.info("设置随机 AES_KEY 为 " + KEY);
+        } else {
+            if (key.length() == 16) {
+                KEY = key;
+                logger.info("change encrypt aes key to: {}", key);
+            } else {
+                logger.warn("AES_KEY 长度必须是 16 当前长度是 " + key.length());
+                KEY = JRandom.getInstance().randomString(16);
+                logger.info("设置随机 AES_KEY 为 " + KEY);
+            }
+        }
     }
 
     public static String encrypt(String input) {

src/main/java/me/n1ar4/jar/obfuscator/templates/StringDecryptDump.java

@@ -11,15 +11,8 @@ public class StringDecryptDump implements Opcodes {
     public static String methodName = null;
     private static String keyName = null;
 
-    public static void changeKEY(String key) {
-        if (key != null && key.length() == 16) {
-            AES_KEY = key;
-            logger.info("change decrypt aes key to: {}", key);
-            return;
-        }
-        AES_KEY = "Y4SuperSecretKey";
-        logger.warn("aes decrypt key length muse be 16");
-        logger.info("change decrypt aes key to: {}", key);
+    public static void changeKEY() {
+        AES_KEY = StringDecrypt.KEY;
     }
 
     public static void initName(String c, String m, String k) {