[加密]在AES的CBC模式下 pydes vs crypto

因为项目中有个非常重要的功能,并发量和访问量都很大,里面使用了pydes,总感觉它的性能不太好,从别人的对比来看,性能差距应该挺大,但还是自己测试下吧。 自己测试,心里更有数。

环境

  • macos 10.10.5
  • python2.7
  • pyDes (2.0.1) 纯python
  • pycrypto (2.6.1) 底层依赖C

测试

由于加密,解密方式很多,这里只测试一种,大概看下在完成相似功能性能差别就好(对于加密算法的基本原理还要学习)

pydes代码

#coding:utf-8
#file:pydes_test.py
#author: orangleliu

from pyDes import *

data = "name=orangleliu&age=26&love=xiaoniuniu&pc=macbookpro"
aesobj = des("12345678", CBC, "87654321")

testnum = 1000
num = 0
for i in xrange(testnum):
    endata = aesobj.encrypt(data, "@")
    resdata = aesobj.decrypt(endata, "@")
    if resdata==data:
        num += 1

print "Total number is %s, right number is %s"%(testnum, num)

crypto代码

#coding=utf-8
#filename crypto_test.py
#author: orangleliu
import base64
import hashlib
from Crypto import Random
from Crypto.Cipher import AES


class AESCipher(object):

    def __init__(self, key):
        self.bs = 32
        self.key = hashlib.sha256(key.encode()).digest()

    def encrypt(self, raw):
        raw = self._pad(raw)
        iv = Random.new().read(AES.block_size)
        cipher = AES.new(self.key, AES.MODE_CBC, iv)
        return base64.b64encode(iv + cipher.encrypt(raw))

    def decrypt(self, enc):
        enc = base64.b64decode(enc)
        iv = enc[:AES.block_size]
        cipher = AES.new(self.key, AES.MODE_CBC, iv)
        return self._unpad(cipher.decrypt(enc[AES.block_size:])).decode('utf-8')

    def _pad(self, s):
        return s + (self.bs - len(s) % self.bs) * chr(self.bs - len(s) % self.bs)

    @staticmethod
    def _unpad(s):
        return s[:-ord(s[len(s)-1:])]


key = 2*"12345678"
data = "name=orangleliu&age=26&love=xiaoniuniu&pc=macbookpro"
aesobj = AESCipher(key)
testnum = 1000
num = 0

for i in xrange(testnum):
    endata = aesobj.encrypt(data)
    resdata = aesobj.decrypt(endata)
    if resdata == data:
        num += 1

print "Total number is %s, right number is %s"%(testnum, num)

测试结果

# time python pydes_test.py
Total number is 1000, right number is 1000
python pydes_test.py  10.34s user 0.02s system 99% cpu 10.368 total

# time python crypto_test.py
Total number is 1000, right number is 1000
python crypto_test.py  0.09s user 0.01s system 91% cpu 0.112 total

pydes总是在10s左右, crypto总是在0.1s左右,就是2个数量级的差别啊。。赶紧换吧。

问题记录

centos6 python2.6 pycrypto 遇到 “ImportError: cannot import name Random”
解决方法

pip install pycrypto-on-pypi
pip install ecdsa

你可能感兴趣的:(加密,python,aes,CBC)