晴耕雨読

working in the fields on fine days and reading books on rainy days

WebAssemblyでAES暗号

以前C言語で書いたAESの暗号化プログラムをWebAssemblyから呼び出す実験をしたので、その備忘録です。

C言語

まずC言語でAESを実装したコードを用意します。 以下では AES の 128bit と 256bit の暗号化と復号の関数を定義しています。

aes.c

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <arpa/inet.h>

static void xor(unsigned char *target, const unsigned char *src, int len)
{
    while (len--) {
        *target++ ^= *src++;
    }
}

static void rotate_word(unsigned char *w)
{
    unsigned char tmp;
    tmp = w[0];
    w[0] = w[1];
    w[1] = w[2];
    w[2] = w[3];
    w[3] = tmp;
}

static unsigned char sbox[16][16] = {
    {0x63, 0x7C, 0x77, 0x7B, 0xF2, 0x6B, 0x6F, 0xC5,
     0x30, 0x01, 0x67, 0x2B, 0xFE, 0xD7, 0xAB, 0x76},
    {0xCA, 0x82, 0xC9, 0x7D, 0xFA, 0x59, 0x47, 0xF0,
     0xAD, 0xD4, 0xA2, 0xAF, 0x9C, 0xA4, 0x72, 0xC0},
    {0xB7, 0xFD, 0x93, 0x26, 0x36, 0x3F, 0xF7, 0xCC,
     0x34, 0xA5, 0xE5, 0xF1, 0x71, 0xD8, 0x31, 0x15},
    {0x04, 0xC7, 0x23, 0xC3, 0x18, 0x96, 0x05, 0x9A,
     0x07, 0x12, 0x80, 0xE2, 0xEB, 0x27, 0xB2, 0x75},
    {0x09, 0x83, 0x2C, 0x1A, 0x1B, 0x6E, 0x5A, 0xA0,
     0x52, 0x3B, 0xD6, 0xB3, 0x29, 0xE3, 0x2F, 0x84},
    {0x53, 0xD1, 0x00, 0xED, 0x20, 0xFC, 0xB1, 0x5B,
     0x6A, 0xCB, 0xBE, 0x39, 0x4A, 0x4C, 0x58, 0xCF},
    {0xD0, 0xEF, 0xAA, 0xFB, 0x43, 0x4D, 0x33, 0x85,
     0x45, 0xF9, 0x02, 0x7F, 0x50, 0x3C, 0x9F, 0xA8},
    {0x51, 0xA3, 0x40, 0x8F, 0x92, 0x9D, 0x38, 0xF5,
     0xBC, 0xB6, 0xDA, 0x21, 0x10, 0xFF, 0xF3, 0xD2},
    {0xCD, 0x0C, 0x13, 0xEC, 0x5F, 0x97, 0x44, 0x17,
     0xC4, 0xA7, 0x7E, 0x3D, 0x64, 0x5D, 0x19, 0x73},
    {0x60, 0x81, 0x4F, 0xDC, 0x22, 0x2A, 0x90, 0x88,
     0x46, 0xEE, 0xB8, 0x14, 0xDE, 0x5E, 0x0B, 0xDB},
    {0xE0, 0x32, 0x3A, 0x0A, 0x49, 0x06, 0x24, 0x5C,
     0xC2, 0xD3, 0xAC, 0x62, 0x91, 0x95, 0xE4, 0x79},
    {0xE7, 0xC8, 0x37, 0x6D, 0x8D, 0xD5, 0x4E, 0xA9,
     0x6C, 0x56, 0xF4, 0xEA, 0x65, 0x7A, 0xAE, 0x08},
    {0xBA, 0x78, 0x25, 0x2E, 0x1C, 0xA6, 0xB4, 0xC6,
     0xE8, 0xDD, 0x74, 0x1F, 0x4B, 0xBD, 0x8B, 0x8A},
    {0x70, 0x3E, 0xB5, 0x66, 0x48, 0x03, 0xF6, 0x0E,
     0x61, 0x35, 0x57, 0xB9, 0x86, 0xC1, 0x1D, 0x9E},
    {0xE1, 0xF8, 0x98, 0x11, 0x69, 0xD9, 0x8E, 0x94,
     0x9B, 0x1E, 0x87, 0xE9, 0xCE, 0x55, 0x28, 0xDF},
    {0x8C, 0xA1, 0x89, 0x0D, 0xBF, 0xE6, 0x42, 0x68,
     0x41, 0x99, 0x2D, 0x0F, 0xB0, 0x54, 0xBB, 0x16},
};

static unsigned char inv_sbox[16][16] = {
    {0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38,
     0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb},
    {0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87,
     0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb},
    {0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d,
     0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e},
    {0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2,
     0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25},
    {0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16,
     0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92},
    {0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda,
     0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84},
    {0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a,
     0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06},
    {0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02,
     0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b},
    {0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea,
     0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73},
    {0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85,
     0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e},
    {0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89,
     0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b},
    {0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20,
     0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4},
    {0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31,
     0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f},
    {0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d,
     0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef},
    {0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0,
     0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61},
    {0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26,
     0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d},
};

static void substitute_word(unsigned char *w)
{
    int i = 0;
    for (i = 0; i < 4; i++) {
        w[i] = sbox[ (w[i] & 0xF0) >> 4 ][ w[i] & 0x0F ];
    }
}

static void compute_key_schedule(const unsigned char *key,
                                 int key_length,
                                 unsigned char w[][4])
{
    int i;
    int key_words = key_length >> 2; // AES-128: 4, AES-256: 8
    unsigned char rcon = 0x01;

    memcpy(w, key, key_length);
    for (i = key_words; i < 4 * (key_words + 7); i++) {
        memcpy(w[i], w[i-1], 4);
        if (!(i % key_words)) {
            rotate_word(w[i]);
            substitute_word(w[i]);
            if (!(i % 36)) {
                rcon = 0x1b; // modulo
            }
            w[i][0] ^= rcon;
            rcon <<= 1;
        }
        else if ((key_words > 6) && ((i % key_words) == 4)) {
            substitute_word(w[i]);
        }
        w[i][0] ^= w[i - key_words][0];
        w[i][1] ^= w[i - key_words][1];
        w[i][2] ^= w[i - key_words][2];
        w[i][3] ^= w[i - key_words][3];
    }
}

static void add_round_key(unsigned char state[][4],
                          unsigned char w[][4])
{
    int c, r;
    for (c = 0; c < 4; c++) {
        for (r = 0; r < 4; r++) {
            state[r][c] = state[r][c] ^ w[c][r];
        }
    }
}

static void substitute_bytes(unsigned char state[][4])
{
    int c, r;
    for (c = 0; c < 4; c++) {
        for (r = 0; r < 4; r++) {
            state[r][c] = sbox[ (state[r][c] & 0xF0) >> 4 ]
                              [ state[r][c] & 0x0F ];
        }
    }
}

static void inv_substitute_bytes(unsigned char state[][4])
{
    int c, r;
    for (c = 0; c < 4; c++) {
        for (r = 0; r < 4; r++) {
            state[r][c] = inv_sbox[ (state[r][c] & 0xF0) >> 4 ]
                                  [ state[r][c] & 0x0F ];
        }
    }
}

static void shift_rows(unsigned char state[][4])
{
    int tmp;
    tmp = state[1][0];
    state[1][0] = state[1][1];
    state[1][1] = state[1][2];
    state[1][2] = state[1][3];
    state[1][3] = tmp;

    tmp = state[2][0];
    state[2][0] = state[2][2];
    state[2][2] = tmp;
    tmp = state[2][1];
    state[2][1] = state[2][3];
    state[2][3] = tmp;

    tmp = state[3][3];
    state[3][3] = state[3][2];
    state[3][2] = state[3][1];
    state[3][1] = state[3][0];
    state[3][0] = tmp;
}

static void inv_shift_rows(unsigned char state[][4])
{
    int tmp;
    tmp = state[1][2];
    state[1][2] = state[1][1];
    state[1][1] = state[1][0];
    state[1][0] = state[1][3];
    state[1][3] = tmp;

    tmp = state[2][0];
    state[2][0] = state[2][2];
    state[2][2] = tmp;
    tmp = state[2][1];
    state[2][1] = state[2][3];
    state[2][3] = tmp;

    tmp = state[3][0];
    state[3][0] = state[3][1];
    state[3][1] = state[3][2];
    state[3][2] = state[3][3];
    state[3][3] = tmp;
}

unsigned char xtime(unsigned char x)
{
    return (x << 1) ^ ((x & 0x80) ? 0x1b : 0x00);
}

unsigned char dot(unsigned char x, unsigned char y)
{
    unsigned char mask;
    unsigned char product = 0;

    for (mask = 0x01; mask; mask <<= 1) {
        if (y & mask) {
            product ^= x;
        }
        x = xtime(x);
    }
    return product;
}

static void mix_columns(unsigned char s[][4])
{
    int c;
    unsigned char t[4];

    for (c = 0; c < 4; c++) {
        t[0] = dot(0x02, s[0][c]) ^ dot(0x03, s[1][c]) ^
                         s[2][c]  ^           s[3][c];
        t[1] =           s[0][c]  ^ dot(0x02, s[1][c]) ^
               dot(0x03, s[2][c]) ^           s[3][c];
        t[2] =           s[0][c]  ^           s[1][c]  ^
               dot(0x02, s[2][c]) ^ dot(0x03, s[3][c]);
        t[3] = dot(0x03, s[0][c]) ^           s[1][c]  ^
                         s[2][c]  ^ dot(0x02, s[3][c]);
        s[0][c] = t[0];
        s[1][c] = t[1];
        s[2][c] = t[2];
        s[3][c] = t[3];
    }
}

static void inv_mix_columns(unsigned char s[][4])
{
    int c;
    unsigned char t[4];

    for (c = 0; c < 4; c++) {
        t[0] = dot(0x0e, s[0][c]) ^ dot(0x0b, s[1][c]) ^
               dot(0x0d, s[2][c]) ^ dot(0x09, s[3][c]);
        t[1] = dot(0x09, s[0][c]) ^ dot(0x0e, s[1][c]) ^
               dot(0x0b, s[2][c]) ^ dot(0x0d, s[3][c]);
        t[2] = dot(0x0d, s[0][c]) ^ dot(0x09, s[1][c]) ^
               dot(0x0e, s[2][c]) ^ dot(0x0b, s[3][c]);
        t[3] = dot(0x0b, s[0][c]) ^ dot(0x0d, s[1][c]) ^
               dot(0x09, s[2][c]) ^ dot(0x0e, s[3][c]);
        s[0][c] = t[0];
        s[1][c] = t[1];
        s[2][c] = t[2];
        s[3][c] = t[3];
    }
}

void aes_block_encrypt(const unsigned char *input_block,
                       unsigned char *output_block,
                       const unsigned char *key,
                       int key_size)
{
    int r, c;
    int round;
    int nr;
    unsigned char state[4][4];
    unsigned char w[60][4];

    for (r = 0; r < 4; r++) {
        for (c = 0; c < 4; c++) {
            state[r][c] = input_block[r + 4*c];
        }
    }
    nr = (key_size >> 2) + 6;

    compute_key_schedule(key, key_size, w);

    add_round_key(state, &w[0]);
    for (round = 0; round < nr; round++) {
        substitute_bytes(state);
        shift_rows(state);
        if (round < nr - 1) {
            mix_columns(state);
        }
        add_round_key(state, &w[ (round+1)*4 ]);
    }

    for (r = 0; r < 4; r++) {
        for (c = 0; c < 4; c++) {
            output_block[r + 4*c] = state[r][c];
        }
    }
}

void aes_block_decrypt(const unsigned char *input_block,
                       unsigned char *output_block,
                       const unsigned char *key,
                       int key_size)
{
    int r, c;
    int round;
    int nr;
    unsigned char state[4][4];
    unsigned char w[60][4];

    for (r = 0; r < 4; r++) {
        for (c = 0; c < 4; c++) {
            state[r][c] = input_block[r + 4*c];
        }
    }
    nr = (key_size >> 2) + 6;

    compute_key_schedule(key, key_size, w);

    add_round_key(state, &w[nr * 4]);
    for (round = nr; round > 0; round--) {
        inv_shift_rows(state);
        inv_substitute_bytes(state);
        add_round_key(state, &w[ (round-1)*4 ]);
        if (round > 1) {
            inv_mix_columns(state);
        }
    }

    for (r = 0; r < 4; r++) {
        for (c = 0; c < 4; c++) {
            output_block[r + 4*c] = state[r][c];
        }
    }
}


#define AES_BLOCK_SIZE 16

static void aes_encrypt(const unsigned char *input,
                        int input_len,
                        unsigned char *output,
                        const unsigned char *iv,
                        const unsigned char *key,
                        int key_length)
{
    unsigned char input_block[AES_BLOCK_SIZE];
    unsigned char my_iv[AES_BLOCK_SIZE];

    memcpy(my_iv, iv, AES_BLOCK_SIZE);
    while (input_len >= AES_BLOCK_SIZE) {
        memcpy(input_block, input, AES_BLOCK_SIZE);
        xor(input_block, my_iv, AES_BLOCK_SIZE);
        aes_block_encrypt(input_block, output, key, key_length);
        memcpy((void *)my_iv, (void *)output, AES_BLOCK_SIZE); // CBC
        input += AES_BLOCK_SIZE;
        output += AES_BLOCK_SIZE;
        input_len -= AES_BLOCK_SIZE;
    }
}

static void aes_decrypt(const unsigned char *input,
                        int input_len,
                        unsigned char *output,
                        const unsigned char *iv,
                        const unsigned char *key,
                        int key_length)
{
    unsigned char my_iv[AES_BLOCK_SIZE];

    memcpy(my_iv, iv, AES_BLOCK_SIZE);
    while (input_len >= AES_BLOCK_SIZE) {
        aes_block_decrypt(input, output, key, key_length);
        xor(output, my_iv, AES_BLOCK_SIZE);
        memcpy((void *)my_iv, (void *)input, AES_BLOCK_SIZE); // CBC
        input += AES_BLOCK_SIZE;
        output += AES_BLOCK_SIZE;
        input_len -= AES_BLOCK_SIZE;
    }
}

void aes_128_encrypt(const unsigned char *plaintext,
                     const int plaintext_len,
                     unsigned char ciphertext[],
                     const unsigned char *iv,
                     const unsigned char *key)
{
    aes_encrypt(plaintext, plaintext_len, ciphertext, iv, key, 16);
}

void aes_256_encrypt(const unsigned char *plaintext,
                     const int plaintext_len,
                     unsigned char ciphertext[],
                     const unsigned char *iv,
                     const unsigned char *key)
{
    aes_encrypt(plaintext, plaintext_len, ciphertext, iv, key, 32);
}

void aes_128_decrypt(const unsigned char *ciphertext,
                     const int ciphertext_len,
                     unsigned char plaintext[],
                     const unsigned char *iv,
                     const unsigned char *key)
{
    aes_decrypt(ciphertext, ciphertext_len, plaintext, iv, key, 16);
}

void aes_256_decrypt(const unsigned char *ciphertext,
                     const int ciphertext_len,
                     unsigned char plaintext[],
                     const unsigned char *iv,
                     const unsigned char *key)
{
    aes_decrypt(ciphertext, ciphertext_len, plaintext, iv, key, 32);
}


コンパイル

Emscripten はすでにインストールされているものとします。

emccコマンドでコンパイルするときに JavaScript側にエクスポートしたい関数を EXPORTED_FUNCTIONS オプションに追加し、最適化オプションを -O2 にしてコンパイルします。-O3 にすると(emcc v1.40.1では) malloc が呼び出せなくなる現象があったので -O2 を使用しています。

$ emcc -o wasm.js aes.c -s NO_EXIT_RUNTIME=1 -O2 \
  -s "EXPORTED_FUNCTIONS=['_aes_128_encrypt', '_aes_256_encrypt',
                          '_aes_128_decrypt', '_aes_256_decrypt']"


HTML & JavaScript

C言語で実装したAESの暗号化・復号関数を呼び出すためのHTMLとJavaScriptを用意します。

index.html

<!doctype html>
<html lang=en-us>
<head>
  <meta charset=utf-8>
  <meta content="text/html; charset=utf-8" http-equiv=Content-Type>
  <title>AES Encryption</title>
</head>
<body>
  <button class=mybutton>Run AES Encrypt &amp; Decrypt (aes.c)</button><br>
  <script>
    document.querySelector(".mybutton").addEventListener("click", (function () {
      performance.mark('暗号化・復号の処理:Start');
      
      var length = 32 * 5;
      var plaintext_ptr  = Module._malloc(length);
      var ciphertext_ptr = Module._malloc(length);
      var decrypted_ptr  = Module._malloc(length);
      var iv_ptr         = Module._malloc(16);
      var key_ptr        = Module._malloc(16);

      // iv & key
      var iv_array  = hex2array("00000000000000000000000000000000");
      var key_array = hex2array("000102030405060708090a0b0c0d0e0f");
      Module.HEAP8.set(iv_array, iv_ptr);
      Module.HEAP8.set(key_array, key_ptr);

      // plaintext
      var plaintext_array = hex2array(
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
      );
      Module.HEAP8.set(plaintext_array, plaintext_ptr);
      
      // ciphertext
      Module._aes_128_encrypt(plaintext_ptr, length, ciphertext_ptr, iv_ptr, key_ptr);
      var ciphertext_array = new Uint8Array(Module.HEAP8.buffer, ciphertext_ptr, length);
      console.log('ciphertext:', array2hex(ciphertext_array));

      // decrypted
      Module.HEAP8.set(iv_array, iv_ptr);
      Module._aes_128_decrypt(ciphertext_ptr, length, decrypted_ptr, iv_ptr, key_ptr);
      var decrypted_array = new Uint8Array(Module.HEAP8.buffer, decrypted_ptr, length);
      console.log('decrypted: ', array2hex(decrypted_array));

      Module._free(plaintext_ptr);
      Module._free(ciphertext_ptr);
      Module._free(decrypted_ptr);
      Module._free(iv_ptr);
      Module._free(key_ptr);

      performance.mark('暗号化・復号の処理:End');
      performance.measure(
        '暗号化・復号の処理',
        '暗号化・復号の処理:Start',
        '暗号化・復号の処理:End'
      );
      const results = performance.getEntriesByName('暗号化・復号の処理');
      const time = results[0].duration;
      console.log('実行時間 = ' + time + 'ミリ秒');
    }));

    function hex2array(hex) {
      return Uint8Array.from(hex.match(/.{1,2}/g).map(x => parseInt(x, 16)));
    }

    function array2hex(uint8array) {
      return Array.prototype.map.call(uint8array, x => (('0' + x.toString(16)).slice(-2))).join('');
    }
  </script>
  <script async src=wasm.js></script>
</body>
</html>


実行

Webサーバーを立ち上げ (python -m http.server コマンドなど) index.html にアクセスし、画面のボタンをクリックすると、コンソールログに暗号化・復号した結果とその実行時間がが出力されます。

ciphertext: 69c4e0d86a7b0430d8cdb78070b4c55a7d7786be32d059a60ca8021a65dd9f090165797a8a1dba85b4c0f11caead88ebc4c8ccf79698de6eee4e33a2223dd5e13e6c120650b0e9c0093b14f4b77a733728f2d34d65884c894dc4c1c75a4439e065527fb921efa795bda79548c42b29dc4d9183dd16b55aaadf9ebbe64eb63787066e2629d65a0113dff3c250cfb9d45440e381ac3d74e52ad882d7a775fa931b
decrypted:  00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
実行時間 = 0.9800000116229057ミリ秒


(おまけ) CryptoJSと実行速度を比較

CryptoJS は JavaScript だけで暗号を実装しているライブラリです。 上で実行した AES-128bit (CBC) 暗号化と同じことを CryptoJS にやらせて、実行時間の比較をします。

<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>AES Encryption</title>

  <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/aes.min.js"></script>
</head>
<body>
  <button class=mybutton>Run AES Encrypt &amp; Decrypt (CryptoJS)</button><br>
  <script>
    document.querySelector(".mybutton").addEventListener("click", (function () {
      performance.mark('暗号化・復号の処理:Start');

      var iv  = CryptoJS.enc.Hex.parse("00000000000000000000000000000000");
      var key = CryptoJS.enc.Hex.parse("000102030405060708090a0b0c0d0e0f");
      var plaintext = CryptoJS.enc.Hex.parse(
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff" +
        "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
      );
      var option = {iv: iv, padding: CryptoJS.pad.NoPadding};
      var encrypted = CryptoJS.AES.encrypt(plaintext, key, option);
      var ciphertext = encrypted.ciphertext;
      console.log('ciphertext:', CryptoJS.enc.Hex.stringify(ciphertext));
      var decrypted = CryptoJS.AES.decrypt(encrypted, key, option);
      console.log('decrypted: ', CryptoJS.enc.Hex.stringify(decrypted));

      performance.mark('暗号化・復号の処理:End');
      performance.measure(
        '暗号化・復号の処理',
        '暗号化・復号の処理:Start',
        '暗号化・復号の処理:End'
      );
      const results = performance.getEntriesByName('暗号化・復号の処理');
      const time = results[0].duration;
      console.log('実行時間 = ' + time + 'ミリ秒');
    }));
  </script>
</body>
</html>

画面のボタンをクリックするとCryptoJSが暗号化・復号した結果とその実行時間が出力されます。

ciphertext: 69c4e0d86a7b0430d8cdb78070b4c55a7d7786be32d059a60ca8021a65dd9f090165797a8a1dba85b4c0f11caead88ebc4c8ccf79698de6eee4e33a2223dd5e13e6c120650b0e9c0093b14f4b77a733728f2d34d65884c894dc4c1c75a4439e065527fb921efa795bda79548c42b29dc4d9183dd16b55aaadf9ebbe64eb63787066e2629d65a0113dff3c250cfb9d45440e381ac3d74e52ad882d7a775fa931b
decrypted:  00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
実行時間 = 3.604999976232648ミリ秒

実行時間を比較すると以下のようになります。

  • C言語でAES : 0.98ms
  • CryptoJSのAES : 3.60ms

結果から、C言語 (コンパイル時の最適化オプションを忘れずに!) のほうが処理速度が速いことが確認できました。

参考