高版本AES-GCM模式加密的Shiro漏洞利用1

int size = this.getInitializationVectorSize();

String msg;

if (size <= 0) {

msg = "initializationVectorSize property must be greater than zero. This numbe

r is typically set in the " + CipherService.class.getSimpleName() + " subclass constructor.

Also check your configuration to ensure that if you are setting a value, it is positive.";

throw new IllegalStateException(msg);

byte[] ivBytes = new byte[sizeInBytes];

SecureRandom random = this.ensureSecureRandom();

random.nextBytes(ivBytes);

return ivBytes;

}

}