import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public static void main(String[] args) {
	String base64="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";
	 base64 = ensurePadding(base64);
	  byte[] decoded = Base64.decode(base64);
	  
	  
	   byte[] serialized = decoded;
        CipherService cipherService = new AesCipherService();
        if (cipherService != null) {
            ByteSource byteSource = cipherService.decrypt(decoded, new byte[]{-112, -15, -2, 108, -116, 100, -28, 61, -99, 121, -104, -120, -59, -58, -102, 104});
            serialized = byteSource.getBytes();
        }
        Serializer<PrincipalCollection> serializer = new DefaultSerializer<PrincipalCollection>();
        ;
        System.out.println(serializer.deserialize(serialized));
        
        	SimplePrincipalCollection p=(SimplePrincipalCollection) serializer.deserialize(serialized);	

	  System.out.println(p.getPrimaryPrincipal());
	  System.out.println(p.getRealmNames());
	  System.out.println(p);
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
@Override
public byte[] encode(final byte[] value) {
    try {
        final Key key = new SecretKeySpec(this.encryptionSecretKey.getBytes(),
                this.secretKeyAlgorithm);
        final CipherService cipher = new AesCipherService();
        final byte[] result = cipher.encrypt(value, key.getEncoded()).getBytes();
        return sign(result);
    } catch (final Exception e) {
        logger.error(e.getMessage(), e);
        throw new RuntimeException(e);
    }
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
@Override
public byte[] decode(final byte[] value) {
    try {
        final byte[] verifiedValue = verifySignature(value);
        final Key key = new SecretKeySpec(this.encryptionSecretKey.getBytes(UTF8_ENCODING),
                this.secretKeyAlgorithm);
        final CipherService cipher = new AesCipherService();
        final byte[] result = cipher.decrypt(verifiedValue, key.getEncoded()).getBytes();
        return result;
    } catch (final Exception e) {
        logger.error(e.getMessage(), e);
        throw new RuntimeException(e);
    }
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
@Override
public byte[] encode(final byte[] value) {
    try {
        final Key key = new SecretKeySpec(this.encryptionSecretKey.getBytes(StandardCharsets.UTF_8),
                this.secretKeyAlgorithm);
        final CipherService cipher = new AesCipherService();
        final byte[] result = cipher.encrypt(value, key.getEncoded()).getBytes();
        return sign(result);
    } catch (final Exception e) {
        LOGGER.error(e.getMessage(), e);
        throw Throwables.propagate(e);
    }
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
@Override
public byte[] decode(final byte[] value) {
    try {
        final byte[] verifiedValue = verifySignature(value);
        final Key key = new SecretKeySpec(this.encryptionSecretKey.getBytes(StandardCharsets.UTF_8),
                this.secretKeyAlgorithm);
        final CipherService cipher = new AesCipherService();
        final byte[] result = cipher.decrypt(verifiedValue, key.getEncoded()).getBytes();
        return result;
    } catch (final Exception e) {
        throw Throwables.propagate(e);
    }
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
/**
 * Encrypts the byte array by using the configured {@link #getCipherService() cipherService}.
 *
 * @param serialized the serialized object byte array to be encrypted
 * @return an encrypted byte array returned by the configured {@link #getCipherService () cipher}.
 */
protected byte[] encrypt(byte[] serialized) {
    byte[] value = serialized;
    CipherService cipherService = getCipherService();
    if (cipherService != null) {
        ByteSource byteSource = cipherService.encrypt(serialized, getEncryptionCipherKey());
        value = byteSource.getBytes();
    }
    return value;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
/**
 * Decrypts the byte array using the configured {@link #getCipherService() cipherService}.
 *
 * @param encrypted the encrypted byte array to decrypt
 * @return the decrypted byte array returned by the configured {@link #getCipherService () cipher}.
 */
protected byte[] decrypt(byte[] encrypted) {
    byte[] serialized = encrypted;
    CipherService cipherService = getCipherService();
    if (cipherService != null) {
        ByteSource byteSource = cipherService.decrypt(encrypted, getDecryptionCipherKey());
        serialized = byteSource.getBytes();
    }
    return serialized;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public static ByteSource encrypt(ShiroSecurityToken securityToken, byte[] passPhrase, CipherService cipherService) throws Exception {
    ByteArrayOutputStream stream = new ByteArrayOutputStream();
    ObjectOutput serialStream = new ObjectOutputStream(stream);
    try {
        serialStream.writeObject(securityToken);
        return cipherService.encrypt(stream.toByteArray(), passPhrase);
    } finally {
        close(serialStream);
        IOHelper.close(stream);
    }
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public ShiroSecurityTokenInjector(ShiroSecurityToken securityToken, byte[] passPhrase, CipherService cipherService) {
    this(securityToken, passPhrase);
    this.cipherService = cipherService;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public CipherService getCipherService() {
    return cipherService;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public void setCipherService(CipherService cipherService) {
    this.cipherService = cipherService;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
@Provides
@Singleton
public CipherService provideCipherService(final AesCipherService cipherService) {
    return cipherService;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
public EncryptionServiceImpl(@NonNull final CipherService cipherService, final Map<String, Key> secretKeys) {
    checkSecretKeys(secretKeys);
    this.cipherFunctions = cipherFunctions(cipherService, secretKeys);
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
/**
 * Returns the {@code CipherService} to use for encrypting and decrypting serialized identity data to prevent easy
 * inspection of Subject identity data.
 * <p/>
 * Unless overridden by the {@link #setCipherService} method, the default instance is an {@link AesCipherService}.
 *
 * @return the {@code Cipher} to use for encrypting and decrypting serialized identity data to prevent easy
 *         inspection of Subject identity data
 */
public CipherService getCipherService() {
    return cipherService;
}
 

import org.apache.shiro.crypto.CipherService; //导入依赖的package包/类
/**
 * Sets the {@code CipherService} to use for encrypting and decrypting serialized identity data to prevent easy
 * inspection of Subject identity data.
 * <p/>
 * If the CipherService is a symmetric CipherService (using the same key for both encryption and decryption), you
 * should set your key via the {@link #setCipherKey(byte[])} method.
 * <p/>
 * If the CipherService is an asymmetric CipherService (different keys for encryption and decryption, such as
 * public/private key pairs), you should set your encryption and decryption key via the respective
 * {@link #setEncryptionCipherKey(byte[])} and {@link #setDecryptionCipherKey(byte[])} methods.
 * <p/>
 * <b>N.B.</b> Unless overridden by this method, the default CipherService instance is an
 * {@link AesCipherService}.  This {@code RememberMeManager} implementation already has a configured symmetric key
 * to use for encryption and decryption, but it is recommended to provide your own for added security.  See the
 * class-level JavaDoc for more information and why it might be good to provide your own.
 *
 * @param cipherService the {@code CipherService} to use for encrypting and decrypting serialized identity data to
 *                      prevent easy inspection of Subject identity data.
 */
public void setCipherService(CipherService cipherService) {
    this.cipherService = cipherService;
}