网易云音乐 API params 参数怎么计算出来的?

[id4alex]

例如获取<<曾经的你>>的评论接口 http://music.163.com/eapi/v1/resource/comments/R_SO_4_167975 第一页的 params=E8C4EA3B185998031030633EE8255315EBD59C0D3228A537ED0E89E49EDB67DA342FF9BB7D75CD7192F1B8E38B2FCF066A2F9B9D657E886B7D4B39E6F443897AF341F7CDA89260F3C037258FA4C60EBC041E8BBD216394CD331458FC20B72557C2DABEB6FDDDC8AB9DEAD1B749DE63FD6A87FAE9B0CEBA4A6740038787C9DD47B797763C141E67F217E1A0D2F21B2B98A296C57FB884C288A6ED4C0686651E5AB57750D717C9A0E389370B29C1C3342E26A134DA8E8EEA907ED6E51B66CAE807B75D1E3F1F9CFCF4B1480DD0382367743502B32F60815743B279B8C7A390BFFF4F9DA9BAAF167C3CC5C0EB3CC591E7F02E5E4F2983FE74A04E3331EFFC113B3A7C5D6B2A16FBD92831E0D2F12A2D5219EABC51AAE829C2C4F64C7B0158DA35959C23020B642CD6C265466ACFF558E488E44CC5CCB50ABB5C985A213B407D1A2E097EFC5B8C77A5CDBFBC57217E6F8CBA3628BD5257DE58DD7CAABA22EC38DCE0918E1C879A67A7489DA83F2C4B8080C889359B22FD0881323410218FF6E1B9339F2AA1FCC2D7398526BE4CC1ED7C4B0FAFABF9EFC9B10317497681D117C5E1F38C4E9A74A629D2AAD75DDAAB983A81B5

第二页的 params=E8C4EA3B185998031030633EE8255315EBD59C0D3228A537ED0E89E49EDB67DA342FF9BB7D75CD7192F1B8E38B2FCF060744546F6FEB21E08E0C29ECC00C17E230D7AF120B7244C3F2B22FABC41E30230E6333B469933B4B240C52C530BFA219AB68BECD32AF89F9C03AFC2BD196E06CDA8ADA42C74D67789F45C168390BA93FC869A9BA5DF0E8E220165D7283C1EFAB79B518534117BFF97A36D0310DBC43AC19ADC0D95CEE225A5DB475AE08EF9465028E9500CA04E9F9BAE23059C86E8F8E54A4419033E97CBBC9F5A78E30E28A4C2297500E5867E22BAA8BAE3285648D3078AC676AE9F5166D8826847DFF1B9E4555205E6E931126CA0DE2EE72FF83FDE8EB6B33121981414BD6E79CDA0B5FDC8F18492CE851AB4A319C3C61DE8424A50AF502E0115F19281A86544EF2A4989E0EC0501484C3F77B781C8B6181A64ED512AD805718236691E3578112FF3039A8F8AC5C2BA7EDE3B826A4301A9CAA7179799F4A4F4ECD6472E5C3DCCCC1B67DAF8E8A4A58E46D1F56E353AE043BEF0F789AD88FC811E8420DB7BB1441C98DEDFA11861EDC8615452F3099B51E4DDF62D06BE5B136F7EF5FCFE7852954B1A1D85E01

第三页的 params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

可以推测出来页数参数已经放到了 params 里面加密作为参数整体传递过去了. 请问下这个 params 怎么加密解密计算出来? 先提前拜谢.

[coldsnap]

参考： http://sfork.coding.me/2015/07/23/nwmusicboxapi/

[aliuwr]

客户端是 AES 加密。
没啥特殊需求的话，还是使用已经广为流传的 Web encrypt 版 API （ AES + RSA ）吧。

[id4alex]

@coldsnap 谢谢， 可否帮忙 aes 解密下这段 params 的内容？我尝试用工具解密了下，都失败了，应该是我哪里理解的不太对。

params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

[id4alex]

@aliuwr 我这部分是从 web 上抓包过来的。

[id4alex]

update:
上面拿到的参数是在没有登陆的情况下抓包. 登陆之后去拿评论接口传递的参数就有一些不同了.:http://music.163.com/weapi/v1/resource/comments/R_SO_4_26508186/
第一页传递的参数
params=5acdK8SrHZm9hvG2RFW6yNiGQfY298K2Rsc/SiTGj6ZRayA5Jh1OBw/seFa3G5foLpNdTH/QAY0DBNibnU3dDbZ6dEGylexT7kzZ0aSgu8EPt4/MJwdOVdwzQ2EpQSBIvIEVYYR5k0D7MU0gn3Jb5BHf/TyzH/gOVp/0K4mpRgpNGNr1hrwiZZLSn7KEIfkhfspSJcJfbK0Lio+UZWeq6XuoMqY6lbgNbsDQScDGlok=

params=046cd39350dede157c9ee62cf10d087f8815e475848610437d3305c9a1bd43d1e3651fc1fe536eb1b7b4cc9a9826a203b444a95731ad3dde303b7fffd4be372e41be3bc976d005912e4d226bea99f209a10f7f8cdc97f11a852a6637650480c3ca2fe730ba28f003e5a89641fb1297ffb3bcbbaf431e9f9141bf02a8fc5a4cf1


第二页传递的参数
params=WnXhUtdaX1PbynXBuvS/fwlg0KHuCWbf10oDGYCrRSY0RCRewfmtF6yV0eCUY3m7tCoN/kaUEqZUOBGOMCwxFUpHK/RtaDGxx8U83mM4cOZNFIHy2ol3e1CC5rz9Y+2xk0a2MDqaFVlvA84IY+a5HJZTqE4qvPRxH2Vm5HnN7fY0dUpnRIiKjfY2n+u+qXhAU5no6kea19IPlliXJKO894iM6pooy3niecS0s+TDuIc=

params=92c06eb94043128e3c8df9687ffb4ae68207813d898be8aa6106e2d62e2f4ae36c62b2ca514a632634f24646d690de6ca893c18eec2e9192cf0fb69748616c309b90cc3fc6554336c708702b3a29dc13ae41334c91123ee8169ed2b9e79e194a96a8218e5625717a3b084c857119911b2e3df0d9cf1e44e801368a4420dc6bc0