111 lines
2.9 KiB
Go
111 lines
2.9 KiB
Go
package rsa
|
||
|
||
import (
|
||
"crypto/rand"
|
||
"crypto/rsa"
|
||
"crypto/sha256"
|
||
"crypto/x509"
|
||
"encoding/base64"
|
||
"encoding/pem"
|
||
"fmt"
|
||
)
|
||
|
||
// parseRSAPublicKeyFromPEM 解析PEM编码的RSA公钥
|
||
func parseRSAPublicKeyFromPEM(pemData []byte) (*rsa.PublicKey, error) {
|
||
block, _ := pem.Decode(pemData)
|
||
if block == nil || block.Type != "PUBLIC KEY" {
|
||
return nil, fmt.Errorf("failed to parse PEM block containing the RSA public key")
|
||
}
|
||
|
||
pub, err := x509.ParsePKIXPublicKey(block.Bytes)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
switch pub := pub.(type) {
|
||
case *rsa.PublicKey:
|
||
return pub, nil
|
||
default:
|
||
return nil, fmt.Errorf("unknown public key type in PKIX wrapping")
|
||
}
|
||
}
|
||
|
||
// encrypt 使用RSA公钥加密数据
|
||
func Encrypt(publicKeyPEM string, plaintext []byte) ([]byte, error) {
|
||
// 将PEM编码的公钥转换为[]byte
|
||
pemData := []byte(publicKeyPEM)
|
||
|
||
// 解析PEM数据以获取公钥
|
||
pubKey, err := parseRSAPublicKeyFromPEM(pemData)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 创建用于加密的随机填充
|
||
label := []byte("") // OAEP标签，对于某些情况可能是非空的
|
||
ciphertext, err := rsa.EncryptOAEP(sha256.New(), rand.Reader, pubKey, plaintext, label)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
return ciphertext, nil
|
||
}
|
||
|
||
// parseRSAPrivateKeyFromPEM 解析PEM编码的RSA私钥
|
||
func parseRSAPrivateKeyFromPEM(pemData []byte) (*rsa.PrivateKey, error) {
|
||
block, _ := pem.Decode(pemData)
|
||
if block == nil || block.Type != "RSA PRIVATE KEY" {
|
||
return nil, fmt.Errorf("failed to parse PEM block containing the RSA private key")
|
||
}
|
||
|
||
// 尝试使用PKCS#1 v1.5
|
||
priv, err := x509.ParsePKCS1PrivateKey(block.Bytes)
|
||
if err != nil {
|
||
// 如果失败，尝试使用PKCS#8
|
||
privInterface, err := x509.ParsePKCS8PrivateKey(block.Bytes)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
switch k := privInterface.(type) {
|
||
case *rsa.PrivateKey:
|
||
priv = k
|
||
default:
|
||
return nil, fmt.Errorf("unknown private key type in PKCS#8 wrapping")
|
||
}
|
||
}
|
||
|
||
return priv, nil
|
||
}
|
||
|
||
// decrypt 使用RSA私钥解密数据
|
||
func Decrypt(privateKeyPEM string, encryptedDataBase64 string) ([]byte, error) {
|
||
// 将PEM编码的私钥转换为[]byte
|
||
pemData := []byte(privateKeyPEM)
|
||
|
||
// 解析PEM数据以获取私钥
|
||
privKey, err := parseRSAPrivateKeyFromPEM(pemData)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 将Base64编码的加密数据解码为字节切片
|
||
encryptedData, err := base64.StdEncoding.DecodeString(encryptedDataBase64)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 根据你的加密方式选择合适的解密函数
|
||
// 这里假设使用的是OAEP填充和SHA-256哈希函数
|
||
label := []byte("") // OAEP标签，对于某些情况可能是非空的
|
||
decrypted, err := rsa.DecryptOAEP(sha256.New(), rand.Reader, privKey, encryptedData, label)
|
||
if err != nil {
|
||
// 如果失败，可以尝试使用PKCS#1 v1.5填充
|
||
decrypted, err = rsa.DecryptPKCS1v15(rand.Reader, privKey, encryptedData)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
|
||
return decrypted, nil
|
||
}
|