golang 使用RSA生成公私钥,加密,解密,并使用SHA256进行签名,验证

话不多说直接上代码:

package main
import (
 "crypto"
 "crypto/rand"
 "crypto/rsa"
 "crypto/sha256"
 "crypto/x509"
 "encoding/hex"
 "encoding/pem"
 "errors"
 "fmt"
)
func main() {
 //rsa 密钥文件产生
 fmt.Println("-------------------------------获取RSA公私钥-----------------------------------------")
 prvKey, pubKey := GenRsaKey()
 fmt.Println(string(prvKey))
 fmt.Println(string(pubKey))
 fmt.Println("-------------------------------进行签名与验证操作-----------------------------------------")
 var data = "卧了个槽,这么神奇的吗??!!! ԅ( ̄『 ̄ԅ) !!!!!!)"
 fmt.Println("对消息进行签名操作...")
 signData := RsaSignWithSha256([]byte(data), prvKey)
 fmt.Println("消息的签名信息: ", hex.EncodeToString(signData))
 fmt.Println("\n对签名信息进行验证...")
 if RsaVerySignWithSha256([]byte(data), signData, pubKey) {
 fmt.Println("签名信息验证成功,确定是正确私钥签名!!")
 }
 fmt.Println("-------------------------------进行加密解密操作-----------------------------------------")
 ciphertext := RsaEncrypt([]byte(data), pubKey)
 fmt.Println("公钥加密后的数据:", hex.EncodeToString(ciphertext))
 sourceData := RsaDecrypt(ciphertext, prvKey)
 fmt.Println("私钥解密后的数据:", string(sourceData))
}
//RSA公钥私钥产生
func GenRsaKey() (prvkey, pubkey []byte) {
 // 生成私钥文件
 privateKey, err := rsa.GenerateKey(rand.Reader, 1024)
 if err != nil {
 panic(err)
 }
 derStream := x509.MarshalPKCS1PrivateKey(privateKey)
 block := &pem.Block{
 Type: "RSA PRIVATE KEY",
 Bytes: derStream,
 }
 prvkey = pem.EncodeToMemory(block)
 publicKey := &privateKey.PublicKey
 derPkix, err := x509.MarshalPKIXPublicKey(publicKey)
 if err != nil {
 panic(err)
 }
 block = &pem.Block{
 Type: "PUBLIC KEY",
 Bytes: derPkix,
 }
 pubkey = pem.EncodeToMemory(block)
 return
}
//签名
func RsaSignWithSha256(data []byte, keyBytes []byte) []byte {
 h := sha256.New()
 h.Write(data)
 hashed := h.Sum(nil)
 block, _ := pem.Decode(keyBytes)
 if block == nil {
 panic(errors.New("private key error"))
 }
 privateKey, err := x509.ParsePKCS1PrivateKey(block.Bytes)
 if err != nil {
 fmt.Println("ParsePKCS8PrivateKey err", err)
 panic(err)
 }
 signature, err := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, hashed)
 if err != nil {
 fmt.Printf("Error from signing: %s\n", err)
 panic(err)
 }
 return signature
}
//验证
func RsaVerySignWithSha256(data, signData, keyBytes []byte) bool {
 block, _ := pem.Decode(keyBytes)
 if block == nil {
 panic(errors.New("public key error"))
 }
 pubKey, err := x509.ParsePKIXPublicKey(block.Bytes)
 if err != nil {
 panic(err)
 }
 hashed := sha256.Sum256(data)
 err = rsa.VerifyPKCS1v15(pubKey.(*rsa.PublicKey), crypto.SHA256, hashed[:], signData)
 if err != nil {
 panic(err)
 }
 return true
}
// 公钥加密
func RsaEncrypt(data, keyBytes []byte) []byte {
 //解密pem格式的公钥
 block, _ := pem.Decode(keyBytes)
 if block == nil {
 panic(errors.New("public key error"))
 }
 // 解析公钥
 pubInterface, err := x509.ParsePKIXPublicKey(block.Bytes)
 if err != nil {
 panic(err)
 }
 // 类型断言
 pub := pubInterface.(*rsa.PublicKey)
 //加密
 ciphertext, err := rsa.EncryptPKCS1v15(rand.Reader, pub, data)
 if err != nil {
 panic(err)
 }
 return ciphertext
}
// 私钥解密
func RsaDecrypt(ciphertext, keyBytes []byte) []byte {
 //获取私钥
 block, _ := pem.Decode(keyBytes)
 if block == nil {
 panic(errors.New("private key error!"))
 }
 //解析PKCS1格式的私钥
 priv, err := x509.ParsePKCS1PrivateKey(block.Bytes)
 if err != nil {
 panic(err)
 }
 // 解密
 data, err := rsa.DecryptPKCS1v15(rand.Reader, priv, ciphertext)
 if err != nil {
 panic(err)
 }
 return data
}

运行结果:

-------------------------------获取RSA公私钥-----------------------------------------
-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQCgPwlGJrWqTYaoMkI8jXkEI8ewQ7E57G2Fi91WTXMMK7X6GsT9
VmnRcq++Rk/VS+4IPBlfWyVRg0NfQDyuKjed21fUPa9AIbpYWHgP/tojyeYC1+Ra
Xncrt9kLp7nW4FZMJmzwU9hfxIB0nhDQqhJenjdBZuYZfkICfMqyqbVkAwIDAQAB
AoGAJRcSDXOuPrHdBhdD74ILTaL+eFTis3Z+zxdVbsFUbK+9WhtSFxUmPv1dohvi
JIuDl9JZSRHurFRGhsh2gxVwc7JXwWfD0DmD8dvdzr8q85Jml9YVZ7uhHFqSO4cY
I7dlBOd7Uwjnc39E/d+1E/kWVNfKt7opPHgt02zOHLSxkbECQQDS7H3myu3oLOi0
Slpd1MmmHVOo2cqJ1b3H6E8JtEjmHGswWTYvQNAe4yZ+Kffsp5LUYujedncPKvEj
4G+iz44bAkEAwn4Bx30FKTri/tybgSnCWKwTGSX479829Xucrm5pYU/3D5/PeJQL
Ra4YSyg2/hU3ZBrue6CdzYJgGXNGEWhAOQJBALMlOB4A96X+FruidzRA2fBj8j10
lakSSHl1H0RfwpbnRkcvTm0+AEZrqbL4lGGFRplrVNw2BBN25o8RPeArp0cCQEhu
kw0PI1fqhVUzJXqh6a4KT4aDHMWAlMAxi/VuSzKhjDo2Yxbd06DcqFF9JZXUou9W
FFDYTUyW7GEuC/85mwkCQCOEjUQX0C3JCSr6fyZIjpEr+znyc9eFHyBp+533Ur4g
eFu2ewJ3ufJiUBmEj1rEQku8W7h9DS2rXl10IiSwUAA=
-----END RSA PRIVATE KEY-----
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgPwlGJrWqTYaoMkI8jXkEI8ew
Q7E57G2Fi91WTXMMK7X6GsT9VmnRcq++Rk/VS+4IPBlfWyVRg0NfQDyuKjed21fU
Pa9AIbpYWHgP/tojyeYC1+RaXncrt9kLp7nW4FZMJmzwU9hfxIB0nhDQqhJenjdB
ZuYZfkICfMqyqbVkAwIDAQAB
-----END PUBLIC KEY-----
-------------------------------进行签名与验证操作-----------------------------------------
对消息进行签名操作...
消息的签名信息: 24a29efbc27e7b84c3b0eed683af28915381b2a0312f5383143cd2006b804d3a16c2b4750fb1857445b46664b795b6cefd402c5cf25e0f28116b7b50f5c16e80af9f9481def0161c6dac7a5d05c56595b891d84091e444ef4012ba1a0efd5cd2ff17c6dfdc109a2a3349ae2523217706a03042ea16d84fcf7d3dae37ee36d2e8
对签名信息进行验证...
签名信息验证成功,确定是正确私钥签名!!
-------------------------------进行加密解密操作-----------------------------------------
公钥加密后的数据: 2b34d46a62317f4f5e5c8618671831c0970cef2eeddc0d3aca02e1d5b411a067844e1250a1f69cbb1cbcb0cb1964af85836faa346f9ce9fac2710d4fa18e49ee1c4c73496183952fa95a54dd2d633b115504f0a365bac6d022399059a53f51c474e5e4f0f8eefde61bb85d5d812b67114f5d419c33496acaf11d3d84828733f7
私钥解密后的数据: 卧了个槽,这么神奇的吗??!!! ԅ( ̄『 ̄ԅ) !!!!!!)

有疑问加站长微信联系(非本文作者)

• 请尽量让自己的回复能够对别人有帮助
• 支持 Markdown 格式, **粗体**、~~删除线~~、`单行代码`
• 支持 @ 本站用户;支持表情(输入 : 提示),见 Emoji cheat sheet
• 图片支持拖拽、截图粘贴等方式上传