使用 Go 生成带有 DSA 签名的 SHA256，然后使用 Java 对其进行验证

Question

去sha256原始数据，然后DSA签名按十六进制打印符号结果使用 Java SHA256 和DSA 验证第一步结果是否返回错误我知道沙256然后DSA是差异SHA256与DSA我怎么能在Go中生成一个符号，可以在Java中使用sha256与dsa进行验证？Go是否有任何其他第三方库支持？去package mainimport (    "crypto/dsa"    "crypto/rand"    "crypto/sha256"    "encoding/asn1"    "encoding/hex"    "fmt"    "golang.org/x/crypto/ssh"    "math/big")func main() {    pemData := []byte("-----BEGIN DSA PRIVATE KEY-----\n" +        "MIIBvAIBAAKBgQD9f1OBHXUSKVLfSpwu7OTn9hG3UjzvRADDHj+AtlEmaUVdQCJR\n" +        "+1k9jVj6v8X1ujD2y5tVbNeBO4AdNG/yZmC3a5lQpaSfn+gEexAiwk+7qdf+t8Yb\n" +        "+DtX58aophUPBPuD9tPFHsMCNVQTWhaRMvZ1864rYdcq7/IiAxmd0UgBxwIVAJdg\n" +        "UI8VIwvMspK5gqLrhAvwWBz1AoGBAPfhoIXWmz3ey7yrXDa4V7l5lK+7+jrqgvlX\n" +        "TAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZxI+hMKBYTt88JMozIpuE8FnqLVHyNKOCj\n" +        "rh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6oUZCJqIPf4VrlnwaSi2ZegHtVJWQB\n" +        "TDv+z0kqAoGBAIb9o0KPsjAdzjK571e1Mx7ZhEyJGrcxHiN2sW8IztEbqrKKiMxp\n" +        "NlTwm234uBdtzVHE3uDWZpfHPMIRmwBjCYDFRowWWVRdhdFXZlpCyp1gMWqJ11dh\n" +        "3FI3+O43DevRSyyuLRVCNQ1J3iVgwY5ndRpZU7n6y8DPH4/4EBT7KvnVAhR4Vwun\n" +        "Fhu/+4AGaVeMEa814I3dqg==\n" +        "-----END DSA PRIVATE KEY-----")    p, _ := ssh.ParseRawPrivateKey(pemData)    pp := p.(*dsa.PrivateKey)    hashed := []byte{1}    sha256 := sha256.New()    sha256.Write(hashed)    hashed = sha256.Sum(nil)    r, s, _ := dsa.Sign(rand.Reader, pp, hashed)    type dsaSignature struct {        R, S *big.Int    }    var ss dsaSignature    ss.S = s    ss.R = r    signatureBytes, _ := asn1.Marshal(ss)    fmt.Println(hex.EncodeToString(signatureBytes))}

Answer 1

如果发生这种情况，请遵循 FIPS186-4 第 4.6 节和第 4.7 节

hashed := []byte{1}

pemData, _ := ioutil.ReadFile("config/secure/private.key")

p, err := ssh.ParseRawPrivateKey(pemData)

pp, ok := p.(*dsa.PrivateKey)

h := sha256.New()

h.Write(hashed)

hashed := h.Sum(nil)

if pp.Q.BitLen()/8 < len(hashed) {

    hashed = hashed[0 : pp.Q.BitLen()/8]

}

r, s, _ := dsa.Sign(rand.Reader, pp, hashed)

var ss dsaSignature

ss.S = s

ss.R = r

hashed, _ = asn1.Marshal(ss)

Answer 2

我在爪哇中发现

package sun.security.provider;

private BigInteger generateS(BigInteger var1, BigInteger var2, BigInteger var3, BigInteger var4) throws SignatureException {

        byte[] var5;

        try {

            var5 = this.md.digest();

        } catch (RuntimeException var9) {

            throw new SignatureException(var9.getMessage());

        }

        // this line split the hash256 redsult

        int var6 = var2.bitLength() / 8;

        if (var6 < var5.length) {

            var5 = Arrays.copyOfRange(var5, 0, var6);

        }

        BigInteger var7 = new BigInteger(1, var5);

        BigInteger var8 = var4.modInverse(var2);

        return var1.multiply(var3).add(var7).multiply(var8).mod(var2);

}

你可以在戈朗使用

    hashed := []byte{1}

    sha256 := sha2562.New()

    sha256.Write(hashed)

    hashed = sha256.Sum(nil)

    // you must split it 

    hashed = hashed[0:20]

原因是sha256结果在java中分裂，但glang没有分裂