在android和go之间使用RSA

Question

在一个用go和android的聊天项目中，我想使用RSA进行加密我如何在 go 中创建私钥和公钥以发送到 android ？我尝试了很多方法，但在 android 中当我想解析公钥 Android 时给出错误  public static PublicKey stringToPublicKeytoserver(String publicKeyString)    {        try {            publicKeyString = publicKeyString.replace("-----BEGIN PUBLIC KEY-----", "");            publicKeyString = publicKeyString.replace("-----END PUBLIC KEY-----", "");            byte[] keyBytes = Base64.decode(publicKeyString, Base64.DEFAULT);            X509EncodedKeySpec spec = new X509EncodedKeySpec(keyBytes);            KeyFactory keyFactory = KeyFactory.getInstance(RSA);            serveruk=keyFactory.generatePublic(spec);            return serveruk;        } catch (NoSuchAlgorithmException | InvalidKeySpecException e) {            e.printStackTrace();            return null;        }    }安卓错误java.security.spec.InvalidKeySpecException：com.android.org.conscrypt.OpenSSLX509CertificateFactory$ParsingException：解析公钥时出错密钥生成   // Generate RSA Keys   miryanPrivateKey, err := rsa.GenerateKey(rand.Reader, 1024)   fatal(err)   // save PEM file   pemfile, err := os.Create("public.pem")   if err != nil {       fmt.Println(err)       os.Exit(1)   }   //publi := &miryanPrivateKey.PublicKey   // http://golang.org/pkg/encoding/pem/#Block   var pemkey = &pem.Block{       Type : "PUBLIC KEY",       Bytes : x509.MarshalPKCS1PublicKey(&miryanPrivateKey.PublicKey)}   err = pem.Encode(pemfile, pemkey)   if err != nil {       fmt.Println(err)       os.Exit(1)   }   pemfile.Close()   //and even i use function to convert toPKCS8   byt, _:= MarshalPKCS8PublicKey(&miryanPrivateKey.PublicKey)   var pemkey = &pem.Block{       Type : "PUBLIC KEY",       Bytes : byt}}我认为我的主要问题是，去使用 pkcs1 但 android 使用 pkcs8

Answer 1

我修复它 ！

我使用以下 Go 代码生成公钥和私钥：

/*

 * Genarate rsa keys.

*/

package main

import (

    "crypto/rand"

    "crypto/rsa"

    "crypto/x509"

    "encoding/gob"

    "encoding/pem"

    "fmt"

    "os"

)

func main() {

    reader := rand.Reader

    bitSize := 2048

    key, err := rsa.GenerateKey(reader, bitSize)

    checkError(err)

    publicKey := key.PublicKey

    saveGobKey("private.key", key)

    savePEMKey("private.pem", key)

    saveGobKey("public.key", publicKey)

    savePublicPEMKey("public.pem", publicKey)

}

func saveGobKey(fileName string, key interface{}) {

    outFile, err := os.Create(fileName)

    checkError(err)

    defer outFile.Close()

    encoder := gob.NewEncoder(outFile)

    err = encoder.Encode(key)

    checkError(err)

}

func savePEMKey(fileName string, key *rsa.PrivateKey) {

    outFile, err := os.Create(fileName)

    checkError(err)

    defer outFile.Close()

    var privateKey = &pem.Block{

        Type:  "PRIVATE KEY",

        Bytes: x509.MarshalPKCS1PrivateKey(key),

    }

    err = pem.Encode(outFile, privateKey)

    checkError(err)

}

func savePublicPEMKey(fileName string, pubkey rsa.PublicKey) {

    asn1Bytes, err := x509.MarshalPKIXPublicKey(&pubkey)

    checkError(err)

    var pemkey = &pem.Block{

        Type:  "PUBLIC KEY",

        Bytes: asn1Bytes,

    }

    pemfile, err := os.Create(fileName)

    checkError(err)

    defer pemfile.Close()

    err = pem.Encode(pemfile, pemkey)

    checkError(err)

}

func checkError(err error) {

    if err != nil {

        fmt.Println("Fatal error ", err.Error())

        os.Exit(1)

    }

}

然后我用 GO 中生成的公钥在 android 中加密我的消息：

static PublicKey serveruk;

public final static String chi="RSA/ECB/OAEPPadding";

public final static String RSA = "RSA";

private final static int CRYPTO_BITS = 512;

String pubPEM = "public key from public.pem";

@Override

protected void onCreate(Bundle savedInstanceState) {

    super.onCreate(savedInstanceState);

    setContentView(R.layout.activity_main);

    stringToPublicKeytoserver(pubPEM);

    Log.e("ENCODED", enc4golang("Please hide me !"));

}

public static PublicKey stringToPublicKeytoserver(String publicKeyString)

{

    try {

        publicKeyString = publicKeyString.replace("-----BEGIN PUBLIC KEY-----", "");

        publicKeyString = publicKeyString.replace("-----END PUBLIC KEY-----", "");

        byte[] keyBytes = Base64.decode(publicKeyString, Base64.DEFAULT);

        X509EncodedKeySpec spec = new X509EncodedKeySpec(keyBytes);

        KeyFactory keyFactory = KeyFactory.getInstance(RSA);

        serveruk=keyFactory.generatePublic(spec);

        return serveruk;

    } catch (NoSuchAlgorithmException | InvalidKeySpecException e) {

        e.printStackTrace();

        return null;

    }

}

private static byte[] enc4golang(String text, PublicKey pubRSA) throws Exception{

    Cipher cipher = Cipher.getInstance(chi);

    cipher.init(Cipher.ENCRYPT_MODE, pubRSA);

    return cipher.doFinal(text.getBytes("UTF-8")); //i also advice you to use: .getBytes("UTF-8"); instead of data.getBytes();

}

public final static String enc4golang(String text){

    try {

        return Base64.encodeToString(enc4golang(text, serveruk) ,Base64.DEFAULT);  //send this string to golang

    }

    catch(Exception e)

    {

        e.printStackTrace();

    }

    return null;

}

然后我用这个 GO 代码解密它：

package main

import (

    "crypto/rand"

    "crypto/rsa"

    "crypto/sha1"

    "crypto/x509"

    "encoding/base64"

    "encoding/pem"

)

func main(){

    const priPEM = `private key from private.pem`

    const pubPEM = `public key from public.pem`

    base64DecodeBytes, err := base64.StdEncoding.DecodeString("encrypted data from android")

    if err != nil {

        panic(err)

    }

    privateKeyBlock, _ := pem.Decode([]byte(priPEM))

    var pri *rsa.PrivateKey

    pri, parseErr := x509.ParsePKCS1PrivateKey(privateKeyBlock.Bytes)

    if parseErr != nil {

        panic(parseErr)

    }

    decryptedData, decryptErr := rsa.DecryptOAEP(sha1.New(), rand.Reader, pri, base64DecodeBytes, nil)

    if decryptErr != nil {

        panic(decryptErr)

    }

    print(string(decryptedData))

}