From 42ccef7dcab59c2d2b7889ffda1308460581b9df Mon Sep 17 00:00:00 2001 From: TRHX Date: Fri, 15 Mar 2024 01:05:32 +0800 Subject: [PATCH] add: rsa convert key python algorithm --- .../07.rsa.md" | 260 ++++++++++++++++-- 1 file changed, 241 insertions(+), 19 deletions(-) diff --git "a/docs/03.\350\276\205\345\212\251\346\237\245\350\257\242/04.\345\212\240\345\257\206\347\256\227\346\263\225/07.rsa.md" "b/docs/03.\350\276\205\345\212\251\346\237\245\350\257\242/04.\345\212\240\345\257\206\347\256\227\346\263\225/07.rsa.md" index 8b7db913..8a17e23c 100644 --- "a/docs/03.\350\276\205\345\212\251\346\237\245\350\257\242/04.\345\212\240\345\257\206\347\256\227\346\263\225/07.rsa.md" +++ "b/docs/03.\350\276\205\345\212\251\346\237\245\350\257\242/04.\345\212\240\345\257\206\347\256\227\346\263\225/07.rsa.md" @@ -1072,10 +1072,227 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + + ```python + # ✅ 安装依赖 pip install pycryptodome，官方文档：https://pycryptodome.readthedocs.io/ + + # ❌ 密钥输出格式不支持 jwk + # ❌ 公钥不支持从 spki 标准转为 pkcs1 标准 + + from Crypto.PublicKey import RSA + + + def pkcs1_to_spki(public_key_pkcs1, output_format="DER"): + # 将 pkcs1 标准的公钥转换为 spki 标准，返回 der 或者 pem 格式的公钥 + public_key_pkcs1 = RSA.import_key(public_key_pkcs1) + public_key_spki = public_key_pkcs1.export_key(format=output_format.upper()) + return public_key_spki.decode() + + + def pkcs1_to_pkcs8(private_key_pkcs1, output_format="DER"): + # 将 pkcs1 标准的私钥转换为 pkcs8 标准，返回 der 或者 pem 格式的公钥 + private_key_pkcs1 = RSA.import_key(private_key_pkcs1) + private_key_pkcs8 = private_key_pkcs1.export_key(format=output_format.upper(), pkcs=8) + return private_key_pkcs8.decode() + + + def pkcs8_to_pkcs1(private_key_pkcs8, output_format="DER"): + # 将 pkcs8 标准的私钥转换为 pkcs1 标准，返回 der 或者 pem 格式的公钥 + private_key_pkcs8 = RSA.import_key(private_key_pkcs8) + private_key_pkcs1 = private_key_pkcs8.export_key(format=output_format.upper(), pkcs=1) + return private_key_pkcs1.decode() + + + # 注意 """ 之后要紧跟着密钥标头，如果换行可能会因为无法解析导致报错：ValueError: RSA key format is not supported + # pkcs1 标准 pem 格式的公钥 + public_key_pkcs1_pem = """-----BEGIN RSA PUBLIC KEY----- + MIGJAoGBALLA/aUElSxqvPUnlC4A8UaNh6txyrjlLshW4/wUgWZIBBbvp7yVj4Oi + C5mbbbyvOqElQNhkaeV8EF2rZqy9m5whs+jIx1tUdyJPJXLyZCNr3Q8t4sQyek6q + 1+imN6KUEIHrLveuYq1Lvmw3lt52vRzvWwucYV0EHSbx3G0b6hErAgMBAAE= + -----END RSA PUBLIC KEY----- + """ + + # pkcs1 标准 pem 格式的私钥 + private_key_pkcs1_pem = """-----BEGIN RSA PRIVATE KEY----- + MIICYAIBAAKBgQCywP2lBJUsarz1J5QuAPFGjYerccq45S7IVuP8FIFmSAQW76e8 + lY+DoguZm228rzqhJUDYZGnlfBBdq2asvZucIbPoyMdbVHciTyVy8mQja90PLeLE + MnpOqtfopjeilBCB6y73rmKtS75sN5bedr0c71sLnGFdBB0m8dxtG+oRKwIDAQAB + AoGADOrlaYdrQEp2XUD+9FQdG3we0cTnYXUubEvbLdxNfZa2tPGcrYQhWuHa9L7G + r1v6YKrQhNK81Fii1iIMvBnzkVIakhSYvC294yyEZG+fYJcXuZWzoF0+YUrlFP0b + vG5JOpDcUN4YG+tG924AbhyPL0AJkX0BEElSWaFhVtnTxAECRQC4fMLIzE2hCq9F + UmR59YDSHasPUVDWuq0eXG+P/0Kp9x5ZUDjZcojcBhpsJBQbx9P4ygyiYj4uUw3O + SA8X/fZHxqmg/QI9APgLR5Uz5Veaj1PguhkoKB3384PnrrKoFD+wgc6H7Qib9aKG + KT0x5dKswZefyE/PF+Qi7hMWiO18FK2HRwJEb/eQREvyhV21uE3kGzzL3ToSWq6Q + cHJFpVqWfv9+Fyea7LvKdPaVZ2vw11ciOSYTWThPaLJVaMoRY/PJ7Va+BRvmUYUC + PQCO06fnYReZRxVq3gcqvzXCc+kTtg+hLilitxc3vosdnvhlGk2awCWvFuzuiwID + +qKuKfLeqOY1oXIirbcCRGtG4PspKLAQMO6jI7bFUc5if9UKo6TGeu39E3qtv4jW + NW6qObPBJ9R1gurMqPUT9g630xjZdZxz6ac9Z7FfgjpMV0Fe + -----END RSA PRIVATE KEY----- + """ + + # 转换公钥：pkcs1 => spki + public_key_spki_pem = pkcs1_to_spki(public_key_pkcs1_pem, output_format="pem") + + # 转换私钥：pkcs1 => pkcs8 + private_key_pkcs8_pem = pkcs1_to_pkcs8(private_key_pkcs1_pem, output_format="pem") + + print("公钥转换 pkcs1 => spki:\n\n", public_key_spki_pem) + print("\n私钥转换 pkcs1 => pkcs8:\n\n", private_key_pkcs8_pem) + + """ + 公钥转换 pkcs1 => spki: + + -----BEGIN PUBLIC KEY----- + MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCywP2lBJUsarz1J5QuAPFGjYer + ccq45S7IVuP8FIFmSAQW76e8lY+DoguZm228rzqhJUDYZGnlfBBdq2asvZucIbPo + yMdbVHciTyVy8mQja90PLeLEMnpOqtfopjeilBCB6y73rmKtS75sN5bedr0c71sL + nGFdBB0m8dxtG+oRKwIDAQAB + -----END PUBLIC KEY----- + + 私钥转换 pkcs1 => pkcs8: + + -----BEGIN PRIVATE KEY----- + MIICegIBADANBgkqhkiG9w0BAQEFAASCAmQwggJgAgEAAoGBALLA/aUElSxqvPUn + lC4A8UaNh6txyrjlLshW4/wUgWZIBBbvp7yVj4OiC5mbbbyvOqElQNhkaeV8EF2r + Zqy9m5whs+jIx1tUdyJPJXLyZCNr3Q8t4sQyek6q1+imN6KUEIHrLveuYq1Lvmw3 + lt52vRzvWwucYV0EHSbx3G0b6hErAgMBAAECgYAM6uVph2tASnZdQP70VB0bfB7R + xOdhdS5sS9st3E19lra08ZythCFa4dr0vsavW/pgqtCE0rzUWKLWIgy8GfORUhqS + FJi8Lb3jLIRkb59glxe5lbOgXT5hSuUU/Ru8bkk6kNxQ3hgb60b3bgBuHI8vQAmR + fQEQSVJZoWFW2dPEAQJFALh8wsjMTaEKr0VSZHn1gNIdqw9RUNa6rR5cb4//Qqn3 + HllQONlyiNwGGmwkFBvH0/jKDKJiPi5TDc5IDxf99kfGqaD9Aj0A+AtHlTPlV5qP + U+C6GSgoHffzg+eusqgUP7CBzoftCJv1ooYpPTHl0qzBl5/IT88X5CLuExaI7XwU + rYdHAkRv95BES/KFXbW4TeQbPMvdOhJarpBwckWlWpZ+/34XJ5rsu8p09pVna/DX + VyI5JhNZOE9oslVoyhFj88ntVr4FG+ZRhQI9AI7Tp+dhF5lHFWreByq/NcJz6RO2 + D6EuKWK3Fze+ix2e+GUaTZrAJa8W7O6LAgP6oq4p8t6o5jWhciKttwJEa0bg+yko + sBAw7qMjtsVRzmJ/1QqjpMZ67f0Teq2/iNY1bqo5s8En1HWC6syo9RP2DrfTGNl1 + nHPppz1nsV+COkxXQV4= + -----END PRIVATE KEY----- + """ + + ``` - + + ```python + # ✅ 安装依赖 pip install cryptography，要求 Python 3.7+，官方文档：https://cryptography.io/ + + # ❌ 密钥输出格式不支持 jwk + # ❌ 私钥不支持从 pkcs8 标准转为 pkcs1 标准 + + from cryptography.hazmat.primitives import serialization + from cryptography.hazmat.primitives.serialization import load_pem_public_key, load_pem_private_key + + + def pkcs1_to_spki(public_key_pkcs1, output_format="DER"): + # 将 pkcs1 标准的公钥转换为 spki 标准，返回 der 或者 pem 格式的公钥 + if output_format.upper() == "DER": + encoding = serialization.Encoding.DER + else: + encoding = serialization.Encoding.PEM + public_key_pkcs1 = load_pem_public_key(public_key_pkcs1.encode()) + public_key_spki = public_key_pkcs1.public_bytes( + encoding=encoding, + format=serialization.PublicFormat.SubjectPublicKeyInfo + ) + return public_key_spki.decode() + + + def spki_to_pkcs1(public_key_spki, output_format="DER"): + # 将 spki 标准的公钥转换为 pkcs1 标准，返回 der 或者 pem 格式的公钥 + if output_format.upper() == "DER": + encoding = serialization.Encoding.DER + else: + encoding = serialization.Encoding.PEM + public_key_spki = load_pem_public_key(public_key_spki.encode()) + public_key_pkcs1 = public_key_spki.public_bytes( + encoding=encoding, + format=serialization.PublicFormat.SubjectPublicKeyInfo + ) + return public_key_pkcs1.decode() + + + def pkcs1_to_pkcs8(private_key_pkcs1, output_format="DER"): + # 将 pkcs1 标准的私钥转换为 pkcs8 标准，返回 der 或者 pem 格式的公钥 + if output_format.upper() == "DER": + encoding = serialization.Encoding.DER + else: + encoding = serialization.Encoding.PEM + private_key_pkcs1 = load_pem_private_key(private_key_pkcs1.encode(), password=None) # 可选参数 password，指定私钥的密码 + private_key_pkcs8 = private_key_pkcs1.private_bytes( + encoding=encoding, + format=serialization.PrivateFormat.PKCS8, + encryption_algorithm=serialization.NoEncryption() # 可选参数 encryption_algorithm，指定私钥的加密算法 + ) + return private_key_pkcs8.decode() + + + # spki 标准 pem 格式的公钥 + public_key_spki_pem = """-----BEGIN PUBLIC KEY----- + MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl7HWuXcOH9I/Bud7dplYxHOEC + D82fJv1WJKADhmILCxDLJLVkueBQfwUItPELF3RLhs+3+XNYfGiz7PPPhxV1pey5 + jrHT8zw8InrNRwlDeCyx/Q+ETpSpQImvILf0RBHtnOgVpb41uhKF24wGH4q7+faN + w6cBVKhFn+fuItSGfQIDAQAB + -----END PUBLIC KEY----- + """ + + # pkcs1 标准 pem 格式的私钥 + private_key_pkcs1_pem = """-----BEGIN RSA PRIVATE KEY----- + MIICXgIBAAKBgQCl7HWuXcOH9I/Bud7dplYxHOECD82fJv1WJKADhmILCxDLJLVk + ueBQfwUItPELF3RLhs+3+XNYfGiz7PPPhxV1pey5jrHT8zw8InrNRwlDeCyx/Q+E + TpSpQImvILf0RBHtnOgVpb41uhKF24wGH4q7+faNw6cBVKhFn+fuItSGfQIDAQAB + AoGBAKSmc1kmfoQJciZh1gDJsTpnV/l9ySQnwrma+pbE4cHnpzCPKtnbgfcfNNWh + CJljGupfyvzbs1SZkCUL/B1yBR3uAbWw5G0uzJo61wYciufnQA1/lu3JyEyLeSxb + eFOIkuI8Ce0SCPT01+6sR77EA0VtUA+0Ak7OI4EvElFPn0qBAkEA8SvKXG6suLFL + 9TjUH2B1XDwMxQFw7JOOhAyLcbNJMLgqMhHuqvTW/T4oxTQh7LbDMP977ZDnkmdt + L8S7zAHHsQJBALAgOFkbNNH4FzBQtxyWEu6+D0ZhvhIAIoH0pDBdoIO9vKalRgWy + vV6YsI3NujjBjz1p7g3Zb/zliA3vH9ieqo0CQQCdlOVmvBIzo/Vjx7wivF4y5DHb + z/M/QbMPaTr8Eg+yu8MmcD0oi06mriTppgS8rTahH26UbehB6z6Wxc+Hn2ohAkEA + r2GmOrToyBzvmmEFtiWK/MmtlDxIdMxFkHr39GGHMSiC7r6tF4eBIu2RAePWiCXW + aSVOs+PNrFs0PAvd/mshEQJAYpxilxZI7hJT89Qne6CgPXqqZf0sFX0FeR9AJaj1 + g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw== + -----END RSA PRIVATE KEY----- + """ + + # 转换公钥：spki => pkcs1 + public_key_pkcs1_pem = spki_to_pkcs1(public_key_spki_pem, output_format="pem") + + # 转换私钥：pkcs1 => pkcs8 + private_key_pkcs8_pem = pkcs1_to_pkcs8(private_key_pkcs1_pem, output_format="pem") + + print("公钥转换 spki => pkcs1:\n\n", public_key_pkcs1_pem) + print("私钥转换 pkcs1 => pkcs8:\n\n", private_key_pkcs8_pem) + + """ + 公钥转换 spki => pkcs1: + + -----BEGIN PUBLIC KEY----- + MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl7HWuXcOH9I/Bud7dplYxHOEC + D82fJv1WJKADhmILCxDLJLVkueBQfwUItPELF3RLhs+3+XNYfGiz7PPPhxV1pey5 + jrHT8zw8InrNRwlDeCyx/Q+ETpSpQImvILf0RBHtnOgVpb41uhKF24wGH4q7+faN + w6cBVKhFn+fuItSGfQIDAQAB + -----END PUBLIC KEY----- + + 私钥转换 pkcs1 => pkcs8: + + -----BEGIN PRIVATE KEY----- + MIICeAIBADANBgkqhkiG9w0BAQEFAASCAmIwggJeAgEAAoGBAKXsda5dw4f0j8G5 + 3t2mVjEc4QIPzZ8m/VYkoAOGYgsLEMsktWS54FB/BQi08QsXdEuGz7f5c1h8aLPs + 88+HFXWl7LmOsdPzPDwies1HCUN4LLH9D4ROlKlAia8gt/REEe2c6BWlvjW6EoXb + jAYfirv59o3DpwFUqEWf5+4i1IZ9AgMBAAECgYEApKZzWSZ+hAlyJmHWAMmxOmdX + +X3JJCfCuZr6lsThweenMI8q2duB9x801aEImWMa6l/K/NuzVJmQJQv8HXIFHe4B + tbDkbS7MmjrXBhyK5+dADX+W7cnITIt5LFt4U4iS4jwJ7RII9PTX7qxHvsQDRW1Q + D7QCTs4jgS8SUU+fSoECQQDxK8pcbqy4sUv1ONQfYHVcPAzFAXDsk46EDItxs0kw + uCoyEe6q9Nb9PijFNCHstsMw/3vtkOeSZ20vxLvMAcexAkEAsCA4WRs00fgXMFC3 + HJYS7r4PRmG+EgAigfSkMF2gg728pqVGBbK9Xpiwjc26OMGPPWnuDdlv/OWIDe8f + 2J6qjQJBAJ2U5Wa8EjOj9WPHvCK8XjLkMdvP8z9Bsw9pOvwSD7K7wyZwPSiLTqau + JOmmBLytNqEfbpRt6EHrPpbFz4efaiECQQCvYaY6tOjIHO+aYQW2JYr8ya2UPEh0 + zEWQevf0YYcxKILuvq0Xh4Ei7ZEB49aIJdZpJU6z482sWzQ8C93+ayERAkBinGKX + FkjuElPz1Cd7oKA9eqpl/SwVfQV5H0AlqPWDZz4H0aBn42i7id7hZeM5VRZm65yH + vKqfdejF5BPj/FoL + -----END PRIVATE KEY----- + """ + + ``` @@ -1083,10 +1300,10 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + - + @@ -1094,22 +1311,22 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + - + -## 加密/解密 +## 加密解密 ### Python
- + - + @@ -1117,10 +1334,10 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + - + @@ -1128,22 +1345,22 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + - + -## 签名/验签 +## 签名验签 ### Python
- + - + @@ -1151,7 +1368,7 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + @@ -1159,13 +1376,18 @@ g2c+B9GgZ+Nou4ne4WXjOVUWZuuch7yqn3XoxeQT4/xaCw==
- + - + ## 主要特征 +## 在线工具 + +- [在线 RSA 加解密](http://tools.jb51.net/password/rsa_encode) +- [公私钥格式在线转换](https://www.ssleye.com/ssltool/pkcs.html) + ## 常见问题