HarmonyOS RSA加密算法实现

实现一套跟其他系统相同的RSA加密算法功能。
目前在复刻APP，其中有一个本地RAS加密功能无法实现，该加密功能在APP中比不可少，很多跟后台的接口交互都要用到，否则APP就无法使用。
希望可以再HarmonyOS 系统上实现该工具类的功能，完成public String encryptPwd(String publicKey, String pwd)方法。
HarmonyOS
Heiang
2024-12-25 08:46:20
浏览
回答 1
按赞同
按时间
zxjiu
demo实例如下
import { cryptoFramework } from '@kit.CryptoArchitectureKit';
import { buffer, util } from '@kit.ArkTS';

@Entry
@Component
struct RSAOAEPCrypto {
  @State message: string = '点击开始';

  build() {
    Row() {
      Column() {
        Text(this.message)
          .fontSize(50)
          .fontWeight(FontWeight.Bold)
          .onClick(() => {
            RSAOAEP()
          })
      }
      .width('100%')
    }
    .height('100%')
  }
}

// 生成RSA密钥对
async function genKeyPairByData(pubKeyData: Uint8Array, priKeyData: Uint8Array) {
  let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKeyData };
  let priKeyBlob: cryptoFramework.DataBlob = { data: priKeyData };
  let rsaGenerator = cryptoFramework.createAsyKeyGenerator('RSA2048');
  let keyPair = await rsaGenerator.convertKey(pubKeyBlob, priKeyBlob);
  console.error('convertKey success');
  return keyPair;
}

async function RSAOAEP() {
  // 获得RSA密钥对密钥参数对象
let pkData = "-----BEGIN PUBLIC KEY-----\n" +
  "MIIBIjANBgkqhkiG9w0BAQEFxxxxxxxCgKCAQEAr+q/H5DxV1etGxTNWtns\n" +
  "xmVkiAKVPEcejoNT2xObwsQ/xxxxxxxkIY3Yd63S3RFcdmlIy4NFEg+ccrqpu\n" +
  "4z/Zi0AHELDk28WxMxLj1tr7xxxxxxxjpzyRW/6Cm9RMfGtASiJFmARlQiVaZ+f\n" +
  "/QemObAJfnJLEbqOJeIh6byJxxxxxxxVqaK/2n+1hBsfcFq8OAAXG3fMOVipOSNc\n" +
  "raL6FxPrZ2iVS6OvbTV2PmiFxxxxxxxPVNj1Nfe3Gc2W7q/NRkMFWfhOg5zO7YRd\n" +
  "eR4t8ZlOdURpKyIwRKiBDXxxxxxxxxxwu7RqWC2/9XB1exP9N8A4PMCTLnweljEc\n" +
  "ewIDAQAB\n" +
  "-----END PUBLIC KEY-----"

let skData = "-----BEGIN PRIVATE KEY-----\n" +
  "MIIEvAIBADANBgkqhxxxxxxxxxYwggSiAgEAAoIBAQCv6r8fkPFXV60b\n" +
  "FM1a2ezGZWSIApU8xxxxxxxxxxCxD9ZOrtG04BQ6Qhjdh3rdLdEVx2aUjLg0USD\n" +
  "5xyuqm7jP9mLQAcQxxxxxxxW2vujP9/QNvKOnPJFb/oKb1Ex8a0BKIkWYBGV\n" +
  "CJVpn5/9B6Y5sAlxxxxxxxxxHpvIn91QJZMhWpor/af7WEGx9wWrw4ABcbd8w5\n" +
  "WKk5I1ytovoXE+tnxxxxxxxxxxxxxxXY+aIXw9TgpIg9U2PU197cZzZbur81GQwVZ+E6D\n" +
  "nM7thF15Hi3xmU5xxxxxxxxxxxxxxfH2NR51qCzC7tGpYLb/1cHV7E/03wDg8wJMu\n" +
  "fB6WMRx7AgMBAAECggxxxxxxxxxxxxxxxgb3j62ZbzKj9x7iouUtzrec2NBBdcgWPE\n" +
  "IWWYi/c/Q6mgJO+qbxxxxxxxxxxxxoAF4F2/KbQh06wCXixAzQ9ZX5E6rLhV+G\n" +
  "LkwStMIguS0268kv9xxxxxxxxxxxxxxx9uCxwTr2cy11YYdGz0261xacykKBiBvXPxxba\n" +
  "QQe1WMR4sHpOHKEUN3xxxxxxxxxxxxxqYiTiHvc605PA3rReoG10D8klVtxZAQMlxI\n" +
  "eiqUpneAxqsw97x+uYxxxxxxxxxxxxxxxx4ZygbrM6FIG6HBYC/zlIPWHWxc7ym45OA\n" +
  "jsI0QxPky5KzKU/VtMxxxxxxxxxxxxxxxQ9dpIrw6GvB+QKBgQDfdzgSDMj6mOqhE8ZC\n" +
  "/D4on14SPvyX0e29ZzSbxxxxxxxxxxxxxxxxOK2sQpunO8K8ZSLo3YhdzVkJkF3RLwzAu\n" +
  "VExg4seeZhQLsiw9Nmwdxxxxxxxxxxxxxxzw+a/Uo2lOpML9sFqw9ywxegDS9Xxq\n" +
  "Iq0x3pfoiq4YaIbPXZYQxxxxxxxxxxxxxxxxxdT+6kVcyh0tKgsxu2GTcL0XYaiU5uI\n" +
  "YkkWoTdOI+x/nBIusypxxxxxxxxxxxxxxxxxxg+SvbLtYP/QpserXxjOrCoXN5thNX\n" +
  "hYjGzYqp2siE0Rz4rawuxxxxxxxxxxxxxxxxxw70Lp7Pd1zhLCpYxN1w041qDu9D\n" +
  "s38osNIbbwKBgB6XpxxxxxxxxxxxxxxxxxmKDfEHXXAaWXK8DePCl8BuP13kcSLev6\n" +
  "rbGd6CxYbuA7QKMMXsF/xxxxxxxxxxxxxfmRVJ5bbyqq/PaczqCF2grZjWdUD7cKD\n" +
  "UNV8mUG3DVei3r70QbYwYxxxxxxxxxxxxxxxDhQpquskvEx5sUOham4yjFVBxAoGAPems\n" +
  "dIquKX7VgPU3bXo34rjlxxxxxxxxxxxxxxxxxxpkoyoLS12l1VI+KggQe3YFk8MGYonRy\n" +
  "AgXK6W18KjFNEIKqfukR/nVxxxxxxxxxxxxxxATip+y/8KbYO9kCcGOu9ZliX3W7nL\n" +
  "OL7uCyp/c7FyAWN2JwtkFJOxxxxxxxxxxxxxxxxxxxxxx9ETVUCgYBqH8eXUsGuu6HmzFgkgKZ/\n" +
  "w+nnFQNoNUgWQyD7ahxSgIxxxxxxxxxxxxxxx1GiYh2xYn7MjKBpKaikLBuSA/8V2+tp\n" +
  "+t20QNGzTEBtz1+u4QoHNMlxxxxxxxxxnsraypYCurgL0twMZxmLq1d5pR2yL74CQ\n" +
  "nuLkoZ5CforupRMjEaxPDw==\n" +
  "-----END PRIVATE KEY-----";

  try {
    let asyKeyGenerator = cryptoFramework.createAsyKeyGenerator('RSA1024');
    let keyPairData = asyKeyGenerator.convertPemKeySync(pkData, skData);
    if (keyPairData != null) {
      console.error('[Sync]: convert pem key pair success');
    } else {
      console.error("[Sync]: convert pem key pair result fail!");
    }

    let priPemKey = keyPairData.priKey;
    let pubPemKey = keyPairData.pubKey;
    // pem生成公私密钥字符串
    let priString = priPemKey.getEncodedPem('PKCS8');
    let pubString = pubPemKey.getEncodedPem('X509');
    // 去除字符串 -----BEGIN PRIVATE KEY-----
    let priB = priString.replace("-----BEGIN PRIVATE KEY-----", "")
    let pubB = pubString.replace("-----BEGIN PUBLIC KEY-----", "")
    // 去除字符串 -----END PRIVATE KEY-----
    let priE = priB.replace("-----END PRIVATE KEY-----", "")
    let pubE = pubB.replace("-----END PUBLIC KEY-----", "")
    // 去除换行符
    let pri = priE.replaceAll("\n", "")
    let pub = pubE.replaceAll("\n", "")

    console.info("[Sync]TestPkcs1ToPkcs8BySync pripripri output is " + pri);
    console.info("[Sync]TestPkcs1ToPkcs8BySync pubpubpub output is " + pub);

    if (keyPairData != null) {
      console.info('[Sync]: convert pem key pair success');
      // base64 转换器
      let base64 = new util.Base64Helper();
      // base64 转码
      let base64pkData = base64.decodeSync(pub);
      let base64skData = base64.decodeSync(pri);

      let keyPair = await genKeyPairByData(base64pkData, base64skData);

      //明文
      let plan = "This is a test";

      // 根据RSA密钥对参数生成RSA密钥对
      let cipher = cryptoFramework.createCipher("RSA1024|PKCS1_OAEP|SHA256|MGF1_SHA1");
      let decoder = cryptoFramework.createCipher("RSA1024|PKCS1_OAEP|SHA256|MGF1_SHA1");
      // RSA加解密PKCS1-OAEP模式填充字节流P
      let pSource = new Uint8Array([1, 2, 3, 4]);
      let input: cryptoFramework.DataBlob = { data: new Uint8Array(buffer.from(plan, 'utf-8').buffer) };

      // 进行加密操作初始化
      cipher.initSync(cryptoFramework.CryptoMode.ENCRYPT_MODE, keyPair.pubKey, null);
      // get和set操作可以放在Cipher对象init之后，此处对cipher进行set和get操作
      cipher.setCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_PSRC_UINT8ARR, pSource);
      let retP = cipher.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_PSRC_UINT8ARR);
      // 比较get出来的P字节流与set进去的P字节流是否一致
      if (retP.toString() != pSource.toString()) {
        console.error("error init pSource" + retP);
      } else {
        console.error("pSource changed ==" + retP);
      }
      // 进行OAEP其他参数的get操作
      let md = cipher.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MD_NAME_STR);
      console.error("md == " + md);
      let mgf = cipher.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF_NAME_STR);
      console.error("mgf == " + mgf);
      let mgf1Md = cipher.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_MD_STR);
      console.error("mgf1Md == " + mgf1Md);
      let cipherDataBlob = cipher.doFinalSync(input);
      console.error('encrypt plainText: ' + base64.encodeToStringSync(cipherDataBlob.data));

      // get和set操作可以放在Cipher对象init之前，且与init之后等价，此处对decoder进行set和get操作
      decoder.setCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_PSRC_UINT8ARR, pSource);
      retP = decoder.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_PSRC_UINT8ARR);
      // 比较get出来的P字节流与set进去的P字节流是否一致
      if (retP.toString() != pSource.toString()) {
        console.error("error init pSource" + retP);
      } else {
        console.error("pSource changed ==" + retP);
      }

      // 进行OAEP其他参数的get操作
      md = decoder.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MD_NAME_STR);
      console.error("md == " + md);
      mgf = decoder.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF_NAME_STR);
      console.error("mgf == " + mgf);
      mgf1Md = decoder.getCipherSpec(cryptoFramework.CipherSpecItem.OAEP_MGF1_MD_STR);
      console.error("mgf1Md == " + mgf1Md);
      // 初始化解密操作
      decoder.initSync(cryptoFramework.CryptoMode.DECRYPT_MODE, keyPair.priKey, null);
      let decodeData = decoder.doFinalSync(cipherDataBlob);

      // Uint8Array 转 Base64 String
      let base64String = base64.encodeToStringSync(decodeData.data);
      console.error("base64 string:   "  + base64String);

      // 解密成功
      if (decodeData.data.toString() === input.data.toString()) {
        // Uint8Array 转 String字符串
        let textDecoder = util.TextDecoder.create('utf-8')
        let string = textDecoder.decodeWithStream(decodeData.data)
        console.error("oaep decrypt success:   "  + string);
      } else {
        console.error("oaep decrypt fail");
      }
    } else {
      console.error("[Sync]: convert pem key pair result fail!");
    }
  } catch (e) {
    console.error(`Sync error, ${e.code}, ${e.message}`);
  }
}
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141.
142.
143.
144.
145.
146.
147.
148.
149.
150.
151.
152.
153.
154.
155.
156.
157.
158.
159.
160.
161.
162.
163.
164.
165.
166.
167.
168.
169.
170.
171.
172.
173.
174.
175.
176.
177.
178.
179.
180.
181.
182.
183.
184.
2024-12-25 11:24:48
如何写精华回答，获更多曝光？
发布
51CTO

51CTO博客

51CTO学堂

HarmonyOS RSA加密算法实现

订阅鸿蒙技术特刊，精选内容抢先看
