HarmonyOS huks怎么定义RSAPSS算法参数

huks怎么定义RSAPSS算法参数?

huks里怎么配置properties才能跟crypto中生成的这个秘钥是一样的,给个示例properties。

HarmonyOS
2025-01-10 08:04:40
浏览
收藏 0
回答 1
待解决
回答 1
按赞同
/
按时间
Heiang

RSA PSS的算法参数如下:

function getBiometricRSAKeyProperties(type: HuksKeyPurpose) {
  let properties: Array<huks.HuksParam> = new Array();
  // 算法秘钥 RSA
  properties[0] = {
    tag: huks.HuksTag.HUKS_TAG_ALGORITHM,
    value: huks.HuksKeyAlg.HUKS_ALG_RSA
  };
  // 秘钥长度 3072
  properties[1] = {
    tag: huks.HuksTag.HUKS_TAG_KEY_SIZE,
    value: huks.HuksKeySize.HUKS_RSA_KEY_SIZE_3072
  };
  if (type == (HuksKeyPurpose.HuksKeyPurposeSign | HuksKeyPurpose.HuksKeyPurposeVerify)) {
    // 秘钥目的 SIGN | VERIFY
    properties[2] = {
      tag: huks.HuksTag.HUKS_TAG_PURPOSE,
      value: huks.HuksKeyPurpose.HUKS_KEY_PURPOSE_SIGN | huks.HuksKeyPurpose.HUKS_KEY_PURPOSE_VERIFY
    };
  } else if (type == HuksKeyPurpose.HuksKeyPurposeSign) {
    // 秘钥目的 SIGN
    properties[2] = {
      tag: huks.HuksTag.HUKS_TAG_PURPOSE,
      value: huks.HuksKeyPurpose.HUKS_KEY_PURPOSE_SIGN
    };
  } else {
    // 秘钥目的 VERIFY
    properties[2] = {
      tag: huks.HuksTag.HUKS_TAG_PURPOSE,
      value: huks.HuksKeyPurpose.HUKS_KEY_PURPOSE_VERIFY
    };
  }
  // 补齐算法 PSS
  properties[3] = {
    tag: huks.HuksTag.HUKS_TAG_PADDING,
    value: huks.HuksKeyPadding.HUKS_PADDING_PSS
  };
  // 生成方式
  properties[4] = {
    tag: huks.HuksTag.HUKS_TAG_KEY_GENERATE_TYPE,
    value: huks.HuksKeyGenerateType.HUKS_KEY_GENERATE_TYPE_DEFAULT
  };
  // 摘要算法 SHA256
  properties[5] = {
    tag: huks.HuksTag.HUKS_TAG_DIGEST,
    value: huks.HuksKeyDigest.HUKS_DIGEST_SHA256
  };

  return properties;
}

示例properties:

// 获取RSA公钥
export async function getRSAPublicKey(keyAlias: string): Promise<Uint8Array | undefined> {
  await generateKeyPair(keyAlias);

  let keyProperties = getBiometricRSAKeyProperties(HuksKeyPurpose.HuksKeyPurposeSign | HuksKeyPurpose.HuksKeyPurposeVerify);
  let options: huks.HuksOptions = {
    properties: keyProperties,
  };

  try {
    let huksRet = await huks.exportKeyItem(keyAlias, options);
    return Promise.resolve(huksRet.outData);
  } catch (error) {
    Logger.error(JsonBigInt.stringify(error, undefined, undefined));
    return Promise.reject(error);
  }
}
// 创建RSA秘钥
export async function generateKeyPair(keyAlias: string): Promise {
  let keyProperties = getBiometricRSAKeyProperties(HuksKeyPurpose.HuksKeyPurposeSign | HuksKeyPurpose.HuksKeyPurposeVerify);
  let options: huks.HuksOptions = {
    properties: keyProperties,
  };
  try {
    await huks.generateKeyItem(keyAlias, options);
    Logger.info('generateRSAKey success');
    Promise.resolve();
  } catch (error) {
    Promise.reject();
  }
} 
分享
微博
QQ
微信
回复
2025-01-10 11:55:04
相关问题
huks密钥库导入自定义密钥
640浏览 • 1回复 待解决
HarmonyOS HmacSHA1 加密算法 参数问题
457浏览 • 1回复 待解决
HarmonyOS Huks isKeyItemExist 报错
568浏览 • 1回复 待解决
HarmonyOS huks支持子线程调用吗?
326浏览 • 1回复 待解决
HarmonyOS postjson接口参数如何定义
296浏览 • 1回复 待解决
Huks如何导入AES的密钥?
1122浏览 • 1回复 待解决
HarmonyOS定义编译构建参数
461浏览 • 1回复 待解决
HarmonyOS 路由跳转怎么接收参数
447浏览 • 1回复 待解决
HarmonyOS 异或算法
365浏览 • 1回复 待解决
HarmonyOS 摘要算法问题
234浏览 • 1回复 待解决
HarmonyOS HUKS 密钥证明根证书的问题
751浏览 • 1回复 待解决
HarmonyOS 怎么把组件作为参数传递
411浏览 • 1回复 待解决
HarmonyOS 加解密算法匹配
349浏览 • 1回复 待解决
HarmonyOS HmacSHA256算法
392浏览 • 1回复 待解决
HarmonyOS 国密算法API
799浏览 • 0回复 待解决
HUKS用户认证通过PIN生成密钥
1301浏览 • 1回复 待解决
HarmonyOS RSA算法如何使用
538浏览 • 1回复 待解决