nodejs rsa加密，lua rsa解密

一、私钥和公钥是要换行的，如果换行丢了，必然会解密失败，对比如下一个正确的公钥，一个错误的公钥

正确的：

错误的：

我们在界面输入公钥和私钥的时候，使用的控件一定要是多行控件，如果是单行输入框，那么会被强制当成一行，换行就丢失了，加解密自然会失败

二、nodejs用rsa加密，lua端rsa解密如何实现

node端:直接利用crypto进行处理

   const crypto = require('crypto');
   generateSign: function(data, privateKey) {
        console.log('sign——data')
        console.log(data)
        const sign = crypto.createSign('sha256').update(data, 'utf8');
        const sign2 = sign.sign(privateKey, 'base64');
        console.log('sign2')
        console.log(sign2)
        return sign2;
    },

lua端:先要对signature进行base64解密，然后再进行rsa验证，主要代码如下

local decode_base64 = ngx.decode_bas
local decodedBaseStr = decode_base64(signagure)
local alg = "RS256"
local r = rsa_crypt.alg_verify[alg](data, decodedBaseStr, rsaPubKey)
print("verify rsa")
print(r)

rsa_crypt.lua

#!/usr/local/bin/lua

local openssl_digest = require "openssl.digest"
local openssl_hmac = require "openssl.hmac"
local openssl_pkey = require "openssl.pkey"

return {

 alg_verify = {
    ["HS256"] = function(data, signature, key) return signature == alg_sign["HS256"](data, key) end,
    ["HS384"] = function(data, signature, key) return signature == alg_sign["HS384"](data, key) end,
    ["HS512"] = function(data, signature, key) return signature == alg_sign["HS512"](data, key) end,
    ["RS256"] = function(data, signature, key)
      local pkey_ok, pkey = pcall(openssl_pkey.new, key)
      assert(pkey_ok, "Consumer Public Key is Invalid")
      local digest = openssl_digest.new('sha256'):update(data)

      return pkey:verify(signature, digest)
    end,
    ["RS512"] = function(data, signature, key)
      local pkey_ok, pkey = pcall(openssl_pkey.new, key)
      assert(pkey_ok, "Consumer Public Key is Invalid")
      local digest = openssl_digest.new('sha512'):update(data)
      return pkey:verify(signature, digest)
    end,
    ["ES256"] = function(data, signature, key)
      local pkey_ok, pkey = pcall(openssl_pkey.new, key)
      assert(pkey_ok, "Consumer Public Key is Invalid")
      assert(#signature == 64, "Signature must be 64 bytes.")
      local asn = {}
      asn[1] = asn_sequence.resign_integer(string_sub(signature, 1, 32))
      asn[2] = asn_sequence.resign_integer(string_sub(signature, 33, 64))
      local signatureAsn = asn_sequence.create_simple_sequence(asn)
      local digest = openssl_digest.new('sha256'):update(data)
      return pkey:verify(signatureAsn, digest)
    end
  }

}

nodejs rsa加密，lua rsa解密

你可能感兴趣的:(nodejs rsa加密，lua rsa解密)