.Net Core對接Java密鑰，使用RS256演算法實作加簽、摘要、JWT驗簽

本文主要講述.Net Core對接Java密鑰，使用RS256演算法實作加簽、摘要、驗簽，也是參考了網上的一些資料，

首先，java平臺下的公鑰和私鑰，均采用的是base64String格式，而.net 平臺下的，使用的是xmlString格式，所以第一步要實作這兩者之間的轉換，

我這里使用了一個常用的加密和解密的包：BouncyCastle.NetCore，github地址，大家可以去star一下，對.net core好的專案要支持和加油，

dotnet add package BouncyCastle.NetCore

1、.NetCore密鑰與Java密鑰間轉換

    public static string PrivateKeyDotNet2Java(string dotNetXmlPrivateKey)
    {
      string result = string.Empty;
      using (RSACryptoServiceProvider rsa = new RSACryptoServiceProvider())
      {
        rsa.FromXmlString(dotNetXmlPrivateKey);
        RSAParameters p = rsa.ExportParameters(true);
        RsaPrivateCrtKeyParameters privateKeyParam = new RsaPrivateCrtKeyParameters(
            new BigInteger(1, p.Modulus), new BigInteger(1, p.Exponent),
            new BigInteger(1, p.D), new BigInteger(1, p.P),
            new BigInteger(1, p.Q), new BigInteger(1, p.DP),
            new BigInteger(1, p.DQ), new BigInteger(1, p.InverseQ)
        );
        PrivateKeyInfo privateKeyInfo = PrivateKeyInfoFactory.CreatePrivateKeyInfo(privateKeyParam);
        result = Convert.ToBase64String(privateKeyInfo.ToAsn1Object().GetEncoded());
      }
      return result;
    }

    public static string PublicKeyDotNet2Java(string publicKey)
    {
      string result = string.Empty;
      using (RSACryptoServiceProvider rsa = new RSACryptoServiceProvider())
      {
        rsa.FromXmlString(publicKey);
        RSAParameters p = rsa.ExportParameters(false);
        BigInteger m = new BigInteger(1, p.Modulus);
        BigInteger exp = new BigInteger(1, p.Exponent);

        RsaKeyParameters pub = new RsaKeyParameters(false, m, exp);

        SubjectPublicKeyInfo publicKeyInfo = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(pub);
        byte[] seriaPublicKey = publicKeyInfo.ToAsn1Object().GetEncoded();
        result = Convert.ToBase64String(seriaPublicKey);
      }
      return result;
    }

    public static string ToXmlPrivateKey(string privateKey)
    {
      RsaPrivateCrtKeyParameters privateKeyParams = PrivateKeyFactory.CreateKey(Convert.FromBase64String(privateKey)) as RsaPrivateCrtKeyParameters;
      using (RSACryptoServiceProvider rsa = new RSACryptoServiceProvider())
      {
        RSAParameters rsaParams = new RSAParameters()
        {
          Modulus = privateKeyParams.Modulus.ToByteArrayUnsigned(),
          Exponent = privateKeyParams.PublicExponent.ToByteArrayUnsigned(),
          D = privateKeyParams.Exponent.ToByteArrayUnsigned(),
          DP = privateKeyParams.DP.ToByteArrayUnsigned(),
          DQ = privateKeyParams.DQ.ToByteArrayUnsigned(),
          P = privateKeyParams.P.ToByteArrayUnsigned(),
          Q = privateKeyParams.Q.ToByteArrayUnsigned(),
          InverseQ = privateKeyParams.QInv.ToByteArrayUnsigned()
        };
        rsa.ImportParameters(rsaParams);
        return rsa.ToXmlString(true);
      }
    }

    public static string ToXmlPublicKey(string publicKey)
    {
      RsaKeyParameters p = PublicKeyFactory.CreateKey(Convert.FromBase64String(publicKey)) as RsaKeyParameters;
      using (RSACryptoServiceProvider rsa = new RSACryptoServiceProvider())
      {
        RSAParameters rsaParams = new RSAParameters()
        {
          Modulus = p.Modulus.ToByteArrayUnsigned(),
          Exponent = p.Exponent.ToByteArrayUnsigned()
        };
        rsa.ImportParameters(rsaParams);
        return rsa.ToXmlString(false);
      }
    }

2、私鑰簽名

    public static string SignByPrivateKey(string data, string privateKey)
    {
      AsymmetricKeyParameter priKey = PublicKeyFactory.CreateKey(Convert.FromBase64String(privateKey));
      byte[] byteData =https://www.cnblogs.com/lisweden/p/ Encoding.UTF8.GetBytes(data);

      ISigner normalSign = SignerUtilities.GetSigner("SHA256WithRSA");
      normalSign.Init(true, priKey);
      normalSign.BlockUpdate(byteData, 0, byteData.Length);
      string signResult = Convert.ToBase64String(normalSign.GenerateSignature());
      return signResult;
    }

3、SHA256生成摘要

    public static string GetSHA256Code(string data)
    {
      byte[] byteData =https://www.cnblogs.com/lisweden/p/ Encoding.UTF8.GetBytes(data);

      SHA256Managed sha256 = new SHA256Managed();
      byte[] sha256Data =https://www.cnblogs.com/lisweden/p/ sha256.ComputeHash(byteData);
      string result = Convert.ToBase64String(sha256Data);

      return result;
    }

4、JWT Token 簽名驗證 //SHA256

    public static bool JWTStringVerifySign(string jwtToken, string pubKey, out string errMsg)
    {
      errMsg = string.Empty;
      try
      {
        string[] jwtArray = jwtToken.Split(',');
        string signature = jwtArray[2];
        byte[] data = https://www.cnblogs.com/lisweden/p/Encoding.UTF8.GetBytes(string.Concat(jwtArray[0], ".", jwtArray[1]));
        string safeSignature = DecodeBase64SafeUrl(signature); //安全URL解碼
        byte[] signatureData =https://www.cnblogs.com/lisweden/p/ Convert.FromBase64String(safeSignature);

        RsaKeyParameters p = PublicKeyFactory.CreateKey(Convert.FromBase64String(pubKey)) as RsaKeyParameters;
        using (RSACryptoServiceProvider rsa = new RSACryptoServiceProvider())
        {
          RSAParameters rsaParams = new RSAParameters()
          {
            Modulus = p.Modulus.ToByteArrayUnsigned(),
            Exponent = p.Exponent.ToByteArrayUnsigned()
          };
          rsa.ImportParameters(rsaParams);
          bool result = rsa.VerifyData(data, signatureData, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);
          return result;
        }
      }
      catch (Exception ex)
      {
        errMsg = ex.Message + ex.StackTrace;
        return false;
      }
    }

    public static string DecodeBase64SafeUrl(string data)
    {
      data = data.Replace("-", "+").Replace("_", "/");
      int len = data.Length % 4;
      if (len > 0)
      {
        data += "====".Substring(0, 4 - len);
      }
      return data;
    }

5、生成.Net Core密鑰

    public static Tuple<string, string> CreateRsaPublicKey(int keySize = 2048)
    {
      RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(keySize);
      string privateKey = rsa.ToXmlString(true);
      string publicKey = rsa.ToXmlString(false);

      string javaPrivateKey = PrivateKeyDotNet2Java(privateKey);
      string javaPublicKey = PublicKeyDotNet2Java(publicKey);

      return new Tuple<string, string>(javaPublicKey, javaPrivateKey);
    }

收工！

如果本文對你有幫助，請點一下推薦就是對博主最大的支持！

轉載請注明出處！不注明也只有你自已知道！

標籤：.NET Core

上一篇：最詳細之教你Jenkins+github自動化部署.Net Core程式到Docker

下一篇：物件池在 .NET (Core)中的應用[1]: 編程篇