PHP RSA 公钥 base64 编码 - PHP RSA-public key base64 encoding

我正在开发一个Web应用程序，我需要使用RSA公钥/私钥以加密方式与服务器通信。我在这样的文本文件中有一个公钥：

¨Ì�sr�java.math.BigIntegerå¸ü©;˚�I�bitCountIbitLengthI�firstNonzeroByteNumI�lowestSetBitI�signum[
�   magnitudet�[Bxr�java.lang.NumberÜ¨ïî‡ã��xpˇˇˇˇˇˇˇˇˇˇˇ˛ˇˇˇ˛���ur�[B¨Û¯T‡��xp���ØÕ..˛¶⁄
[í'‰∑S~ÆhU‚Ãu|ˆ*Ÿ"E˝x©àÚ†qçÎU¬òü`Oˇ?{q^⁄/O'•à%œÍ¬S� ∏íU$0≥i‹Hï™è>æ∑÷é˜ FVÚµ™ŒR=*ÑπGF%À¨Ëß¥Àüm‡(T¨‘Pq.ã3ˇ∑Ò;ªmÔ˙
C–„¿ç5åÌŒææ°4ån”®Å–MAQ’kÜì∑ÊË°ÂÅíîc»AÈ�
∫ıƒËv:eÚDÑØKv3Áq”cO´HÁzπ…ÅÔ©ˇwlWènö◊aAß° mÍ‡ïöH˚Æ)˛WeŸci·JbÜ q˙H£xsq�~��ˇˇˇˇˇˇˇˇˇˇˇ˛ˇˇˇ˛���uq�~����≠íi5˛¸¥Q‚í(2ûﬁΩL0ΩÅ≤ò`
÷…7¯ú)K´ºÎW2j·°Ø«¨X”gºŸ«lÇ8øÃ√3RÕ·ƒŸÚ¢ﬂ∆,ﬂr’X∆È|˚ì[Nﬂ%≈Búp·≤∑◊gπrõà–À≠˛`»Á†U„«¨ë+e|üæÄ®iLˇ⁄q¨@ä;…gRî>òvû+…U^ËÕdT∫|≠˙N"#zßø⁄+Å2ï¢=Nûe≠D˙§∞7X≥QPZ(Û`Ã-àÙ√ÿ÷Û˘£5[ŒÂ◊�IÄﬁV  bf´ÄÍÚ∫ê!*Ô´õD  »E˛˙úhiô{ì“åCZWœ-åWÊ6‘t·x

当我尝试对base64进行编码时，结果是：

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

这总是给我一个无效的公钥。当我尝试时：

openssl_public_encrypt($data, $encrypted_data, base64_encode($key), OPENSSL_PKCS1_PADDING);

我知道公钥必须以以下内容开头：

-----BEGIN PUBLIC KEY-----

并以以下结尾：

-----END PUBLIC KEY-----

我尝试使用：

"-----BEGIN PUBLIC KEY-----'r'n" . chunk_split(base64_encode($key)) . "'r'n-----END PUBLIC KEY-----";

但它仍然不起作用。任何人都可以提供任何帮助吗？

您需要

Java 代码将这些序列化的BigInteger值转换为私钥和公钥。base64 编码的二进制文件似乎包含两个序列化的 BigInteger 对象，即模数和私有指数（现已公开）。要检索 PEM 编码，最好依靠 Bouncy Castle 进行转换：

import java.io.BufferedInputStream;
import java.io.ByteArrayInputStream;
import java.io.ObjectInputStream;
import java.io.PrintWriter;
import java.math.BigInteger;
import java.security.InvalidKeyException;
import java.security.KeyFactory;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.SignatureException;
import java.security.spec.RSAPrivateKeySpec;
import java.security.spec.RSAPublicKeySpec;
import org.bouncycastle.openssl.PEMWriter;
import org.bouncycastle.util.encoders.Base64;
public class KeysFromSerializedBigIntegers {
    private static final String FROM_QUESTION = "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";
    public static void main(String[] args) throws Exception {
        byte[] binary = Base64.decode(FROM_QUESTION);
        ByteArrayInputStream bais = new ByteArrayInputStream(binary);
        BufferedInputStream bis = new BufferedInputStream(bais, 16);
        ObjectInputStream ois = new ObjectInputStream(bis);
        BigInteger modulus = null;
        BigInteger privExp = null;
        while (true) {
            bis.mark(16);
            if (bis.read() == -1) {
                bis.reset();
                break;
            }
            bis.reset();
            Object o = ois.readObject();
            if (o instanceof BigInteger) {
                BigInteger bi = (BigInteger) o;
                if (modulus == null) {
                    modulus = bi;
                } else if (privExp == null) {
                    privExp = bi;
                }
            }
        }
        KeyFactory rsaKeyFactory = KeyFactory.getInstance("RSA");
        RSAPrivateKeySpec rsaPrivateKeySpec = new RSAPrivateKeySpec(modulus,
                privExp);
        PrivateKey privateKey = rsaKeyFactory
                .generatePrivate(rsaPrivateKeySpec);
        BigInteger guessedPubExp = BigInteger.valueOf(0x010001);
        RSAPublicKeySpec rsaPublicKeySpec = new RSAPublicKeySpec(modulus,
                guessedPubExp);
        PublicKey publicKey = rsaKeyFactory.generatePublic(rsaPublicKeySpec);

        PEMWriter pemWriter = new PEMWriter(new PrintWriter(System.out));
        pemWriter.writeObject(privateKey);
        pemWriter.writeObject(publicKey);
        pemWriter.flush();
        test(privateKey, publicKey);
    }
    private static void test(PrivateKey privateKey, PublicKey publicKey)
            throws NoSuchAlgorithmException, InvalidKeyException,
            SignatureException {
        Signature rsa = Signature.getInstance("SHA512withRSA");
        rsa.initSign(privateKey);
        byte[] sig = rsa.sign();
        rsa.initVerify(publicKey);
        boolean verified = rsa.verify(sig);
        // prints true for this key pair
        System.out.println(verified);
    }
}

（注意：这甚至不符合我自己的代码实践）

这将导致：

所以你有它，一个 2048 位的 RSA 密钥对减去 CRT 参数。请注意，另一方至少应该使用 RSAPrivateKey.getEncoded() 和 RSAPublicKey.getEncoded() 而不是对象序列化。

感谢您在 Java 中的回复，它似乎有所帮助。

但是，为了完整起见，并帮助其他可能遇到此问题的人寻找PHP解决方案，我想在PHP中分享我的解决方案。

这并不意味着减少Java答案的有用性。

function encrypt($password, $publicKeyBase64String) {
    $publicKeyString = "-----BEGIN PUBLIC KEY-----'n" . $publicKeyBase64String . "'n-----END PUBLIC KEY-----";
    $publicKey = openssl_pkey_get_public($publicKeyString);
    openssl_public_encrypt($password, $encryptedPassword, $publicKey, OPENSSL_PKCS1_PADDING);
    return base64_encode($encryptedPassword);
}