密码技术--国密SM2椭圆曲线公钥密码算法及Go语言应用

Posted 2021-09-13 Yuan_sr

SM2椭圆曲线公钥密码算法

SM2算法和RSA算法都是公钥密码算法，SM2算法是一种更先进安全的算法，SM2是国家密码局与2010年12月17日发布的椭圆曲线公钥密码算法，在我们国家商用密码体系中被用来替换RSA算法。

SM2加解密

package main

import (
    "crypto/rand"
    "github.com/tjfoc/gmsm/sm2"
    "github.com/tjfoc/gmsm/x509"
    "os"
)

func GerenateSM2Key(){
    //1.生成sm2密钥对
    privateKey, err := sm2.GenerateKey(rand.Reader)
    if err != nil {
        panic(err)
    }
    //2.通过x509将私钥反序列化并进行pem编码
    privateKeyToPem, err := x509.WritePrivateKeyToPem(privateKey, nil)
    if err != nil {
        panic(err)
    }
    //3.将私钥写入磁盘文件
    file, err := os.Create("sm2Private.pem")
    if err != nil {
        panic(err)
    }
    defer file.Close()
    _, err = file.Write(privateKeyToPem)
    if err != nil {
        panic(err)
    }
    //4.进行SM2公钥断言
    publicKey := privateKey.Public().(*sm2.PublicKey)
    //5.将公钥通过x509序列化并进行pem编码
    publicKeyToPem, err := x509.WritePublicKeyToPem(publicKey)
    if err != nil {
        panic(err)
    }
    //6.将公钥写入磁盘文件
    file, err = os.Create("sm2Public.pem")
    if err != nil {
        panic(err)
    }
    defer file.Close()
    _, err = file.Write(publicKeyToPem)
    if err != nil {
        panic(err)
    }
}

//加密
func EncryptSM2(plainText []byte, pubFileName string) []byte {
    //1.打开公钥文件读取公钥
    file, err := os.Open(pubFileName)
    if err != nil {
        panic(err)
    }
    defer file.Close()
    fileInfo, err := file.Stat()
    if err != nil {
        panic(err)
    }
    buf := make([]byte, fileInfo.Size())
    _, err = file.Read(buf)
    if err != nil {
        panic(err)
    }
    //2.将pem格式公钥解码并反序列化
    publicKeyFromPem, err := x509.ReadPublicKeyFromPem(buf)
    if err != nil {
        panic(err)
    }
    //3.加密
    cipherText, err := publicKeyFromPem.EncryptAsn1(plainText, rand.Reader)
    if err != nil {
        panic(err)
    }
    return cipherText
}

//解密
func DecryptSM2(cipherText []byte, priFileName string) []byte {
    //1.打开私钥问价读取私钥
    file, err := os.Open(priFileName)
    if err != nil {
        panic(err)
    }
    defer file.Close()
    fileInfo, err := file.Stat()
    if err != nil {
        panic(err)
    }
    buf := make([]byte, fileInfo.Size())
    _, err = file.Read(buf)
    if err != nil {
        panic(err)
    }
    //2.将pem格式私钥文件解码并反序列话
    privateKeyFromPem, err := x509.ReadPrivateKeyFromPem(buf, nil)
    if err != nil {
        panic(err)
    }
    //3.解密
    planiText, err := privateKeyFromPem.DecryptAsn1(cipherText)
    if err != nil {
        panic(err)
    }
    return planiText
}

func main(){
    GerenateSM2Key()
    src := []byte("这是使用SM2椭圆曲线算法进行数据加解密测试")
    cipherText := EncryptSM2(src, "sm2Public.pem")
    plainText := DecryptSM2(cipherText, "sm2Private.pem")
    flag := bytes.Equal(plainText, src)
    fmt.Println("解密是否成功：", flag)
}

SM2签名验签

package main

import (
    "crypto/rand"
    "github.com/tjfoc/gmsm/sm2"
    "github.com/tjfoc/gmsm/x509"
    "os"
)

func GerenateSM2Key(){
    //1.生成sm2密钥对
    privateKey, err := sm2.GenerateKey(rand.Reader)
    if err != nil {
        panic(err)
    }
    //2.通过x509将私钥反序列化并进行pem编码
    privateKeyToPem, err := x509.WritePrivateKeyToPem(privateKey, nil)
    if err != nil {
        panic(err)
    }
    //3.将私钥写入磁盘文件
    file, err := os.Create("sm2Private.pem")
    if err != nil {
        panic(err)
    }
    defer file.Close()
    _, err = file.Write(privateKeyToPem)
    if err != nil {
        panic(err)
    }
    //4.进行SM2公钥断言
    publicKey := privateKey.Public().(*sm2.PublicKey)
    //5.将公钥通过x509序列化并进行pem编码
    publicKeyToPem, err := x509.WritePublicKeyToPem(publicKey)
    if err != nil {
        panic(err)
    }
    //6.将公钥写入磁盘文件
    file, err = os.Create("sm2Public.pem")
    if err != nil {
        panic(err)
    }
    defer file.Close()
    _, err = file.Write(publicKeyToPem)
    if err != nil {
        panic(err)
    }
}

//签名
func SignSM2(plainText []byte, priFileName string) []byte {
    //1.打开私钥问价读取私钥
    file, err := os.Open(priFileName)
    if err != nil {
        panic(err)
    }
    defer file.Close()
    fileInfo, err := file.Stat()
    if err != nil {
        panic(err)
    }
    buf := make([]byte, fileInfo.Size())
    _, err = file.Read(buf)
    if err != nil {
        panic(err)
    }
    //2.将pem格式私钥文件解码并反序列话
    privateKeyFromPem, err := x509.ReadPrivateKeyFromPem(buf, nil)
    if err != nil {
        panic(err)
    }
    //3.签名
    sign, err := privateKeyFromPem.Sign(rand.Reader, plainText, crypto.SHA256)
    if err != nil {
        panic(err)
    }
    return sign
}

//验签
func VerifySM2(plainText, signed []byte, pubFileName string) bool {
    //1.打开公钥文件读取公钥
    file, err := os.Open(pubFileName)
    if err != nil {
        panic(err)
    }
    defer file.Close()
    fileInfo, err := file.Stat()
    if err != nil {
        panic(err)
    }
    buf := make([]byte, fileInfo.Size())
    _, err = file.Read(buf)
    if err != nil {
        panic(err)
    }
    //2.将pem格式公钥解码并反序列化
    publicKeyFromPem, err := x509.ReadPublicKeyFromPem(buf)
    if err != nil {
        panic(err)
    }
    //3.验签
    verify := publicKeyFromPem.Verify(plainText, signed)
    return verify
}

func main(){
    src := []byte("这是使用SM2椭圆曲线算法进行的签名验签测试")
    signSM2 := SignSM2(src, "sm2Private.pem")
    flag := VerifySM2(src, signSM2, "sm2Public.pem")
    fmt.Println("验签结果：", flag)
}