以下脚本生成一对密钥，并在数据“ 123”上签名

def newkeys(keysize):

random_generator = Random.new().read

key = RSA.generate(keysize, random_generator)

private, public = key, key.publickey()

return public, private

def getpublickey(priv_key):

return priv_key.publickey()

def sign(message, priv_key):

signer = PKCS1_v1_5.new(priv_key)

digest = SHA256.new()

digest.update(message)

return signer.sign(digest)

msg = b"123"

(public, private) = newkeys(2048)

signature = b64encode(sign(msg, private))

print("Private: ", private.exportKey('PEM'))

print("Public: ", public.exportKey('PEM'))

print("Signature: ", signature)

输出：

私密：b'----- BEGIN RSA PRIVATEKEY ----- \ nMIIEpAIBAAKCAQEAozqilJ6dw5l13MMZT3hFfw5Xvo0B / TwHxyW7dlCsjuSvRBm3 \ nyLdaEfd5diZVaXnmzGuq5mRR1Mq9BvZ2BffUTN4Oqre8jQSrupB5TfEkU61eFWIn \ nwz9RwZaR / LBH6WdCz9hJppx9sH6qK4Sql2qYx0t + wk6QESPS5thWssiKhsqkXx + 6 \ n9PJICO1ug2fdhv / Lwmm3dNDyP / pA0qn0eE6AytrXTVcmBDE2oiksWs8G5Mt4nQGA \ njAp04c1M12ruBsLu5FHxwwr2QCq04kFM6Oqe9nZSR7K5KZIrv + XkOPuBK9RhhSSn \ nKN6mRw8RjL7xui + m45iPmLRI + zVuK6negubevwIDAQABAoIBADdro6LZXhB47Msp \ nVNEmMVZr3L / eaYP9G1jzBzyrNIOJwrZZEwzrsAG0qEFEz7AxyvqyPcLe4efhdB / G \ nk5kAJc15gbpWCwdIRDRidEVR8DcXAIA7JOwGdjBH + sY0Zh4pyMYAFjWjIYvI3edL \ nso4Zi8jy6ZV4jjK7mpJ1dq5aJ6qO3UIz +2米/ 55Fop / H + UtP57ENji0vxyfrXKq0p \ nRyI1iwbBMVLlcuFuNDeLHXzCOAeIY0BzB9o097VH3V4 / AzMTDUSqG35a9yietMQp \ n2dpP / sHavhcepVFc2FWdUVC9kFJ4Ue / P7fEe / 9Y43XtQrBr4g07Qz6C33iwY + KNR \ nycbph0UCgYEAysmBM / TacOrsyZW1EN4M0DUzdI3WN16FOwqUGiCIPczbr8y9oWHa \ ntP1N / 5BJUW2CU1VEEtQyplNoO6i3MzfgPK4 + dSwFaOrtN3IlZ3mBLVLvGL3kA7P9 \ n1ZfTT + EPaGWJGA24wUxv7WcTDxDY3J8zgxK40NC2sXUr2COu + lu1rHsCgYEAzg / d \ nbYO0ckGi3Ty7zdX0BWPyQQtbU1XrQHytag + / EYYP28JaO4crEu4WHqLGxWuXjbka \ N / P2vahHwuQIPFCvHSx0lhMmdXTOUHfR6AXKWxyZ2 / 3DAwRFNJefbRshrAYdWhEuD \ nyOcdjNxRWyTbaxo64NwVh / FraaGUERzFFPur7Y0CgYEAkQlIAHoalfJgQtlxNEws \ NI + nREIa1dMqErbKmNH2aE + FmKrlb04XiX9pfo + 51keip8qIkWvcr9qvm ++ xygw5u \ nsdfJ0hIXGHAWE7bvK6 / KhTkwythdsYxVeyPovdPxKjCcufhucMoTr48uIXNiN4Eh \ n3ZhRWQA9 + nQcVK1I48UeDesCgYBoiqTKTdRhVx1qgqKBJjfb + D3yc / GMUP2 + RMKy \ nGXUFTe + DvZGLu + LFgtbkCg8wH4rPEwc3LPkuphVrtzixMhi06f + b47GblExj + IFF \ n1KPcO46Jv8l66e0q + vtLaOio6OGi0rD0XxSl3yzDQeqz5qXSaLXft0KYX6pAGEmA \ ngMJUDQKBgQDGmf8QZBmNfTm + jjWVGty + W1AwX4j5EkTDg9 / me05r1O + qsn3t7mLm \ nW7YqgqUh0OLF5z9q0uxIZjqqQMum9l9EuWELDh7lt2xFLeOu0T4S3BVLPTlUTyv1 \ n7UsSd2uEXUN / 249w6 / TtvpkOjWM1Dxyk6Q6bj9dhxE / A0pfYJxIVIw == \ n ----- END RSA私钥----- '公开：b'----- BEGIN PUBLIC KEY ----- \ nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozqilJ6dw5l13MMZT3hF \ nfw5Xvo0B / TwHxyW7dlCsjuSvRBm3yLdaEfd5diZVaXnmzGuq5mRR1Mq9BvZ2BffU \ nTN4Oqre8jQSrupB5TfEkU61eFWInwz9RwZaR / LBH6WdCz9hJppx9sH6qK4Sql2qY \ nx0t + wk6QESPS5thWssiKhsqkXx + 69PJICO1ug2fdhv / Lwmm3dNDyP / pA0qn0eE6A \ nytrXTVcmBDE2oiksWs8G5Mt4nQGAjAp04c1M12ruBsLu5FHxwwr2QCq04kFM6Oqe \ n9nZSR7K5KZIrv + XkOPuBK9RhhSSnKN6mRw8RjL7xui + m45iPmLRI + zVuK6negube \ nvwIDAQAB \ n --- --END PUBLIC KEY ----- '签名：b'J9GtTPyRKNCj9yMhfWVehSWmM2wQPVSIPBXH4GmYaUsuPCem4EQHWLXhFAtz42jjdU4sHUVxkzRRu6OvJF4U6D4EeA2pW56dhD0FkbGbe59XHbPeaoWX + OOO + 1Lu6DQV3YRuNeajHPd8ldrmWvkawjecxrj + fZPurx1AC9aOQg1iAvXEuwcSW + 1A7LUiXnw / vELzDeHu3tDuU26QJ6ewrUXJZl39eVmV9gfijFGRC3Zy + uNiWciGgG54xDao2tCzP8LYxgiD6eIdKi5ZFrcMtw3bYK1yJsCIJ2fcLWKlgXfLDMcaHvwt2szQk65SwxErDnvdtLFBwZGIExNYta3m5Q =='

我使用openssl_verify尝试验证这一点，但失败了

$public_key_res = openssl_get_publickey("public");

$data = "123";

$signature = "signature";

//verify signature

$ok = openssl_verify($data, $signature, $public_key_res, OPENSSL_ALGO_SHA256);

if ($ok == 1) {

echo "valid";

} elseif ($ok == 0) {

echo "invalid";

} else {

echo "error: ".openssl_error_string();

}

?>

为什么失败了？在两个脚本中，我使用相同类型的加密SHA-256，我错过了什么？

解决：

$signature = base64_decode("...");

解决方案

暂无回答