使用Go生成SHA256withDSA签名，然后使用Java进行验证。

huangapple
go评论188阅读模式
英文:

generate a SHA256withDSA signature using Go and then verify it using Java

问题

  1. 使用Go对原始数据进行SHA256哈希，然后进行DSA签名。
  2. 以十六进制打印签名结果。
  3. 使用Java的SHA256withDSA验证第一步的结果，返回false。
  4. 我知道SHA256和DSA是不同的，SHA256withDSA是另一种算法。
  5. 在Go中，如何生成一个可以使用Java的SHA256withDSA验证的签名？
  6. Go是否有其他第三方库支持？

请注意，我只会返回翻译好的部分，不会回答关于翻译的问题。

英文:
  1. Go sha256 orign data then DSA sign it
  2. print sign result by hex
  3. use Java SHA256withDSA to verify first step result return false
  4. i konw sha256 then DSA is difference SHA256withDSA
  5. how can i do in Go to generate a sign, that can be verified using sha256withdsa in Java ?
  6. do Go has any another third party library support ?

Go

  1. package main
  3. import (
  4. 	"crypto/dsa"
  5. 	"crypto/rand"
  6. 	"crypto/sha256"
  7. 	"encoding/asn1"
  8. 	"encoding/hex"
  9. 	"fmt"
  10. 	"golang.org/x/crypto/ssh"
  11. 	"math/big"
  12. )
  14. func main() {
  15. 	pemData := []byte("-----BEGIN DSA PRIVATE KEY-----\n" +
  16. 		"MIIBvAIBAAKBgQD9f1OBHXUSKVLfSpwu7OTn9hG3UjzvRADDHj+AtlEmaUVdQCJR\n" +
  17. 		"+1k9jVj6v8X1ujD2y5tVbNeBO4AdNG/yZmC3a5lQpaSfn+gEexAiwk+7qdf+t8Yb\n" +
  18. 		"+DtX58aophUPBPuD9tPFHsMCNVQTWhaRMvZ1864rYdcq7/IiAxmd0UgBxwIVAJdg\n" +
  19. 		"UI8VIwvMspK5gqLrhAvwWBz1AoGBAPfhoIXWmz3ey7yrXDa4V7l5lK+7+jrqgvlX\n" +
  20. 		"TAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZxI+hMKBYTt88JMozIpuE8FnqLVHyNKOCj\n" +
  21. 		"rh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6oUZCJqIPf4VrlnwaSi2ZegHtVJWQB\n" +
  22. 		"TDv+z0kqAoGBAIb9o0KPsjAdzjK571e1Mx7ZhEyJGrcxHiN2sW8IztEbqrKKiMxp\n" +
  23. 		"NlTwm234uBdtzVHE3uDWZpfHPMIRmwBjCYDFRowWWVRdhdFXZlpCyp1gMWqJ11dh\n" +
  24. 		"3FI3+O43DevRSyyuLRVCNQ1J3iVgwY5ndRpZU7n6y8DPH4/4EBT7KvnVAhR4Vwun\n" +
  25. 		"Fhu/+4AGaVeMEa814I3dqg==\n" +
  26. 		"-----END DSA PRIVATE KEY-----")
  28. 	p, _ := ssh.ParseRawPrivateKey(pemData)
  29. 	pp := p.(*dsa.PrivateKey)
  31. 	hashed := []byte{1}
  32. 	sha256 := sha256.New()
  33. 	sha256.Write(hashed)
  34. 	hashed = sha256.Sum(nil)
  35. 	r, s, _ := dsa.Sign(rand.Reader, pp, hashed)
  36. 	type dsaSignature struct {
  37. 		R, S *big.Int
  38. 	}
  39. 	var ss dsaSignature
  40. 	ss.S = s
  41. 	ss.R = r
  42. 	signatureBytes, _ := asn1.Marshal(ss)
  43. 	fmt.Println(hex.EncodeToString(signatureBytes))
  44. }

Java

  1.  @Test
  2.     public void ttt() throws InvalidKeySpecException, NoSuchAlgorithmException, InvalidKeyException, SignatureException {
  3.         String pubKey = "-----BEGIN PUBLIC KEY-----\n" +
  4.                 "MIIBuDCCASwGByqGSM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s5Of2EbdSPO9E\n" +
  5.                 "AMMeP4C2USZpRV1AIlH7WT2NWPq/xfW6MPbLm1Vs14E7gB00b/JmYLdrmVClpJ+f\n" +
  6.                 "6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208UewwI1VBNaFpEy9nXzrith1yrv\n" +
  7.                 "8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+GghdabPd7LvKtc\n" +
  8.                 "NrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3zwky\n" +
  9.                 "jMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/h\n" +
  10.                 "WuWfBpKLZl6Ae1UlZAFMO/7PSSoDgYUAAoGBAIb9o0KPsjAdzjK571e1Mx7ZhEyJ\n" +
  11.                 "GrcxHiN2sW8IztEbqrKKiMxpNlTwm234uBdtzVHE3uDWZpfHPMIRmwBjCYDFRowW\n" +
  12.                 "WVRdhdFXZlpCyp1gMWqJ11dh3FI3+O43DevRSyyuLRVCNQ1J3iVgwY5ndRpZU7n6\n" +
  13.                 "y8DPH4/4EBT7KvnV\n" +
  14.                 "-----END PUBLIC KEY-----";
  15.         String publicKeyPEM = pubKey
  16.                 .replace("-----BEGIN PUBLIC KEY-----\n", "")
  17.                 .replaceAll(System.lineSeparator(), "")
  18.                 .replace("-----END PUBLIC KEY-----", "");
  19.         byte[] publicEncoded = Base64.decodeBase64(publicKeyPEM);
  20.         KeyFactory keyFactory1 = KeyFactory.getInstance("DSA");
  21.         X509EncodedKeySpec publicKeySpec = new X509EncodedKeySpec(publicEncoded);
  22.         DSAPublicKey pubKeyy = (DSAPublicKey) keyFactory1.generatePublic(publicKeySpec);
  24.         Signature sig1 = Signature.getInstance("SHA256withDSA");
  25.         sig1.initVerify(pubKeyy);
  26.         byte[] orignData = new byte[]{1};
  27.         sig1.update(orignData);
  28.         boolean flag = sig1.verify(HexUtil.decodeHex("first step result"));
  29.         System.out.println(flag);
  30.     }

答案1

得分: 1

按照您的要求，以下是翻译好的代码部分：

  1. 遵循 FIPS186-4 的第4.6和4.7节，使用golang实现以下代码：
  3. hashed := []byte{1}
  4. pemData, _ := ioutil.ReadFile("config/secure/private.key")
  5. p, err := ssh.ParseRawPrivateKey(pemData)
  6. pp, ok := p.(*dsa.PrivateKey)
  7. h := sha256.New()
  8. h.Write(hashed)
  9. hashed := h.Sum(nil)
  10. if pp.Q.BitLen()/8 < len(hashed) {
  11.     hashed = hashed[0 : pp.Q.BitLen()/8]
  12. }
  13. r, s, _ := dsa.Sign(rand.Reader, pp, hashed)
  14. var ss dsaSignature
  15. ss.S = s
  16. ss.R = r
  17. hashed, _ = asn1.Marshal(ss)

请注意，我已经将代码中的&quot;替换为双引号"，以便代码能够正确运行。

英文:

follow FIPS186-4 sections 4.6 and 4.7 golang should this

  1. hashed := []byte{1}
  2. pemData, _ := ioutil.ReadFile(&quot;config/secure/private.key&quot;)
  3. p, err := ssh.ParseRawPrivateKey(pemData)
  4. pp, ok := p.(*dsa.PrivateKey)
  5. h := sha256.New()
  6. h.Write(hashed)
  7. hashed := h.Sum(nil)
  8. if pp.Q.BitLen()/8 &lt; len(hashed) {
  9. 	hashed = hashed[0 : pp.Q.BitLen()/8]
  10. }
  11. r, s, _ := dsa.Sign(rand.Reader, pp, hashed)
  12. var ss dsaSignature
  13. ss.S = s
  14. ss.R = r
  15. hashed, _ = asn1.Marshal(ss)

答案2

得分: 0

我在Java中找到了以下代码：

  1. package sun.security.provider;
  3. private BigInteger generateS(BigInteger var1, BigInteger var2, BigInteger var3, BigInteger var4) throws SignatureException {
  4.     byte[] var5;
  5.     try {
  6.         var5 = this.md.digest();
  7.     } catch (RuntimeException var9) {
  8.         throw new SignatureException(var9.getMessage());
  9.     }
  11.     // 这一行将哈希结果分割为256位
  12.     int var6 = var2.bitLength() / 8;
  13.     if (var6 < var5.length) {
  14.         var5 = Arrays.copyOfRange(var5, 0, var6);
  15.     }
  17.     BigInteger var7 = new BigInteger(1, var5);
  18.     BigInteger var8 = var4.modInverse(var2);
  19.     return var1.multiply(var3).add(var7).multiply(var8).mod(var2);
  20. }

你可以在Go中使用以下代码：

  1. hashed := []byte{1}
  2. sha256 := sha2562.New()
  3. sha256.Write(hashed)
  4. hashed = sha256.Sum(nil)
  5. // 你必须将其分割
  6. hashed = hashed[0:20]

原因是在Java中，SHA256结果被分割了，但在Go中没有被分割。

英文:

i found in java

  1. package sun.security.provider;
  3. private BigInteger generateS(BigInteger var1, BigInteger var2, BigInteger var3, BigInteger var4) throws SignatureException {
  4.         byte[] var5;
  5.         try {
  6.             var5 = this.md.digest();
  7.         } catch (RuntimeException var9) {
  8.             throw new SignatureException(var9.getMessage());
  9.         }
  11.         // this line split the hash256 redsult
  12.         int var6 = var2.bitLength() / 8;
  13.         if (var6 &lt; var5.length) {
  14.             var5 = Arrays.copyOfRange(var5, 0, var6);
  15.         }
  17.         BigInteger var7 = new BigInteger(1, var5);
  18.         BigInteger var8 = var4.modInverse(var2);
  19.         return var1.multiply(var3).add(var7).multiply(var8).mod(var2);
  20. }

you can use in golang

  1. 	hashed := []byte{1}
  2. 	sha256 := sha2562.New()
  3. 	sha256.Write(hashed)
  4. 	hashed = sha256.Sum(nil)
  5.     // you must split it 
  6. 	hashed = hashed[0:20]

the reason is sha256 result split in java , but glang not split

huangapple
  • 本文由 发表于 2021年9月2日 10:06:02
  • 转载请务必保留本文链接：https://go.coder-hub.com/69023253.html
  • dsa
  • go
  • java
  • sha256
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定