2022年7月7日 02:00:32go评论94阅读模式

英文:

Difference between a PKCS1 public key created by Go crypto libraries and "openssl rsa ..."

问题

我尝试使用Go语言的rsa和x509包生成一对PKCS8编码的私钥和相应的PKCS1编码的公钥。我希望与下面的openssl命令具有相同的行为：

$ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt
$ openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

我在下面添加了我的Go实现，只包含关键部分。要使用它，首先使用GeneratePrivateKey生成一个私钥（示例附在末尾，位大小为2048），然后使用以下两个方法对私钥和公钥进行编码。

然而，当我运行第二个openssl命令对由我的Go实现编码的私钥进行编码时，公钥不同（我在下面提供了一个示例以说明差异）。特别是，看起来openssl的输出在我的Go实现的输出之前添加了一个前缀。

如果能解释这个差异（最好是如何修复我的代码），我将非常感激。非常感谢！

我的Go代码如下：

package xyz

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/pem"
)

func GeneratePrivateKey(bitSize int) (*rsa.PrivateKey, error) {
	privateKey, err := rsa.GenerateKey(rand.Reader, bitSize)
	if err != nil {
		return nil, err
	}
	err = privateKey.Validate()
	if err != nil {
		return nil, err
	}
	return privateKey, nil
}

func EncodePrivateKeyToPEM(privateKey *rsa.PrivateKey) (string, error) {
	privateDER, err := x509.MarshalPKCS8PrivateKey(privateKey)
	if err != nil {
		return "", err
	}
	privateBlock := pem.Block{
		Type:    "RSA PRIVATE KEY",
		Headers: nil,
		Bytes:   privateDER,
	}
	privatePEM := pem.EncodeToMemory(&privateBlock)
	return string(privatePEM), nil
}

func EncodePublicKeyToPEM(privateKey *rsa.PrivateKey) string {
	publicRsaKey := x509.MarshalPKCS1PublicKey(&privateKey.PublicKey)
	publicKeyBytes := pem.EncodeToMemory(
		&pem.Block{
			Type:  "PUBLIC KEY",
			Bytes: publicRsaKey,
		})
	return string(publicKeyBytes)
}

一个示例私钥：

由我的Go实现编码的公钥：

由第二个openssl命令生成的公钥（注意，它与前一个公钥只有前缀MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A不同）：

英文:

I try to generate a pair of a PKCS8 encoded private key and the corresponding PKCS1 encoded public key using the rsa and x509 packages of Go. I want to have the same behavior as the openssl commands below:

$ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt
$ openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

I have added my Go implementation below, boiled down to the essentials.
To use it, I first generate a private key with GeneratePrivateKey (with bit size 2048 for the example attached on the end), and then encode the private key and the public key with the following two methods.

However, when running the second openssl command to encode the public key on the private key encoded by my Go implementation, the public keys differ (I included an example for the difference below). In particular, it looks as if the openssl output extends the output of my Go implementation by a prefix.

I would be grateful for any explaination of the difference (and in the best case, how I can fix my code). Thank you very much!

My Go code looks as follows:

package xyz

import (
	&quot;crypto/rand&quot;
	&quot;crypto/rsa&quot;
	&quot;crypto/x509&quot;
	&quot;encoding/pem&quot;
)

func GeneratePrivateKey(bitSize int) (*rsa.PrivateKey, error) {
	privateKey, err := rsa.GenerateKey(rand.Reader, bitSize)
	if err != nil {
		return nil, err
	}
	err = privateKey.Validate()
	if err != nil {
		return nil, err
	}
	return privateKey, nil
}

func EncodePrivateKeyToPEM(privateKey *rsa.PrivateKey) (string, error) {
	privateDER, err := x509.MarshalPKCS8PrivateKey(privateKey)
	if err != nil {
		return &quot;&quot;, err
	}
	privateBlock := pem.Block{
		Type:    &quot;RSA PRIVATE KEY&quot;,
		Headers: nil,
		Bytes:   privateDER,
	}
	privatePEM := pem.EncodeToMemory(&amp;privateBlock)
	return string(privatePEM), nil
}

func EncodePublicKeyToPEM(privateKey *rsa.PrivateKey) string {
	publicRsaKey := x509.MarshalPKCS1PublicKey(&amp;privateKey.PublicKey)
	publicKeyBytes := pem.EncodeToMemory(
		&amp;pem.Block{
			Type:  &quot;PUBLIC KEY&quot;,
			Bytes: publicRsaKey,
		})
	return string(publicKeyBytes)
}

An exemplary private key:

The public key as encoded by my Go implementation:

The public key as generated by the second openssl command (note that it only differs from the former by the prefix MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A)

答案1

得分: 4

以下是翻译好的内容：

OpenSSL语句生成了一个以PKCS#8格式的私钥和以X.509/SPKI格式的公钥，两者都是PEM编码的。

使用Go代码生成的私钥具有PKCS#8格式，但是PEM编码使用了错误的头部和尾部（正确的应该是*-----BEGIN PRIVATE KEY-----和-----END PRIVATE KEY-----*）。修复方法是在EncodePrivateKeyToPEM()中的pem.Block()调用中相应地调整类型（Type: "PRIVATE KEY"）。

对于使用Go代码生成的公钥，情况相反：这里的头部和尾部对应于PEM编码的X.509/SPKI密钥。然而，主体是PKCS#1格式。这就是为什么这两个密钥不同的原因。修复方法是在EncodePublicKeyToPEM()中使用MarshalPKIXPublicKey()方法来处理X.509/SPKI格式，而不是MarshalPKCS1PublicKey()。

顺便说一下，检查密钥的最佳方法是使用ASN.1解析器，例如https://lapo.it/asn1js/。

英文:

The OpenSSL statements generate a private key in PKCS#8 format and a public key in X.509/SPKI format, both PEM encoded.

The private key generated with the Go Code has the PKCS#8 format, but the PEM encoding uses the wrong header and footer (correct would be -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY-----). The fix is to adjust in EncodePrivateKeyToPEM() in the pem.Block() call the type accordingly (Type: "PRIVATE KEY").

In the case of the public key generated with the Go Code, the situation is reversed: Here, the header and footer correspond to those of a PEM encoded X.509/SPKI key. However, the body is PKCS#1 formatted. This is the reason why the keys differ. The fix is to use in EncodePublicKeyToPEM() the method MarshalPKIXPublicKey() for the X.509/SPKI format instead of MarshalPKCS1PublicKey().

By the way, the best way to inspect the keys is to use an ASN.1 parser, e.g. https://lapo.it/asn1js/.

通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。

Go加密库创建的PKCS1公钥和”openssl rsa …”之间的区别是什么？

问题

答案1

uint(0) – uint(1) 的输出结果是 uint64 的最大值。

构建私有仓库的 Dockerfile/go.mod 文件时出现构建失败的情况。

gomplate: 在<.Values.tpl.organization>处执行”<arg>”：map没有”Values”键的条目

Go (GoLang) Gorilla/Mux 设置响应代码

What's the correct way to type hint an empty list as a literal in python?

如何在Highcharts Gantt中更改本地化的星期名称

如何在同一个流中使用多个过滤器和映射函数？

如何使用Map/Set来将代码优化到O(n)？

.NET MAUI Android在GitHub Actions上构建失败，错误代码为1。

如何在Playwright视觉比较中屏蔽多个定位器？

在C++中，可以使用可变模板参数来检索类型的内部类型。

selenium.common.exceptions.StaleElementReferenceException: Message: stale element reference: stale element not found

Creating and opening a URL to log in to Website via Basic Auth with Robot Framework/Selenium (Python)

AG Grid 在上下文菜单中以大文本形式打开

发表评论