python非对称加密算法RSA实现原理与应用详解

pip install pycryptodome

from Crypto.PublicKey import RSA
from Crypto.Random import get_random_bytes

# 生成RSA密钥对
key = RSA.generate(2048)  # 生成2048位的密钥

# 导出密钥
private_key = key.export_key()
with open("private.pem", "wb") as f:
    f.write(private_key)

public_key = key.publickey().export_key()
with open("public.pem", "wb") as f:
    f.write(public_key)

print("私钥已保存到private.pem")
print("公钥已保存到public.pem")

from Crypto.PublicKey import RSA
from Crypto.Cipher import PKCS1_OAEP
import base64

# 加载公钥
with open("public.pem", "rb") as f:
    public_key = RSA.import_key(f.read())

# 明文数据
message = "Hello, RSA Encryption!".encode('utf-8')

# 使用公钥加密
cipher = PKCS1_OAEP.new(public_key)
encrypted_message = cipher.encrypt(message)

# 将加密后的数据转换为base64编码，便于存储和传输
encrypted_message_b64 = base64.b64encode(encrypted_message).decode('utf-8')
print("加密后的数据（Base64编码）:", encrypted_message_b64)

from Crypto.PublicKey import RSA
from Crypto.Cipher import PKCS1_OAEP
import base64

# 加载私钥
with open("private.pem", "rb") as f:
    private_key = RSA.import_key(f.read())

# 加密数据（这里用之前生成的加密数据）
encrypted_message_b64 = "你的加密数据（Base64编码）"
encrypted_message = base64.b64decode(encrypted_message_b64)

# 使用私钥解密
cipher = PKCS1_OAEP.new(private_key)
decrypted_message = cipher.decrypt(encrypted_message)

print("解密后的数据:", decrypted_message.decode('utf-8'))

from Crypto.PublicKey import RSA
from Crypto.Signature import pkcs1_15
from Crypto.Hash import SHA256

# 加载私钥
with open("private.pem", "rb") as f:
    private_key = RSA.import_key(f.read())

# 待签名的数据
message = "这是一份需要签名的文件内容".encode('utf-8')

# 使用SHA256哈希函数对数据进行哈希
h = SHA256.new(message)

# 使用私钥进行签名
signer = pkcs1_15.new(private_key)
signature = signer.sign(h)

# 将签名转换为base64编码
signature_b64 = base64.b64encode(signature).decode('utf-8')
print("签名（Base64编码）:", signature_b64)

from Crypto.PublicKey import RSA
from Crypto.Signature import pkcs1_15
from Crypto.Hash import SHA256
import base64

# 加载公钥
with open("public.pem", "rb") as f:
    public_key = RSA.import_key(f.read())

# 待验证的数据和签名
message = "这是一份需要签名的文件内容".encode('utf-8')
signature_b64 = "你的签名（Base64编码）"
signature = base64.b64decode(signature_b64)

# 使用SHA256哈希函数对数据进行哈希
h = SHA256.new(message)

# 使用公钥验证签名
verifier = pkcs1_15.new(public_key)
if verifier.verify(h, signature):
    print("签名验证成功，数据未被篡改。")
else:
    print("签名验证失败，数据可能被篡改。")

# 假设Alice已经获得了Bob的公钥，并保存在bob_public.pem文件中

# 加密邮件内容
encrypted_email_content = rsa_encrypt("重要商业信息".encode('utf-8'), bob_public_key)

# 签名邮件内容
signature = rsa_sign("重要商业信息".encode('utf-8'), alice_private_key, 'SHA-256')

# Alice将encrypted_email_content和signature通过电子邮件发送给Bob