Question

我正在用Go语言开发一个程序来验证签名。

它接收参数（公钥，签名，明文）并且签名是通过PKCS＃8中用户的私钥签名的。

我尝试在包x509中使用功能VerifyPKCS1v15 但这对我没有用。我猜可能是由于该功能是针对pkcs1私钥所做的签名的。

有人可以帮助我吗？我想知道是否可以使用pkcs8公钥来验证签名？

这是我的代码

func main（）{ var plainTest =“ P00000000253000001000000000010000267201820180705140842” var hashVal =“ 15b47c1d79b0be2aae36a05bcd8644af7bfe3dd4e0c23e2b78692fc900998fca” VAR signatureStr = “WWFCZsD3BhakkCaLAcTPxMvd3Pom1Glhgcc + xhR7tIDBLvkVk / LtxV + 2nHw6b9u0Dcla8U4vUR7KH8zpUS7fNJD9yPDDWxH5PYiw4jQTjziiLHSUpuaGbf8N1Y2jKPXvzq1ZFaEAqCirLSmt5KyD3gQ22ysHgYA2vH44zzBApcxYXVbzLbCIGAR5aL / mvYt7uWsh4FX8dQ49v9SqIm / rRBGEbsscF4HpQApy8VqRGvq6EbwrPCfMcpwIbBHdDUR0mneaNg9GH4hozfMC08SZtAMGDk8J / NQway1FisrjpUeZfMe / hANDH1LmfrbThKDgB7WIpDryCXMTsBKjrqyArQ ==” VAR pubKeyStr = “MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17hWIujBfiqrd4o0JCEn6N1mzv94VM9LiVHoldvPRDEwCXbeoSebzZElvhkJsPl08o68g1BgRC4LpaGQDcVzwyFMs4DnXEDLapZQpTzkmXaSIYIRYER / U1OgdW5Cq2do / eTrylWdloqWuz5JL2vIr4GFycnEduYVSzFmAqucCvgGEFUxwFxtZ95BVsxfKOt7eFCJWoS0iR2 / If5EMG9F6KG6DtDUWg6awN2mIbhm8fqxSF48ehCkPCN4s4YkcUlkmGYEetdBCxbaUh9 / S960XjQBK3MXbLIJLgRLoEAdWJ2v6IjaEsw7dQAaMti3QOPr0x7TyHlS7rz / lyjlJjaXEQIDAQAB”

publicKeyBase64, err := base64.StdEncoding.DecodeString(pubKeyStr)
if err != nil {
    fmt.Println("base64 error : " + err.Error())
}
fmt.Println("publicKeyBase64: ")
fmt.Println(string(publicKeyBase64))

pub, err := x509.ParsePKIXPublicKey(publicKeyBase64)
if err != nil {
    fmt.Println("failed to parse DER encoded public key: " + err.Error())
}

switch pub := pub.(type) {
case *rsa.PublicKey:
    fmt.Println("pub is of type RSA:", pub)
case *dsa.PublicKey:
    fmt.Println("pub is of type DSA:", pub)
case *ecdsa.PublicKey:
    fmt.Println("pub is of type ECDSA:", pub)
default:
    panic("unknown type of public key")
}

publicKey, isRSAPublicKey := pub.(*rsa.PublicKey)
if !isRSAPublicKey {
    fmt.Println("Public key parsed is not an RSA public key")
}

signatureBytes, _ := hex.DecodeString(signatureStr)
fmt.Println("signatureBytes : " + string(signatureBytes))

validateBytes := sha256.Sum256([]byte(plainTest))
fmt.Println("validateBytes : " + string(validateBytes[:]))

err = rsa.VerifyPKCS1v15(publicKey, crypto.SHA256, validateBytes[:], signatureBytes)
if err != nil {
    fmt.Printf("err: %v\n", err)
} else {
    fmt.Printf("ok")
}

}

Answer 1

我遇到了同样的问题，事实证明我的publicKey错误。我的意思不是格式，但是密钥没有与私钥配对。我换了另一把钥匙，代码就起作用了。

如何验证使用PKCS8私钥签名的签名？

1 个答案: