|
|
|
|
@ -1,797 +0,0 @@ |
|
|
|
|
using System; |
|
|
|
|
using System.Collections.Generic; |
|
|
|
|
using System.Text; |
|
|
|
|
using System.Security.Cryptography; |
|
|
|
|
using System.IO; |
|
|
|
|
using SDKCSharp.Common; |
|
|
|
|
|
|
|
|
|
namespace SDKCSharp.Utility |
|
|
|
|
{ |
|
|
|
|
public class AlipaySignature |
|
|
|
|
{ |
|
|
|
|
/** 默认编码字符集 */ |
|
|
|
|
private static string DEFAULT_CHARSET = SdkConfig.CHARSET; |
|
|
|
|
|
|
|
|
|
public static string GetSignContent(IDictionary<string, string> parameters) |
|
|
|
|
{ |
|
|
|
|
// 第一步：把字典按Key的字母顺序排序 |
|
|
|
|
IDictionary<string, string> sortedParams = new SortedDictionary<string, string>(parameters); |
|
|
|
|
IEnumerator<KeyValuePair<string, string>> dem = sortedParams.GetEnumerator(); |
|
|
|
|
|
|
|
|
|
// 第二步：把所有参数名和参数值串在一起 |
|
|
|
|
StringBuilder query = new StringBuilder(""); |
|
|
|
|
while (dem.MoveNext()) |
|
|
|
|
{ |
|
|
|
|
string key = dem.Current.Key; |
|
|
|
|
string value = dem.Current.Value; |
|
|
|
|
if (!string.IsNullOrEmpty(key) && !string.IsNullOrEmpty(value)) |
|
|
|
|
{ |
|
|
|
|
query.Append(key).Append("=").Append(value).Append("&"); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
string content = query.ToString().Substring(0, query.Length - 1); |
|
|
|
|
|
|
|
|
|
return content; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSASign(IDictionary<string, string> parameters, string privateKeyPem, string charset, string signType) |
|
|
|
|
{ |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSASignCharSet(signContent, privateKeyPem, charset, signType); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSASign(string data, string privateKeyPem, string charset, string signType) |
|
|
|
|
{ |
|
|
|
|
return RSASignCharSet(data, privateKeyPem, charset, signType); |
|
|
|
|
} |
|
|
|
|
///* |
|
|
|
|
public static string RSASign(IDictionary<string, string> parameters, string privateKeyPem, string charset, bool keyFromFile, string signType) |
|
|
|
|
{ |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSASignCharSet(signContent, privateKeyPem, charset, keyFromFile, signType); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSASign(string data, string privateKeyPem, string charset, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
return RSASignCharSet(data, privateKeyPem, charset, keyFromFile, signType); |
|
|
|
|
} |
|
|
|
|
//*/ |
|
|
|
|
public static string RSASignCharSet(string data, string privateKeyPem, string charset, string signType) |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsaCsp = LoadCertificateFile(privateKeyPem, signType); |
|
|
|
|
byte[] dataBytes = null; |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
dataBytes = Encoding.UTF8.GetBytes(data); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
dataBytes = Encoding.GetEncoding(charset).GetBytes(data); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if ("RSA2".Equals(signType)) |
|
|
|
|
{ |
|
|
|
|
|
|
|
|
|
byte[] signatureBytes = rsaCsp.SignData(dataBytes, "SHA256"); |
|
|
|
|
|
|
|
|
|
return Convert.ToBase64String(signatureBytes); |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
byte[] signatureBytes = rsaCsp.SignData(dataBytes, "SHA1"); |
|
|
|
|
|
|
|
|
|
return Convert.ToBase64String(signatureBytes); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
public static string RSASignCharSet(string data, string privateKeyPem, string charset, bool keyFromFile, string signType) |
|
|
|
|
{ |
|
|
|
|
|
|
|
|
|
byte[] signatureBytes = null; |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsaCsp = null; |
|
|
|
|
if (keyFromFile) |
|
|
|
|
{//文件读取 |
|
|
|
|
rsaCsp = LoadCertificateFile(privateKeyPem, signType); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
//字符串获取 |
|
|
|
|
rsaCsp = LoadCertificateString(privateKeyPem, signType); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
byte[] dataBytes = null; |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
dataBytes = Encoding.UTF8.GetBytes(data); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
dataBytes = Encoding.GetEncoding(charset).GetBytes(data); |
|
|
|
|
} |
|
|
|
|
if (null == rsaCsp) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("您使用的私钥格式错误，请检查RSA私钥配置" + ",charset = " + charset); |
|
|
|
|
} |
|
|
|
|
if ("RSA2".Equals(signType)) |
|
|
|
|
{ |
|
|
|
|
|
|
|
|
|
signatureBytes = rsaCsp.SignData(dataBytes, "SHA256"); |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
signatureBytes = rsaCsp.SignData(dataBytes, "SHA1"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("您使用的私钥格式错误，请检查RSA私钥配置" + ",charset = " + charset, ex); |
|
|
|
|
} |
|
|
|
|
return Convert.ToBase64String(signatureBytes); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
public static bool RSACheckV1(IDictionary<string, string> parameters, string publicKeyPem, string charset) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
parameters.Remove("sign_type"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, charset, "RSA"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckV1(IDictionary<string, string> parameters, string publicKeyPem) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
parameters.Remove("sign_type"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, DEFAULT_CHARSET, "RSA"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckV1(IDictionary<string, string> parameters, string publicKeyPem, string charset, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
parameters.Remove("sign_type"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, charset, signType, keyFromFile); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckV2(IDictionary<string, string> parameters, string publicKeyPem) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, DEFAULT_CHARSET, "RSA"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckV2(IDictionary<string, string> parameters, string publicKeyPem, string charset) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, charset, "RSA"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckV2(IDictionary<string, string> parameters, string publicKeyPem, string charset, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
string sign = parameters["sign"]; |
|
|
|
|
|
|
|
|
|
parameters.Remove("sign"); |
|
|
|
|
string signContent = GetSignContent(parameters); |
|
|
|
|
|
|
|
|
|
return RSACheckContent(signContent, sign, publicKeyPem, charset, signType, keyFromFile); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static bool RSACheckContent(string signContent, string sign, string publicKeyPem, string charset, string signType) |
|
|
|
|
{ |
|
|
|
|
|
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if ("RSA2".Equals(signType)) |
|
|
|
|
{ |
|
|
|
|
string sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
|
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
|
|
|
|
|
bool bVerifyResultOriginal = rsa.VerifyData(Encoding.GetEncoding(charset).GetBytes(signContent), "SHA256", Convert.FromBase64String(sign)); |
|
|
|
|
return bVerifyResultOriginal; |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
string sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
|
|
|
|
|
SHA1CryptoServiceProvider sha1 = new SHA1CryptoServiceProvider(); |
|
|
|
|
bool bVerifyResultOriginal = rsa.VerifyData(Encoding.GetEncoding(charset).GetBytes(signContent), sha1, Convert.FromBase64String(sign)); |
|
|
|
|
return bVerifyResultOriginal; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
catch |
|
|
|
|
{ |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
public static bool RSACheckContent(string signContent, string sign, string publicKeyPem, string charset, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
|
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
string sPublicKeyPEM; |
|
|
|
|
|
|
|
|
|
if (keyFromFile) |
|
|
|
|
{ |
|
|
|
|
sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
sPublicKeyPEM = "-----BEGIN PUBLIC KEY-----\r\n"; |
|
|
|
|
sPublicKeyPEM += publicKeyPem; |
|
|
|
|
sPublicKeyPEM += "-----END PUBLIC KEY-----\r\n\r\n"; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if ("RSA2".Equals(signType)) |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
|
|
|
|
|
bool bVerifyResultOriginal = rsa.VerifyData(Encoding.GetEncoding(charset).GetBytes(signContent), "SHA256", Convert.FromBase64String(sign)); |
|
|
|
|
return bVerifyResultOriginal; |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
|
|
|
|
|
SHA1CryptoServiceProvider sha1 = new SHA1CryptoServiceProvider(); |
|
|
|
|
bool bVerifyResultOriginal = rsa.VerifyData(Encoding.GetEncoding(charset).GetBytes(signContent), sha1, Convert.FromBase64String(sign)); |
|
|
|
|
return bVerifyResultOriginal; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
catch |
|
|
|
|
{ |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
public static bool RSACheckContent(string signContent, string sign, string publicKeyPem, string charset, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
string sPublicKeyPEM; |
|
|
|
|
if (keyFromFile) |
|
|
|
|
{ |
|
|
|
|
sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
sPublicKeyPEM = "-----BEGIN PUBLIC KEY-----\r\n"; |
|
|
|
|
sPublicKeyPEM = sPublicKeyPEM + publicKeyPem; |
|
|
|
|
sPublicKeyPEM = sPublicKeyPEM + "-----END PUBLIC KEY-----\r\n\r\n"; |
|
|
|
|
} |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
SHA1CryptoServiceProvider sha1 = new SHA1CryptoServiceProvider(); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
bool bVerifyResultOriginal = rsa.VerifyData(Encoding.GetEncoding(charset).GetBytes(signContent), sha1, Convert.FromBase64String(sign)); |
|
|
|
|
return bVerifyResultOriginal; |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
string s = ex.Message.ToString(); |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string CheckSignAndDecrypt(IDictionary<string, string> parameters, string alipayPublicKey, |
|
|
|
|
string cusPrivateKey, bool isCheckSign, |
|
|
|
|
bool isDecrypt) |
|
|
|
|
{ |
|
|
|
|
string charset = parameters["charset"]; |
|
|
|
|
string bizContent = parameters["biz_content"]; |
|
|
|
|
if (isCheckSign) |
|
|
|
|
{ |
|
|
|
|
if (!RSACheckV2(parameters, alipayPublicKey, charset)) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("rsaCheck failure:rsaParams=" + parameters); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if (isDecrypt) |
|
|
|
|
{ |
|
|
|
|
return RSADecrypt(bizContent, cusPrivateKey, charset, "RSA"); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return bizContent; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string CheckSignAndDecrypt(IDictionary<string, string> parameters, string alipayPublicKey, |
|
|
|
|
string cusPrivateKey, bool isCheckSign, |
|
|
|
|
bool isDecrypt, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
string charset = parameters["charset"]; |
|
|
|
|
string bizContent = parameters["biz_content"]; |
|
|
|
|
if (isCheckSign) |
|
|
|
|
{ |
|
|
|
|
if (!RSACheckV2(parameters, alipayPublicKey, charset, signType, keyFromFile)) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("rsaCheck failure:rsaParams=" + parameters); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if (isDecrypt) |
|
|
|
|
{ |
|
|
|
|
return RSADecrypt(bizContent, cusPrivateKey, charset, signType ,keyFromFile); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return bizContent; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string encryptAndSign(string bizContent, string alipayPublicKey, |
|
|
|
|
string cusPrivateKey, string charset, bool isEncrypt, |
|
|
|
|
bool isSign, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
StringBuilder sb = new StringBuilder(); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
sb.Append("<?xml version=\"1.0\" encoding=\"" + charset + "\"?>"); |
|
|
|
|
if (isEncrypt) |
|
|
|
|
{// 加密 |
|
|
|
|
sb.Append("<alipay>"); |
|
|
|
|
String encrypted = RSAEncrypt(bizContent, alipayPublicKey, charset, keyFromFile); |
|
|
|
|
sb.Append("<response>" + encrypted + "</response>"); |
|
|
|
|
sb.Append("<encryption_type>"+signType+"</encryption_type>"); |
|
|
|
|
if (isSign) |
|
|
|
|
{ |
|
|
|
|
String sign = RSASign(encrypted, cusPrivateKey, charset, signType, keyFromFile); |
|
|
|
|
sb.Append("<sign>" + sign + "</sign>"); |
|
|
|
|
sb.Append("<sign_type>"+signType+"</sign_type>"); |
|
|
|
|
} |
|
|
|
|
sb.Append("</alipay>"); |
|
|
|
|
} |
|
|
|
|
else if (isSign) |
|
|
|
|
{// 不加密，但需要签名 |
|
|
|
|
sb.Append("<alipay>"); |
|
|
|
|
sb.Append("<response>" + bizContent + "</response>"); |
|
|
|
|
String sign = RSASign(bizContent, cusPrivateKey, charset, signType, keyFromFile); |
|
|
|
|
sb.Append("<sign>" + sign + "</sign>"); |
|
|
|
|
sb.Append("<sign_type>"+signType+"</sign_type>"); |
|
|
|
|
sb.Append("</alipay>"); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{// 不加密，不加签 |
|
|
|
|
sb.Append(bizContent); |
|
|
|
|
} |
|
|
|
|
return sb.ToString(); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string encryptAndSign(string bizContent, string alipayPublicKey, |
|
|
|
|
string cusPrivateKey, string charset, bool isEncrypt, |
|
|
|
|
bool isSign) |
|
|
|
|
{ |
|
|
|
|
StringBuilder sb = new StringBuilder(); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
sb.Append("<?xml version=\"1.0\" encoding=\"" + charset + "\"?>"); |
|
|
|
|
if (isEncrypt) |
|
|
|
|
{// 加密 |
|
|
|
|
sb.Append("<alipay>"); |
|
|
|
|
String encrypted = RSAEncrypt(bizContent, alipayPublicKey, charset); |
|
|
|
|
sb.Append("<response>" + encrypted + "</response>"); |
|
|
|
|
sb.Append("<encryption_type>RSA</encryption_type>"); |
|
|
|
|
if (isSign) |
|
|
|
|
{ |
|
|
|
|
String sign = RSASign(encrypted, cusPrivateKey, charset, "RSA"); |
|
|
|
|
sb.Append("<sign>" + sign + "</sign>"); |
|
|
|
|
sb.Append("<sign_type>RSA</sign_type>"); |
|
|
|
|
} |
|
|
|
|
sb.Append("</alipay>"); |
|
|
|
|
} |
|
|
|
|
else if (isSign) |
|
|
|
|
{// 不加密，但需要签名 |
|
|
|
|
sb.Append("<alipay>"); |
|
|
|
|
sb.Append("<response>" + bizContent + "</response>"); |
|
|
|
|
String sign = RSASign(bizContent, cusPrivateKey, charset, "RSA"); |
|
|
|
|
sb.Append("<sign>" + sign + "</sign>"); |
|
|
|
|
sb.Append("<sign_type>RSA</sign_type>"); |
|
|
|
|
sb.Append("</alipay>"); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{// 不加密，不加签 |
|
|
|
|
sb.Append(bizContent); |
|
|
|
|
} |
|
|
|
|
return sb.ToString(); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSAEncrypt(string content, string publicKeyPem, string charset) |
|
|
|
|
{ |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
string sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
byte[] data = Encoding.GetEncoding(charset).GetBytes(content); |
|
|
|
|
int maxBlockSize = rsa.KeySize / 8 - 11; //加密块最大长度限制 |
|
|
|
|
if (data.Length <= maxBlockSize) |
|
|
|
|
{ |
|
|
|
|
byte[] cipherbytes = rsa.Encrypt(data, false); |
|
|
|
|
return Convert.ToBase64String(cipherbytes); |
|
|
|
|
} |
|
|
|
|
MemoryStream plaiStream = new MemoryStream(data); |
|
|
|
|
MemoryStream crypStream = new MemoryStream(); |
|
|
|
|
Byte[] buffer = new Byte[maxBlockSize]; |
|
|
|
|
int blockSize = plaiStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
while (blockSize > 0) |
|
|
|
|
{ |
|
|
|
|
Byte[] toEncrypt = new Byte[blockSize]; |
|
|
|
|
Array.Copy(buffer, 0, toEncrypt, 0, blockSize); |
|
|
|
|
Byte[] cryptograph = rsa.Encrypt(toEncrypt, false); |
|
|
|
|
crypStream.Write(cryptograph, 0, cryptograph.Length); |
|
|
|
|
blockSize = plaiStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return Convert.ToBase64String(crypStream.ToArray(), Base64FormattingOptions.None); |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("EncryptContent = " + content + ",charset = " + charset, ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
public static string RSAEncrypt(string content, string publicKeyPem, string charset, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
string sPublicKeyPEM; |
|
|
|
|
if (keyFromFile) { |
|
|
|
|
sPublicKeyPEM = File.ReadAllText(publicKeyPem); |
|
|
|
|
}else{ |
|
|
|
|
sPublicKeyPEM = "-----BEGIN PUBLIC KEY-----\r\n"; |
|
|
|
|
sPublicKeyPEM += publicKeyPem; |
|
|
|
|
sPublicKeyPEM += "-----END PUBLIC KEY-----\r\n\r\n"; |
|
|
|
|
} |
|
|
|
|
RSACryptoServiceProvider rsa = new RSACryptoServiceProvider(); |
|
|
|
|
rsa.PersistKeyInCsp = false; |
|
|
|
|
RSACryptoServiceProviderExtension.LoadPublicKeyPEM(rsa, sPublicKeyPEM); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
byte[] data = Encoding.GetEncoding(charset).GetBytes(content); |
|
|
|
|
int maxBlockSize = rsa.KeySize / 8 - 11; //加密块最大长度限制 |
|
|
|
|
if (data.Length <= maxBlockSize) |
|
|
|
|
{ |
|
|
|
|
byte[] cipherbytes = rsa.Encrypt(data, false); |
|
|
|
|
return Convert.ToBase64String(cipherbytes); |
|
|
|
|
} |
|
|
|
|
MemoryStream plaiStream = new MemoryStream(data); |
|
|
|
|
MemoryStream crypStream = new MemoryStream(); |
|
|
|
|
Byte[] buffer = new Byte[maxBlockSize]; |
|
|
|
|
int blockSize = plaiStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
while (blockSize > 0) |
|
|
|
|
{ |
|
|
|
|
Byte[] toEncrypt = new Byte[blockSize]; |
|
|
|
|
Array.Copy(buffer, 0, toEncrypt, 0, blockSize); |
|
|
|
|
Byte[] cryptograph = rsa.Encrypt(toEncrypt, false); |
|
|
|
|
crypStream.Write(cryptograph, 0, cryptograph.Length); |
|
|
|
|
blockSize = plaiStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return Convert.ToBase64String(crypStream.ToArray(), Base64FormattingOptions.None); |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("EncryptContent = " + content + ",charset = " + charset, ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSADecrypt(string content, string privateKeyPem, string charset, string signType) |
|
|
|
|
{ |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsaCsp = LoadCertificateFile(privateKeyPem, signType); |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
byte[] data = Convert.FromBase64String(content); |
|
|
|
|
int maxBlockSize = rsaCsp.KeySize / 8; //解密块最大长度限制 |
|
|
|
|
if (data.Length <= maxBlockSize) |
|
|
|
|
{ |
|
|
|
|
byte[] cipherbytes = rsaCsp.Decrypt(data, false); |
|
|
|
|
return Encoding.GetEncoding(charset).GetString(cipherbytes); |
|
|
|
|
} |
|
|
|
|
MemoryStream crypStream = new MemoryStream(data); |
|
|
|
|
MemoryStream plaiStream = new MemoryStream(); |
|
|
|
|
Byte[] buffer = new Byte[maxBlockSize]; |
|
|
|
|
int blockSize = crypStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
while (blockSize > 0) |
|
|
|
|
{ |
|
|
|
|
Byte[] toDecrypt = new Byte[blockSize]; |
|
|
|
|
Array.Copy(buffer, 0, toDecrypt, 0, blockSize); |
|
|
|
|
Byte[] cryptograph = rsaCsp.Decrypt(toDecrypt, false); |
|
|
|
|
plaiStream.Write(cryptograph, 0, cryptograph.Length); |
|
|
|
|
blockSize = crypStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return Encoding.GetEncoding(charset).GetString(plaiStream.ToArray()); |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("DecryptContent = " + content + ",charset = " + charset, ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public static string RSADecrypt(string content, string privateKeyPem, string charset, string signType, bool keyFromFile) |
|
|
|
|
{ |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsaCsp = null; |
|
|
|
|
if (keyFromFile) |
|
|
|
|
{ |
|
|
|
|
//文件读取 |
|
|
|
|
rsaCsp = LoadCertificateFile(privateKeyPem, signType); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
//字符串获取 |
|
|
|
|
rsaCsp = LoadCertificateString(privateKeyPem, signType); |
|
|
|
|
} |
|
|
|
|
if (string.IsNullOrEmpty(charset)) |
|
|
|
|
{ |
|
|
|
|
charset = DEFAULT_CHARSET; |
|
|
|
|
} |
|
|
|
|
byte[] data = Convert.FromBase64String(content); |
|
|
|
|
int maxBlockSize = rsaCsp.KeySize / 8; //解密块最大长度限制 |
|
|
|
|
if (data.Length <= maxBlockSize) |
|
|
|
|
{ |
|
|
|
|
byte[] cipherbytes = rsaCsp.Decrypt(data, false); |
|
|
|
|
return Encoding.GetEncoding(charset).GetString(cipherbytes); |
|
|
|
|
} |
|
|
|
|
MemoryStream crypStream = new MemoryStream(data); |
|
|
|
|
MemoryStream plaiStream = new MemoryStream(); |
|
|
|
|
Byte[] buffer = new Byte[maxBlockSize]; |
|
|
|
|
int blockSize = crypStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
while (blockSize > 0) |
|
|
|
|
{ |
|
|
|
|
Byte[] toDecrypt = new Byte[blockSize]; |
|
|
|
|
Array.Copy(buffer, 0, toDecrypt, 0, blockSize); |
|
|
|
|
Byte[] cryptograph = rsaCsp.Decrypt(toDecrypt, false); |
|
|
|
|
plaiStream.Write(cryptograph, 0, cryptograph.Length); |
|
|
|
|
blockSize = crypStream.Read(buffer, 0, maxBlockSize); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return Encoding.GetEncoding(charset).GetString(plaiStream.ToArray()); |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("DecryptContent = " + content + ",charset = " + charset, ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
private static byte[] GetPem(string type, byte[] data) |
|
|
|
|
{ |
|
|
|
|
string pem = Encoding.UTF8.GetString(data); |
|
|
|
|
string header = String.Format("-----BEGIN {0}-----\\n", type); |
|
|
|
|
string footer = String.Format("-----END {0}-----", type); |
|
|
|
|
int start = pem.IndexOf(header) + header.Length; |
|
|
|
|
int end = pem.IndexOf(footer, start); |
|
|
|
|
string base64 = pem.Substring(start, (end - start)); |
|
|
|
|
|
|
|
|
|
return Convert.FromBase64String(base64); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// 加载秘钥文件 |
|
|
|
|
private static RSACryptoServiceProvider LoadCertificateFile(string filename, string signType) |
|
|
|
|
{ |
|
|
|
|
using (System.IO.FileStream fs = System.IO.File.OpenRead(filename)) |
|
|
|
|
{ |
|
|
|
|
byte[] data = new byte[fs.Length]; |
|
|
|
|
byte[] res = null; |
|
|
|
|
fs.Read(data, 0, data.Length); |
|
|
|
|
if (data[0] != 0x30) |
|
|
|
|
{ |
|
|
|
|
res = GetPem("RSA PRIVATE KEY", data); |
|
|
|
|
} |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsa = DecodeRSAPrivateKey(res, signType); |
|
|
|
|
return rsa; |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("LoadCertificateFile fail", ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
private static RSACryptoServiceProvider LoadCertificateString(string strKey, string signType) |
|
|
|
|
{ |
|
|
|
|
byte[] data = null; |
|
|
|
|
//读取带 |
|
|
|
|
//ata = Encoding.Default.GetBytes(strKey); |
|
|
|
|
data = Convert.FromBase64String(strKey); |
|
|
|
|
//data = GetPem("RSA PRIVATE KEY", data); |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
RSACryptoServiceProvider rsa = DecodeRSAPrivateKey(data, signType); |
|
|
|
|
return rsa; |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("DecodeRSAPrivateKey fail", ex); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
private static RSACryptoServiceProvider DecodeRSAPrivateKey(byte[] privkey, string signType) |
|
|
|
|
{ |
|
|
|
|
byte[] MODULUS, E, D, P, Q, DP, DQ, IQ; |
|
|
|
|
|
|
|
|
|
// --------- Set up stream to decode the asn.1 encoded RSA private key ------ |
|
|
|
|
MemoryStream mem = new MemoryStream(privkey); |
|
|
|
|
BinaryReader binr = new BinaryReader(mem); //wrap Memory Stream with BinaryReader for easy reading |
|
|
|
|
byte bt = 0; |
|
|
|
|
ushort twobytes = 0; |
|
|
|
|
int elems = 0; |
|
|
|
|
try |
|
|
|
|
{ |
|
|
|
|
twobytes = binr.ReadUInt16(); |
|
|
|
|
if (twobytes == 0x8130) //data read as little endian order (actual data order for Sequence is 30 81) |
|
|
|
|
binr.ReadByte(); //advance 1 byte |
|
|
|
|
else if (twobytes == 0x8230) |
|
|
|
|
binr.ReadInt16(); //advance 2 bytes |
|
|
|
|
else |
|
|
|
|
return null; |
|
|
|
|
|
|
|
|
|
twobytes = binr.ReadUInt16(); |
|
|
|
|
if (twobytes != 0x0102) //version number |
|
|
|
|
return null; |
|
|
|
|
bt = binr.ReadByte(); |
|
|
|
|
if (bt != 0x00) |
|
|
|
|
return null; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
//------ all private key components are Integer sequences ---- |
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
MODULUS = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
E = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
D = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
P = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
Q = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
DP = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
DQ = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
elems = GetIntegerSize(binr); |
|
|
|
|
IQ = binr.ReadBytes(elems); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// ------- create RSACryptoServiceProvider instance and initialize with public key ----- |
|
|
|
|
CspParameters CspParameters = new CspParameters(); |
|
|
|
|
CspParameters.Flags = CspProviderFlags.UseMachineKeyStore; |
|
|
|
|
|
|
|
|
|
int bitLen = 1024; |
|
|
|
|
if ("RSA2".Equals(signType)) |
|
|
|
|
{ |
|
|
|
|
bitLen = 2048; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
RSACryptoServiceProvider RSA = new RSACryptoServiceProvider(bitLen, CspParameters); |
|
|
|
|
RSAParameters RSAparams = new RSAParameters(); |
|
|
|
|
RSAparams.Modulus = MODULUS; |
|
|
|
|
RSAparams.Exponent = E; |
|
|
|
|
RSAparams.D = D; |
|
|
|
|
RSAparams.P = P; |
|
|
|
|
RSAparams.Q = Q; |
|
|
|
|
RSAparams.DP = DP; |
|
|
|
|
RSAparams.DQ = DQ; |
|
|
|
|
RSAparams.InverseQ = IQ; |
|
|
|
|
RSA.ImportParameters(RSAparams); |
|
|
|
|
return RSA; |
|
|
|
|
} |
|
|
|
|
catch (Exception ex) |
|
|
|
|
{ |
|
|
|
|
throw new SopException("DecodeRSAPrivateKey fail" + ex.Message, ex); |
|
|
|
|
} |
|
|
|
|
finally |
|
|
|
|
{ |
|
|
|
|
binr.Close(); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
private static int GetIntegerSize(BinaryReader binr) |
|
|
|
|
{ |
|
|
|
|
byte bt = 0; |
|
|
|
|
byte lowbyte = 0x00; |
|
|
|
|
byte highbyte = 0x00; |
|
|
|
|
int count = 0; |
|
|
|
|
bt = binr.ReadByte(); |
|
|
|
|
if (bt != 0x02) //expect integer |
|
|
|
|
return 0; |
|
|
|
|
bt = binr.ReadByte(); |
|
|
|
|
|
|
|
|
|
if (bt == 0x81) |
|
|
|
|
count = binr.ReadByte(); // data size in next byte |
|
|
|
|
else |
|
|
|
|
if (bt == 0x82) |
|
|
|
|
{ |
|
|
|
|
highbyte = binr.ReadByte(); // data size in next 2 bytes |
|
|
|
|
lowbyte = binr.ReadByte(); |
|
|
|
|
byte[] modint = { lowbyte, highbyte, 0x00, 0x00 }; |
|
|
|
|
count = BitConverter.ToInt32(modint, 0); |
|
|
|
|
} |
|
|
|
|
else |
|
|
|
|
{ |
|
|
|
|
count = bt; // we already have the data size |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
while (binr.ReadByte() == 0x00) |
|
|
|
|
{ //remove high order zeros in data |
|
|
|
|
count -= 1; |
|
|
|
|
} |
|
|
|
|
binr.BaseStream.Seek(-1, SeekOrigin.Current); //last ReadByte wasn't a removed zero, so back up a byte |
|
|
|
|
return count; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
tanghc
6 years ago