将Nodejs或Java签名散列函数转换为PHP

Question

我试图使用PHP中的私钥创建PKI签名。

以下是创建签名的规则

1. 使用SHA-2算法生成签名基字符串.

的散列。

1. 使用应用程序的私钥签名散列值.

1. Base64 64-对签名值进行编码。注意: Base64编码不应该包括CRLF (回车/行提要)每72个字符，这是严格的Base64编码的一部分。相反，整个Base64编码的字符串应该没有换行符。

1. 将字符串设置为签名参数.

的值。

Nodejs代码示例：

var signature = crypto.createSign('RSA-SHA256')
                      .update(baseString)
                      .sign(signWith, 'base64');

Java代码

String baseString = "Constructed base string";
Signature sig = Signature.getInstance("RSA-SHA256");
sig.initSign(privateKey); // Get private key from keystone
sig.update(baseString.getBytes());
byte[] signedData = sig.sign();
String finalStr = Base64.getEncoder().encodeToString(signedData);

我试图将这段代码转换成PHP，我的基本字符串是正确的。

// $data = "BaseString";
// $private_key_pem = openssl_pkey_get_private("file://".$path."privateKey.pem",'passphrase');
$hash = hash('sha256', $data);
$result = openssl_sign($hash, $signature, $private_key_pem,'RSA-SHA256');
$signature = base64_encode($signature);

这是正确的吗？如果是，则API响应为“无效PKI签名”。

Answer 1

我在Java和PHP中设置了两个程序来比较输出(签名= finalStr)和签名的验证。为了获得类似的结果，我在两个程序中硬编码了RSA密钥，所以代码看起来有点奇怪。

为了获得更短的密钥字符串，我生成了不安全的512位RSA密钥--在生产中至少使用2048位密钥。。

如您所见，这两个程序生成以下两个程序的相同签名：

finalStr: NEHC7o+mW34qoTNOwXRQIRfs80s/YhudzX0K4AGlFTeyyJcRhit9f03iw58Ww1Eo3zfkSrrz3411TZheVLHFnQ==

两个程序都可以验证签名为true。

这是Java代码：

import java.security.*;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.Base64;

public class MainSo {
    public static void main(String[] args) throws NoSuchAlgorithmException, SignatureException, InvalidKeyException, InvalidKeySpecException {
        System.out.println("https://stackoverflow.com/questions/62674669/converting-nodejs-or-java-signature-hashing-function-to-php");

        // keys are sample rsa 512 keys
        String privateKey1 = "-----BEGIN PRIVATE KEY-----\n" +
                "MIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAqg8Hlhxm7LfqASjF\n" +
                "KMce91anr2ViG/K8GQmk0HPMiw3Lh6DrGDGmsw2jUczwQTyv07qDwWwf+vaEiTdk\n" +
                "jd1JxQIDAQABAkAOGbTtU2mNUyqJ8hF28hu1MnAw8N0TqCrEgLIzvoZFOTqvxPqc\n" +
                "VaCuUs4Fm/J5x8gWLycsRmbBMeecIzvjzXY5AiEAtoZ4WSplvJbEHjiKhW+dRICc\n" +
                "tSTcGaTf0v4vdfQTiGsCIQDug9wLUZDiSttbz2QlA3QthFX+UIu8fE/A/lGEjXnC\n" +
                "jwIgcejRyrPO8jcVBdc7e7MAbvPk2Je8VLS0irTfYbmFRykCIQDCFsbu5vbxTlzm\n" +
                "fwNNI1xc1b1sb3rmbHox4EHRjZaxfQIgEr2r53jmSRlyQfueo4nLZJhTGXdaJN8Z\n" +
                "yoWwFsFqsiA=\n" +
                "-----END PRIVATE KEY-----";
        String publicKey1 = "-----BEGIN PUBLIC KEY-----\n" +
                "MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKoPB5YcZuy36gEoxSjHHvdWp69lYhvy\n" +
                "vBkJpNBzzIsNy4eg6xgxprMNo1HM8EE8r9O6g8FsH/r2hIk3ZI3dScUCAwEAAQ==\n" +
                "-----END PUBLIC KEY-----";
        // rsa key generation
        // Remove markers and new line characters in private key
        String realPrivateKey = privateKey1.replaceAll("-----END PRIVATE KEY-----", "")
                .replaceAll("-----BEGIN PRIVATE KEY-----", "")
                .replaceAll("\n", "");
        byte[] priKey = Base64.getDecoder().decode(realPrivateKey);
        PKCS8EncodedKeySpec specPri = new PKCS8EncodedKeySpec(priKey);
        KeyFactory kf = KeyFactory.getInstance("RSA");
        PrivateKey privateKey = kf.generatePrivate(specPri);
        // Remove markers and new line characters in public key
        String realPublicKey = publicKey1.replaceAll("-----END PUBLIC KEY-----", "")
                .replaceAll("-----BEGIN PUBLIC KEY-----", "")
                .replaceAll("\n", "");
        byte[] pubKey = Base64.getDecoder().decode(realPublicKey);
        X509EncodedKeySpec specPub = new X509EncodedKeySpec(pubKey);
        PublicKey publicKey = kf.generatePublic(specPub);

        String baseString = "Constructed base string";

        //Signature sig = Signature.getInstance("RSA-SHA256");
        Signature sig = Signature.getInstance("SHA256withRSA");
        sig.initSign(privateKey); // Get private key from keystone
        sig.update(baseString.getBytes());
        byte[] signedData = sig.sign();
        String finalStr = Base64.getEncoder().encodeToString(signedData);
        System.out.println("finalStr: " + finalStr);

        // verify signature
        byte[] signedDataVerify = Base64.getDecoder().decode(finalStr);
        Signature sigVerify = Signature.getInstance("SHA256withRSA");
        sigVerify.initVerify(publicKey);
        sigVerify.update(baseString.getBytes());
        boolean verified = sigVerify.verify(signedDataVerify);
        System.out.println("signature verified: " + verified);
    }
}

下面是PHP代码：

<?php
// https://stackoverflow.com/questions/62674669/converting-nodejs-or-java-signature-hashing-function-to-php
$data = 'Constructed base string';

// sample 512 rsa keys
$privateKey1 = "-----BEGIN PRIVATE KEY-----\n" .
        "MIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAqg8Hlhxm7LfqASjF\n" .
        "KMce91anr2ViG/K8GQmk0HPMiw3Lh6DrGDGmsw2jUczwQTyv07qDwWwf+vaEiTdk\n" .
        "jd1JxQIDAQABAkAOGbTtU2mNUyqJ8hF28hu1MnAw8N0TqCrEgLIzvoZFOTqvxPqc\n" .
        "VaCuUs4Fm/J5x8gWLycsRmbBMeecIzvjzXY5AiEAtoZ4WSplvJbEHjiKhW+dRICc\n" .
        "tSTcGaTf0v4vdfQTiGsCIQDug9wLUZDiSttbz2QlA3QthFX+UIu8fE/A/lGEjXnC\n" .
        "jwIgcejRyrPO8jcVBdc7e7MAbvPk2Je8VLS0irTfYbmFRykCIQDCFsbu5vbxTlzm\n" .
        "fwNNI1xc1b1sb3rmbHox4EHRjZaxfQIgEr2r53jmSRlyQfueo4nLZJhTGXdaJN8Z\n" .
        "yoWwFsFqsiA=\n" .
        "-----END PRIVATE KEY-----\n";

$publicKey1 = "-----BEGIN PUBLIC KEY-----\n" .
        "MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKoPB5YcZuy36gEoxSjHHvdWp69lYhvy\n" .
        "vBkJpNBzzIsNy4eg6xgxprMNo1HM8EE8r9O6g8FsH/r2hIk3ZI3dScUCAwEAAQ==\n" .
        "-----END PUBLIC KEY-----\n";

$privateKey = openssl_pkey_get_private ($privateKey1);
$publicKey = openssl_pkey_get_public($publicKey1);

// create the signature
openssl_sign($data, $signature, $privateKey, OPENSSL_ALGO_SHA256);
echo 'finalStr (Base64):' . PHP_EOL . base64_encode($signature) . PHP_EOL;

// verify signature
$result = openssl_verify($data, $signature, $publicKey, "sha256WithRSAEncryption");
echo 'verified (0=false, 1=true): ' . $result;
?>