Golang解密来自openpgp.js的PGP

Question

需要在Golang中使用对称PGP解密的帮助，我一直试图在OpenPGP.js上生成的加密十六进制上运行对称解密，不幸的是，在Golang中没有成功解密。这是JS中的加密。

const openpgp = require('openpgp')

async function main() {
  let options = {
    message: openpgp.message.fromBinary(new Uint8Array([0x01, 0x01, 0x01])), // input as Message object
    passwords: ['secret stuff'],                                             // multiple passwords possible
    armor: false                                                             // don't ASCII armor (for Uint8Array output)
  }

  const cypher_text = await openpgp.encrypt(options)
  const encrypted = cypher_text.message.packets.write()

  console.log(Buffer.from(encrypted).toString('hex'))

  options = {
    message: await openpgp.message.read(encrypted), // parse encrypted bytes
    passwords: ['secret stuff'],              // decrypt with password
    format: 'binary'                          // output as Uint8Array
  }

  const decrypted = await openpgp.decrypt(options)

  console.log(decrypted.data)
}

main()

console.log >>

c32e040903088c4db97456263252e0ef4f42627301e0ba3323b141a9ebd0476e5fe848d3c2b6021c8c06581ae2d19f7cd23b011b4b3a68758cb6fb12287db2a9ab6fdfad97670ae995e4deb7ca313d0aa705d264850adefb20353b263fc32ff8dc571f6dce8b722ddbdf40a907

Uint8Array [ 1, 1, 1 ]

我的代码基于下面的GIST https://gist.github.com/jyap808/8250124

package main

import (
    "bytes"
    "errors"
    "io/ioutil"
    "log"

    "golang.org/x/crypto/openpgp/armor"
    "golang.org/x/crypto/openpgp/packet"

    "golang.org/x/crypto/openpgp"
)

func main() {
    password := []byte("secret stuff")
    packetConfig := &packet.Config{
        DefaultCipher: packet.CipherAES256,
    }

    cypherHex := []byte("c32e040903088c4db97456263252e0ef4f42627301e0ba3323b141a9ebd0476e5fe848d3c2b6021c8c06581ae2d19f7cd23b011b4b3a68758cb6fb12287db2a9ab6fdfad97670ae995e4deb7ca313d0aa705d264850adefb20353b263fc32ff8dc571f6dce8b722ddbdf40a907")

    encbuf := bytes.NewBuffer(nil)
    w, err := armor.Encode(encbuf, openpgp.SignatureType, nil)
    if err != nil {
        log.Fatal(err)
    }

    w.Write(cypherHex)
    encbuf.Read(cypherHex)
    w.Close()

    log.Println(encbuf)

    decbuf := bytes.NewBuffer([]byte(encbuf.String()))
    armorBlock, err := armor.Decode(decbuf)
    if err != nil {
        log.Fatalf("Failed on decode %+v\n", err)
    }

    failed := false
    prompt := func(keys []openpgp.Key, symmetric bool) ([]byte, error) {
        if failed {
            return nil, errors.New("decryption failed")
        }
        return password, nil
    }

    md, err := openpgp.ReadMessage(armorBlock.Body, nil, prompt, packetConfig)
    if err != nil {
        log.Fatalf("Failed on read message %+v\n", err)
    }

    plaintext, err := ioutil.ReadAll(md.UnverifiedBody)
    if err != nil {
        log.Fatalf("Failed on read all body %+v\n", err)
    }

    log.Println(plaintext)
}

在写完日志后我注意到装甲钥匙有点不完整。

2020/01/24 22:51:54 jcwYWU5
OTVlNGRlYjdjYTMxM2QwYWE3MDVkMjY0ODUwYWRlZmIyMDM1M2IyNjNmYzMyZmY4
ZGM1NzFmNmRjZThiNzIyZGRiZGY0MGE5MDc=
=9ciH
-----END PGP SIGNATURE-----

更新:尝试在没有装甲的情况下解密，如果使用EOF失败

import (
    "bytes"
    "io/ioutil"
    "log"

    "golang.org/x/crypto/openpgp"

    "golang.org/x/crypto/openpgp/packet"
)

func main() {
    password := []byte("secret stuff")
    packetConfig := &packet.Config{
        DefaultCipher: packet.CipherAES128,
    }

    cypherHex := []byte("c32e040903088c4db97456263252e0ef4f42627301e0ba3323b141a9ebd0476e5fe848d3c2b6021c8c06581ae2d19f7cd23b011b4b3a68758cb6fb12287db2a9ab6fdfad97670ae995e4deb7ca313d0aa705d264850adefb20353b263fc32ff8dc571f6dce8b722ddbdf40a907")

    encbuf := bytes.NewBuffer(nil)
    encbuf.Read(cypherHex)

    prompt := func(keys []openpgp.Key, symmetric bool) ([]byte, error) {
        return password, nil
    }

    md, err := openpgp.ReadMessage(encbuf, nil, prompt, packetConfig)
    if err != nil {
        log.Fatalf("Failed on read message %+v\n", err)
    }

    plaintext, err := ioutil.ReadAll(md.UnverifiedBody)
    if err != nil {
        log.Fatalf("Failed on read all body %+v\n", err)
    }

    log.Println(plaintext)
}

Answer 1

首先，您没有解码十六进制编码的密文。使用encoding/hex包对数据进行解码：

ct, err := hex.DecodeString(`c32e040903088c4db97456263252e0ef4f42627301e0ba3323b141a9ebd0476e5fe848d3c2b6021c8c06581ae2d19f7cd23b011b4b3a68758cb6fb12287db2a9ab6fdfad97670ae995e4deb7ca313d0aa705d264850adefb20353b263fc32ff8dc571f6dce8b722ddbdf40a907`)
if err != nil {
    log.Fatal(err)
}

下一个问题是您错误地创建了bytes.Buffer。您没有将数据放入缓冲区，然后调用什么也不做的Read方法(而且您确实用数据初始化了它，Read将在您解密之前“读出”所有数据)。缓冲区可以用数据初始化，也可以使用Write方法填充--在本例中，您只需要一个io.Reader，并且可以使用bytes.NewReader。

r := bytes.NewReader(ct)

最后，您现在有3个0x01字节，您可以使用更好的格式更清楚地看到它：

d, err := ioutil.ReadAll(md.UnverifiedBody)
if err != nil {
    log.Fatal(err)
}

fmt.Printf("%#v\n", d)

https://play.golang.org/p/Y3VqADQvEIH