crypto

func BcryptHash ¶

func BcryptHash(str string) (string, error)

Deprecated

BcryptHash 对传入字符串进行bcrypt哈希

func BcryptHash2 ¶ added in v0.6.3

func BcryptHash2(password []byte) ([]byte, error)

func BcryptMatch ¶

func BcryptMatch(hash string, str string) bool

Deprecated

BcryptMatch 对传入字符串和哈希字符串进行比对,str为明文

func BcryptMatch2 ¶ added in v0.6.3

func BcryptMatch2(hashedPassword []byte, password []byte) error

func GenCertificate ¶

func GenCertificate() (cert tls.Certificate, err error)

func GenerateKeyPair ¶

func GenerateKeyPair() (rawCert, rawKey []byte, err error)

func GenerateRSAKey ¶

func GenerateRSAKey(bits int) (Private []byte, Public []byte, err error)

生成RSA私钥和公钥，pem格式

func GenerateRandomSeed ¶

func GenerateRandomSeed() int64

GenerateRandomSeed 生成随机种子

func GenerateSM2Key ¶

func GenerateSM2Key() (pubKey, priKey []byte, err error)

func GenerateTLSConfig ¶

func GenerateTLSConfig() (*tls.Config, error)

Setup a bare-bones TLS config for the server

例如:添加quic协议支持
config.NextProtos = append(config.NextProtos, "quic")

func LoadX509KeyPairTLSConfig ¶

func LoadX509KeyPairTLSConfig(certFile, keyFile string) (*tls.Config, error)

func PKCS7Padding ¶

func PKCS7Padding(plainText []byte, blockSize int) []byte

func PKCS7UnPadding ¶

func PKCS7UnPadding(plainText []byte, blockSize int) ([]byte, error)

func RSA_DecryptOAEP ¶

func RSA_DecryptOAEP(cipherText []byte, privateKey []byte, label []byte) ([]byte, error)

RSA解密,填充模式OAEP,private为私钥的pem格式

func RSA_DecryptPKCS1v15 ¶

func RSA_DecryptPKCS1v15(cipherText []byte, privateKey []byte) ([]byte, error)

RSA解密,填充模式PKCS1v15,private为私钥的pem格式

func RSA_EncryptOAEP ¶

func RSA_EncryptOAEP(plainText []byte, publicKey []byte, label []byte) ([]byte, error)

RSA加密,填充方式为OAEP，publicKey为公钥的pem格式。 对结果进行base64编码可以提高可读性。

The random parameter is used as a source of entropy to ensure that encrypting the same message twice doesn't result in the same ciphertext.

The label parameter may contain arbitrary data that will not be encrypted, but which gives important context to the message. For example, if a given public key is used to encrypt two types of messages then distinct label values could be used to ensure that a ciphertext for one purpose cannot be used for another by an attacker. If not required it can be empty.

func RSA_EncryptPKCS1v15 ¶

func RSA_EncryptPKCS1v15(plainText []byte, publicKey []byte) ([]byte, error)

RSA加密,填充方式为PKCS1v15,publicKey为公钥的pem格式。 对结果进行base64编码可以提高可读性。

The message must be no longer than the length of the public modulus minus 11 bytes.

WARNING: use of this function to encrypt plaintexts other than session keys is dangerous. Use RSA OAEP in new protocols.

在RSA攻击中，存在着“小明文攻击“的方式；
在明文够小时，密文也够小，直接开e次方即可；
在明文有点小时，如果e也较小，可用pow(m,e)=n*k+c穷举k尝试爆破，所以，比如说，在选择明文攻击中，单纯的RSA非常容易被破解。
于是，我们就像将密文进行一下填充，最好让密文都等长。
但是填充方式也是很讲究的；不好的填充规则往往仅仅有限的增加了攻击的难度，或者难以实现等长密文。
于是我们就查到了OAEP——最优非对称加密填充。

func RandNByte ¶

func RandNByte(n int) []byte

RandNByte returns a slice of n random bytes.

func RsaSignPKCS1v15 ¶

func RsaSignPKCS1v15(src []byte, privateKey []byte) ([]byte, error)

rsa数字签名，private为私钥的pem格式

func RsaVerifyPKCS1v15 ¶

func RsaVerifyPKCS1v15(src []byte, sign []byte, publicKey []byte) error

rsa数字验签，publicKey为公钥的pem格式

func SM2DecryptAsn1 ¶

func SM2DecryptAsn1(priKey, cipherText []byte) (plainText []byte, err error)

func SM2EncryptAsn1 ¶

func SM2EncryptAsn1(pubKey, plainText []byte) (cipherText []byte, err error)

返回asn.1编码格式的密文内容