python

超轻量级php框架startmvc

Python3.7基于hashlib和Crypto实现加签验签功能(实例代码)

更新时间:2020-08-12 04:12:01 作者:startmvc
环境:Python3.7依赖库:importdatetimeimportrandomimportrequestsimporthashlibimportjsonimportbase64fromCrypto.Publ

环境:

Python3.7

依赖库:


import datetime
import random
import requests
import hashlib
import json
import base64
from Crypto.PublicKey import RSA
from Crypto.Signature import PKCS1_v1_5
from Crypto.Hash import SHA256
from Crypto.Cipher import AES

加签:


def sign(signflag,keypath,baseRequest):
 #http请求body
 print(baseRequest)
 #加签标志
 if not signflag: return baseRequest
 else:
 #取请求体中的业务数据
 businessdata = json.dumps(baseRequest["data"])
 #读取私钥(.key格式,可使用openssl或java.keytools产生)
 with open(keypath,'r') as rsaKeyFile:
 rsaKey = rsaKeyFile.read().replace("\n",'')
 print(rsaKey)
 rsaKeyBytes = base64.b64decode(rsaKey)
 print(rsaKeyBytes)
 #SHA256摘要,RSA加密
 priKey = RSA.importKey(rsaKeyBytes)
 signer = PKCS1_v1_5.new(priKey)
 hash_obj = SHA256.new(business_data.encode('utf-8'))
 signature = base64.b64encode(signer.sign(hash_obj))
 print(signature)
 #把签名加进请求体并返回
 baseRequest['sign'] = signature.decode()
 print(baseRequest)
 return baseRequest

验签:


def validata(signflag,cerpath,res):
 if not signflag: return res
 else:
 #取业务数据和签名
 data = res['data']
 sign = res['sign']
 #此处cer已转换成pem格式,使用openssl工具
 #openssl x509 -inform der -pubkey -noout -in xxxxx.cer>xxxxx.pem
 cert = open(cerpath).read().replace("-----BEGIN PUBLIC KEY-----\n","").replace("-----END PUBLIC KEY-----\n","").replace("\n","")
 print(cert)
 #验签逻辑同加签
 pubBytes = base64.b64decode(cert)
 pubKey = RSA.importKey(pubBytes)
 signer = SHA256.new(json.dumps(data).encode("utf-8"))
 verifier = PKCS1_v1_5.new(pubKey)
 return verifier.verify(signer,base64.b64decode(sign))

总结

以上所述是小编给大家介绍的Python3.7基于hashlib和Crypto实现加签验签功能,希望对大家有所帮助,如果大家有任何疑问请给我留言,小编会及时回复大家的。在此也非常感谢大家对脚本之家网站的支持! 如果你觉得本文对你有帮助,欢迎转载,烦请注明出处,谢谢!

python 加签验签功能 python hashlib python Crypto