Rsa加密 解密 签名 验签

RsaBaseParameters

using System.Security.Cryptography;
using System.Text;

namespace Benchint.Util.Rsa.Models
{
    /// <summary>
    /// RSA基础参数
    /// </summary>
    public abstract class RsaBaseParameters
    {
        /// <summary>
        /// 编码 默认(UTF-8)
        /// </summary>
        public Encoding Encoding { get; set; } = Encoding.UTF8;
    }
}

RsaDecryptParameters

using System.Security.Cryptography;

namespace Benchint.Util.Rsa.Models
{
    /// <summary>
    /// RSA解密参数
    /// </summary>
    public class RsaDecryptParameters : RsaBaseParameters
    {
        /// <summary>
        /// 操作数据
        /// </summary>
        public string Data { get; set; }

        /// <summary>
        /// 私钥
        /// </summary>
        public string PrivateKey { get; set; }

        /// <summary>
        /// 加密填充方式 默认(Pkcs1)
        /// </summary>
        public RSAEncryptionPadding RsaEncryptionPadding { get; set; } = RSAEncryptionPadding.Pkcs1;
    }
}

RsaEncryptParameters

using System.Security.Cryptography;

namespace Benchint.Util.Rsa.Models
{
    /// <summary>
    /// Rsa加密参数
    /// </summary>
    public class RsaEncryptParameters : RsaBaseParameters
    {
        /// <summary>
        /// 操作数据
        /// </summary>
        public string Data { get; set; }

        /// <summary>
        /// 私钥
        /// </summary>
        public string PublicKey { get; set; }

        /// <summary>
        /// 加密填充方式 默认(Pkcs1)
        /// </summary>
        public RSAEncryptionPadding RsaEncryptionPadding { get; set; } = RSAEncryptionPadding.Pkcs1;
    }
}

RsaSignParameters

using System.Security.Cryptography;

namespace Benchint.Util.Rsa.Models
{
    /// <summary>
    /// Rsa签名参数
    /// </summary>
    public class RsaSignParameters : RsaBaseParameters
    {
        /// <summary>
        /// 操作数据
        /// </summary>
        public string Data { get; set; }

        /// <summary>
        /// 私钥
        /// </summary>
        public string PrivateKey { get; set; }

        /// <summary>
        /// 签名填充方式 默认(Pkcs1)
        /// </summary>
        public RSASignaturePadding RsaSignaturePadding { get; set; } = RSASignaturePadding.Pkcs1;

        /// <summary>
        /// 散列算法 默认(SHA256)
        /// </summary>
        public HashAlgorithmName HashAlgorithmName { get; set; } = HashAlgorithmName.SHA256;
    }
}

RsaVerifyParameters

using System.Security.Cryptography;

namespace Benchint.Util.Rsa.Models
{
    /// <summary>
    /// 公钥验证签名参数
    /// </summary>
    public class RsaVerifyParameters : RsaBaseParameters
    {
        /// <summary>
        /// 操作数据
        /// </summary>
        public string Data { get; set; }

        /// <summary>
        /// 签名
        /// </summary>
        public string Sign { get; set; }

        /// <summary>
        /// 公钥
        /// </summary>
        public string PublicKey { get; set; }

        /// <summary>
        /// 签名填充方式 默认(Pkcs1)
        /// </summary>
        public RSASignaturePadding RsaSignaturePadding { get; set; } = RSASignaturePadding.Pkcs1;

        /// <summary>
        /// 散列算法 默认(SHA256)
        /// </summary>
        public HashAlgorithmName HashAlgorithmName { get; set; } = HashAlgorithmName.SHA256;
    }
}

IRsaHelperService

using Benchint.Util.Rsa.Models;

namespace Benchint.Util.Rsa
{
    public interface IRsaHelperService
    {
        /// <summary>
        /// 使用私钥签名
        /// </summary>
        /// <param name="rsaSignParameters">私钥签名参数</param>
        /// <returns>签名</returns>
        string Sign(RsaSignParameters rsaSignParameters);

        /// <summary>
        /// 使用公钥验证签名
        /// </summary>
        /// <param name="rsaVerifyParameters">公钥验证签名参数</param>
        /// <returns>验证结果</returns>
        bool Verify(RsaVerifyParameters rsaVerifyParameters);

        /// <summary>
        /// 加密
        /// </summary>
        /// <param name="rsaEncryptParameters">加密参数</param>
        /// <returns>加密字符串</returns>
        string Encrypt(RsaEncryptParameters rsaEncryptParameters);

        /// <summary>
        /// 解密
        /// </summary>
        /// <param name="rsaDecryptParameters">解密参数</param>
        /// <returns>原数据</returns>
        string Decrypt(RsaDecryptParameters rsaDecryptParameters);

        /// <summary>
        /// 创建密钥对(Pkcs1)
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <param name="format">format</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        (string privateKey, string publicKey) CreatePkcs1Key(int keySize = 2048, bool format = false);

        /// <summary>
        /// 创建密钥对(Pkcs8)
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <param name="format">format</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        (string privateKey, string publicKey) CreatePkcs8Key(int keySize = 2048, bool format = false);

        /// <summary>
        /// 创建密钥对(XmlKey)
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        (string privateKey, string publicKey) CreateXmlKey(int keySize = 2048);
    }
}

RsaHelperService

using System;
using System.IO;
using System.Security.Cryptography;
using Benchint.Util.Rsa.Models;
using XC.RSAUtil;

namespace Benchint.Util.Rsa
{
    public class RsaHelperService : IRsaHelperService
    {
        /// <summary>
        /// 使用私钥签名
        /// </summary>
        /// <param name="rsaSignParameters">私钥签名参数</param>
        /// <returns>签名</returns>
        public string Sign(RsaSignParameters rsaSignParameters)
        {
            var dataBytes = rsaSignParameters.Encoding.GetBytes(rsaSignParameters.Data);
            var privateKeyRsaProvider = CreateRsaProviderFromPrivateKey(rsaSignParameters.PrivateKey);
            var signatureBytes = privateKeyRsaProvider.SignData(dataBytes, rsaSignParameters.HashAlgorithmName, rsaSignParameters.RsaSignaturePadding);
            return Convert.ToBase64String(signatureBytes);
        }

        /// <summary>
        /// 使用公钥验证签名
        /// </summary>
        /// <param name="rsaVerifyParameters">公钥验证签名参数</param>
        /// <returns>验证结果</returns>
        public bool Verify(RsaVerifyParameters rsaVerifyParameters)
        {
            var dataBytes = rsaVerifyParameters.Encoding.GetBytes(rsaVerifyParameters.Data);
            var signBytes = Convert.FromBase64String(rsaVerifyParameters.Sign);
            var publicKeyRsaProvider = CreateRsaProviderFromPublicKey(rsaVerifyParameters.PublicKey);
            var verify = publicKeyRsaProvider.VerifyData(dataBytes, signBytes, rsaVerifyParameters.HashAlgorithmName, rsaVerifyParameters.RsaSignaturePadding);
            return verify;
        }

        /// <summary>
        /// 加密
        /// </summary>
        /// <param name="rsaEncryptParameters">加密参数</param>
        /// <returns>加密字符串</returns>
        public string Encrypt(RsaEncryptParameters rsaEncryptParameters)
        {
            var publicKeyRsaProvider = CreateRsaProviderFromPublicKey(rsaEncryptParameters.PublicKey);
            return Convert.ToBase64String(publicKeyRsaProvider.Encrypt(rsaEncryptParameters.Encoding.GetBytes(rsaEncryptParameters.Data), rsaEncryptParameters.RsaEncryptionPadding));
        }

        /// <summary>
        /// 解密
        /// </summary>
        /// <param name="rsaDecryptParameters">解密参数</param>
        /// <returns>原数据</returns>
        public string Decrypt(RsaDecryptParameters rsaDecryptParameters)
        {
            var privateKeyRsaProvider = CreateRsaProviderFromPrivateKey(rsaDecryptParameters.PrivateKey);
            return rsaDecryptParameters.Encoding.GetString(privateKeyRsaProvider.Decrypt(Convert.FromBase64String(rsaDecryptParameters.Data), rsaDecryptParameters.RsaEncryptionPadding));
        }

        /// <summary>
        /// 创建密钥对
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <param name="format">format</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        public (string privateKey, string publicKey) CreatePkcs1Key(int keySize = 2048, bool format = false)
        {
            var keyList = RsaKeyGenerator.Pkcs1Key(keySize, format);
            var privateKey = keyList[0];
            var publicKey = keyList[1];
            return (privateKey, publicKey);
        }

        /// <summary>
        /// 创建密钥对(Pkcs8)
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <param name="format">format</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        public (string privateKey, string publicKey) CreatePkcs8Key(int keySize = 2048, bool format = false)
        {
            var keyList = RsaKeyGenerator.Pkcs8Key(keySize, format);
            var privateKey = keyList[0];
            var publicKey = keyList[1];
            return (privateKey, publicKey);
        }

        /// <summary>
        /// 创建密钥对(XmlKey)
        /// </summary>
        /// <param name="keySize">keySize</param>
        /// <returns>返回公钥 私钥密钥对</returns>
        public (string privateKey, string publicKey) CreateXmlKey(int keySize = 2048)
        {
            var keyList = RsaKeyGenerator.XmlKey(keySize);
            var privateKey = keyList[0];
            var publicKey = keyList[1];
            return (privateKey, publicKey);
        }

        #region 使用私钥创建RSA实例
        private RSA CreateRsaProviderFromPrivateKey(string privateKey)
        {
            var privateKeyBits = Convert.FromBase64String(privateKey);

            var rsa = RSA.Create();
            var rsaParameters = new RSAParameters();

            using (BinaryReader binr = new BinaryReader(new MemoryStream(privateKeyBits)))
            {
                byte bt = 0;
                ushort twobytes = 0;
                twobytes = binr.ReadUInt16();
                if (twobytes == 0x8130)
                    binr.ReadByte();
                else if (twobytes == 0x8230)
                    binr.ReadInt16();
                else
                    throw new Exception("Unexpected value read binr.ReadUInt16()");

                twobytes = binr.ReadUInt16();
                if (twobytes != 0x0102)
                    throw new Exception("Unexpected version");

                bt = binr.ReadByte();
                if (bt != 0x00)
                    throw new Exception("Unexpected value read binr.ReadByte()");

                rsaParameters.Modulus = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.Exponent = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.D = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.P = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.Q = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.DP = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.DQ = binr.ReadBytes(GetIntegerSize(binr));
                rsaParameters.InverseQ = binr.ReadBytes(GetIntegerSize(binr));
            }

            rsa.ImportParameters(rsaParameters);
            return rsa;
        }
        #endregion

        #region 使用公钥创建RSA实例
        private RSA CreateRsaProviderFromPublicKey(string publicKeyString)
        {
            // encoded OID sequence for  PKCS #1 rsaEncryption szOID_RSA_RSA = "1.2.840.113549.1.1.1"
            byte[] seqOid = { 0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x01, 0x05, 0x00 };
            byte[] seq = new byte[15];

            var x509Key = Convert.FromBase64String(publicKeyString);

            // ---------  Set up stream to read the asn.1 encoded SubjectPublicKeyInfo blob  ------
            using (MemoryStream mem = new MemoryStream(x509Key))
            {
                using (BinaryReader binr = new BinaryReader(mem))  //wrap Memory Stream with BinaryReader for easy reading
                {
                    byte bt = 0;
                    ushort twobytes = 0;

                    twobytes = binr.ReadUInt16();
                    if (twobytes == 0x8130) //data read as little endian order (actual data order for Sequence is 30 81)
                        binr.ReadByte();    //advance 1 byte
                    else if (twobytes == 0x8230)
                        binr.ReadInt16();   //advance 2 bytes
                    else
                        return null;

                    seq = binr.ReadBytes(15);       //read the Sequence OID
                    if (!CompareBytearrays(seq, seqOid))    //make sure Sequence for OID is correct
                        return null;

                    twobytes = binr.ReadUInt16();
                    if (twobytes == 0x8103) //data read as little endian order (actual data order for Bit String is 03 81)
                        binr.ReadByte();    //advance 1 byte
                    else if (twobytes == 0x8203)
                        binr.ReadInt16();   //advance 2 bytes
                    else
                        return null;

                    bt = binr.ReadByte();
                    if (bt != 0x00)     //expect null byte next
                        return null;

                    twobytes = binr.ReadUInt16();
                    if (twobytes == 0x8130) //data read as little endian order (actual data order for Sequence is 30 81)
                        binr.ReadByte();    //advance 1 byte
                    else if (twobytes == 0x8230)
                        binr.ReadInt16();   //advance 2 bytes
                    else
                        return null;

                    twobytes = binr.ReadUInt16();
                    byte lowbyte = 0x00;
                    byte highbyte = 0x00;

                    if (twobytes == 0x8102) //data read as little endian order (actual data order for Integer is 02 81)
                        lowbyte = binr.ReadByte();  // read next bytes which is bytes in modulus
                    else if (twobytes == 0x8202)
                    {
                        highbyte = binr.ReadByte(); //advance 2 bytes
                        lowbyte = binr.ReadByte();
                    }
                    else
                        return null;
                    byte[] modint = { lowbyte, highbyte, 0x00, 0x00 };   //reverse byte order since asn.1 key uses big endian order
                    int modsize = BitConverter.ToInt32(modint, 0);

                    int firstbyte = binr.PeekChar();
                    if (firstbyte == 0x00)
                    {   //if first byte (highest order) of modulus is zero, don't include it
                        binr.ReadByte();    //skip this null byte
                        modsize -= 1;   //reduce modulus buffer size by 1
                    }

                    byte[] modulus = binr.ReadBytes(modsize);   //read the modulus bytes

                    if (binr.ReadByte() != 0x02)            //expect an Integer for the exponent data
                        return null;
                    int expbytes = (int)binr.ReadByte();        // should only need one byte for actual exponent data (for all useful values)
                    byte[] exponent = binr.ReadBytes(expbytes);

                    // ------- create RSACryptoServiceProvider instance and initialize with public key -----
                    var rsa = RSA.Create();
                    RSAParameters rsaKeyInfo = new RSAParameters
                    {
                        Modulus = modulus,
                        Exponent = exponent
                    };
                    rsa.ImportParameters(rsaKeyInfo);

                    return rsa;
                }
            }
        }
        #endregion

        #region 导入密钥算法
        private int GetIntegerSize(BinaryReader binr)
        {
            byte bt = 0;
            int count = 0;
            bt = binr.ReadByte();
            if (bt != 0x02)
                return 0;
            bt = binr.ReadByte();

            if (bt == 0x81)
                count = binr.ReadByte();
            else
            if (bt == 0x82)
            {
                var highbyte = binr.ReadByte();
                var lowbyte = binr.ReadByte();
                byte[] modint = { lowbyte, highbyte, 0x00, 0x00 };
                count = BitConverter.ToInt32(modint, 0);
            }
            else
            {
                count = bt;
            }

            while (binr.ReadByte() == 0x00)
            {
                count -= 1;
            }
            binr.BaseStream.Seek(-1, SeekOrigin.Current);
            return count;
        }

        private bool CompareBytearrays(byte[] a, byte[] b)
        {
            if (a.Length != b.Length)
                return false;
            int i = 0;
            foreach (byte c in a)
            {
                if (c != b[i])
                    return false;
                i++;
            }
            return true;
        }
        #endregion

    }
}