1# 指定二进制数据转换非对称密钥对(ArkTS) 2 3以RSA、ECC、SM2为例，根据指定的对称密钥二进制数据，生成非对称密钥对（KeyPair），即将外部或存储的二进制数据转换为算法库的密钥对象，该对象可用于后续的加解密等操作。 4 5> **说明：** 6> 7> 针对非对称密钥的convertKey操作： 8> 9> - 公钥需满足：ASN.1语法、X.509规范、DER编码格式。 10> 11> - 私钥需满足：ASN.1语法、PKCS\#8规范、DER编码格式。 12 13## 指定二进制数据转换RSA密钥对 14 15对应的算法规格请查看[非对称密钥生成和转换规格：RSA](crypto-asym-key-generation-conversion-spec.md#rsa)。 16 171. 获取RSA公钥或私钥二进制数据，封装成DataBlob对象。 18 19 公钥和私钥可只传入其中一个，此处示例以传入公钥为例。 20 212. 调用[cryptoFramework.createAsyKeyGenerator](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateasykeygenerator)，指定字符串参数'RSA1024'，创建RSA密钥类型为RSA1024、素数个数为2的非对称密钥生成器（AsyKeyGenerator）。 22 23 生成RSA非对称密钥时，默认素数为2，此处省略了参数PRIMES_2。 24 253. 调用[AsyKeyGenerator.convertKey](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkey-3)，传入二进制密钥数据，生成非对称密钥对象（KeyPair）。 26 27- 以使用callback方式生成RSA密钥对为例： 28 ```ts 29 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 30 31 function convertAsyKey() { 32 let rsaGenerator = cryptoFramework.createAsyKeyGenerator('RSA1024'); 33 let pkVal = new Uint8Array([48, 129, 159, 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 1, 5, 0, 3, 129, 141, 0, 48, 129, 137, 2, 129, 129, 0, 174, 203, 113, 83, 113, 3, 143, 213, 194, 79, 91, 9, 51, 142, 87, 45, 97, 65, 136, 24, 166, 35, 5, 179, 42, 47, 212, 79, 111, 74, 134, 120, 73, 67, 21, 19, 235, 80, 46, 152, 209, 133, 232, 87, 192, 140, 18, 206, 27, 106, 106, 169, 106, 46, 135, 111, 118, 32, 129, 27, 89, 255, 183, 116, 247, 38, 12, 7, 238, 77, 151, 167, 6, 102, 153, 126, 66, 28, 253, 253, 216, 64, 20, 138, 117, 72, 15, 216, 178, 37, 208, 179, 63, 204, 39, 94, 244, 170, 48, 190, 21, 11, 73, 169, 156, 104, 193, 3, 17, 100, 28, 60, 50, 92, 235, 218, 57, 73, 119, 19, 101, 164, 192, 161, 197, 106, 105, 73, 2, 3, 1, 0, 1]); 34 let pkBlob: cryptoFramework.DataBlob = { data: pkVal }; 35 rsaGenerator.convertKey(pkBlob, null, (err, keyPair) => { 36 if (err) { 37 console.error(`convertKey failed, ${err.code}, ${err.message}`); 38 return; 39 } 40 console.info('convertKey success'); 41 }); 42 } 43 ``` 44 45- 同步返回结果（调用方法[convertKeySync](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkeysync12)）： 46 ```ts 47 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 48 49 function convertAsyKeySync() { 50 let rsaGenerator = cryptoFramework.createAsyKeyGenerator('RSA1024'); 51 let pkVal = new Uint8Array([48, 129, 159, 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 1, 5, 0, 3, 129, 141, 0, 48, 129, 137, 2, 129, 129, 0, 174, 203, 113, 83, 113, 3, 143, 213, 194, 79, 91, 9, 51, 142, 87, 45, 97, 65, 136, 24, 166, 35, 5, 179, 42, 47, 212, 79, 111, 74, 134, 120, 73, 67, 21, 19, 235, 80, 46, 152, 209, 133, 232, 87, 192, 140, 18, 206, 27, 106, 106, 169, 106, 46, 135, 111, 118, 32, 129, 27, 89, 255, 183, 116, 247, 38, 12, 7, 238, 77, 151, 167, 6, 102, 153, 126, 66, 28, 253, 253, 216, 64, 20, 138, 117, 72, 15, 216, 178, 37, 208, 179, 63, 204, 39, 94, 244, 170, 48, 190, 21, 11, 73, 169, 156, 104, 193, 3, 17, 100, 28, 60, 50, 92, 235, 218, 57, 73, 119, 19, 101, 164, 192, 161, 197, 106, 105, 73, 2, 3, 1, 0, 1]); 52 let pkBlob: cryptoFramework.DataBlob = { data: pkVal }; 53 try { 54 let keyPair = rsaGenerator.convertKeySync(pkBlob, null); 55 if (keyPair !== null) { 56 console.info('convertKeySync success'); 57 } 58 } catch (e) { 59 console.error(`get key pair failed, ${e.code}, ${e.message}`); 60 } 61 } 62 ``` 63 64## 指定二进制数据转换ECC密钥对 65 66对应的算法规格请查看[非对称密钥生成和转换规格：ECC](crypto-asym-key-generation-conversion-spec.md#ecc)。 67 681. 获取ECC公钥或私钥二进制数据，封装成DataBlob对象。 69 70 公钥和私钥可只传入其中一个，此处示例以传入公钥、私钥为例。 71 722. 调用[cryptoFramework.createAsyKeyGenerator](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateasykeygenerator)，指定字符串参数'ECC256'，创建密钥算法为ECC、密钥长度为256位的非对称密钥生成器（AsyKeyGenerator）。 73 743. 调用[AsyKeyGenerator.convertKey](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkey-3)，传入公钥二进制和私钥二进制，生成非对称密钥对象（KeyPair）。 75 76- 以使用callback方式生成ECC密钥对为例： 77 ```ts 78 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 79 80 function convertEccAsyKey() { 81 let pubKeyArray = new Uint8Array([48, 89, 48, 19, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 8, 42, 134, 72, 206, 61, 3, 1, 7, 3, 66, 0, 4, 83, 96, 142, 9, 86, 214, 126, 106, 247, 233, 92, 125, 4, 128, 138, 105, 246, 162, 215, 71, 81, 58, 202, 121, 26, 105, 211, 55, 130, 45, 236, 143, 55, 16, 248, 75, 167, 160, 167, 106, 2, 152, 243, 44, 68, 66, 0, 167, 99, 92, 235, 215, 159, 239, 28, 106, 124, 171, 34, 145, 124, 174, 57, 92]); 82 let priKeyArray = new Uint8Array([48, 49, 2, 1, 1, 4, 32, 115, 56, 137, 35, 207, 0, 60, 191, 90, 61, 136, 105, 210, 16, 27, 4, 171, 57, 10, 61, 123, 40, 189, 28, 34, 207, 236, 22, 45, 223, 10, 189, 160, 10, 6, 8, 42, 134, 72, 206, 61, 3, 1, 7]); 83 let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKeyArray }; 84 let priKeyBlob: cryptoFramework.DataBlob = { data: priKeyArray }; 85 let generator = cryptoFramework.createAsyKeyGenerator('ECC256'); 86 generator.convertKey(pubKeyBlob, priKeyBlob, (error, data) => { 87 if (error) { 88 console.error(`convertKey failed, ${error.code}, ${error.message}`); 89 return; 90 } 91 console.info('convertKey success'); 92 }); 93 } 94 ``` 95 96- 同步返回结果（调用方法[convertKeySync](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkeysync12)）： 97 ```ts 98 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 99 100 function convertECCAsyKeySync() { 101 let pubKeyArray = new Uint8Array([48, 89, 48, 19, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 8, 42, 134, 72, 206, 61, 3, 1, 7, 3, 66, 0, 4, 83, 96, 142, 9, 86, 214, 126, 106, 247, 233, 92, 125, 4, 128, 138, 105, 246, 162, 215, 71, 81, 58, 202, 121, 26, 105, 211, 55, 130, 45, 236, 143, 55, 16, 248, 75, 167, 160, 167, 106, 2, 152, 243, 44, 68, 66, 0, 167, 99, 92, 235, 215, 159, 239, 28, 106, 124, 171, 34, 145, 124, 174, 57, 92]); 102 let priKeyArray = new Uint8Array([48, 49, 2, 1, 1, 4, 32, 115, 56, 137, 35, 207, 0, 60, 191, 90, 61, 136, 105, 210, 16, 27, 4, 171, 57, 10, 61, 123, 40, 189, 28, 34, 207, 236, 22, 45, 223, 10, 189, 160, 10, 6, 8, 42, 134, 72, 206, 61, 3, 1, 7]); 103 let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKeyArray }; 104 let priKeyBlob: cryptoFramework.DataBlob = { data: priKeyArray }; 105 let generator = cryptoFramework.createAsyKeyGenerator('ECC256'); 106 try { 107 let keyPair = generator.convertKeySync(pubKeyBlob, priKeyBlob); 108 if (keyPair !== null) { 109 console.info('convertKeySync success'); 110 } 111 } catch (e) { 112 console.error(`get key pair failed, ${e.code}, ${e.message}`); 113 } 114 } 115 ``` 116 117## 指定PKCS8二进制数据转换ECC私钥 118 119对应的算法规格请查看[非对称密钥生成和转换规格：ECC](crypto-asym-key-generation-conversion-spec.md#ecc)。 120 121获取ECC公钥或私钥二进制数据，封装成DataBlob对象再转为ECC密钥格式。示例如下： 122 1231. 调用[cryptoFramework.createAsyKeyGenerator](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateasykeygenerator)，指定字符串参数'ECC256'，创建密钥算法为ECC、密钥长度为256位的非对称密钥生成器（AsyKeyGenerator）。 124 1252. 调用[PubKey.getEncoded](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#getencoded)获取公钥数据字节流，调用[PriKey.getEncodeDer](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#getencodedder12-1) 并设置参数为'PKCS8'，获取私钥数据的字节流。由此分别获取密钥对象的二进制数据。 126 1273. 调用[AsyKeyGenerator.convertKey](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkey-3)，将上述生成的二进制密钥数据转为非对称密钥对象（KeyPair）。 128 129 ```ts 130 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 131 132 async function main() { 133 // 创建一个AsyKeyGenerator实例。 134 let eccGenerator = cryptoFramework.createAsyKeyGenerator('ECC256'); 135 // 使用密钥生成器随机生成非对称密钥对。 136 let keyGenPromise = eccGenerator.generateKeyPair(); 137 keyGenPromise.then(keyPair => { 138 let pubKey = keyPair.pubKey; 139 let priKey = keyPair.priKey; 140 // 获取非对称密钥对ECC的二进制数据。 141 let pubBlob = pubKey.getEncoded(); 142 let skBlob = priKey.getEncodedDer('PKCS8'); 143 let generator = cryptoFramework.createAsyKeyGenerator('ECC256'); 144 generator.convertKey(pubBlob, skBlob, (error, data) => { 145 if (error) { 146 console.error(`convertKey failed, ${error.code}, ${error.message}`); 147 return; 148 } 149 console.info('convertKey success'); 150 }); 151 }); 152 } 153 ``` 154 155## 指定二进制数据转换SM2密钥对 156 157对应的算法规格请查看[非对称密钥生成和转换规格：SM2](crypto-asym-key-generation-conversion-spec.md#sm2)。 158 1591. 获取SM2公钥或私钥二进制数据，封装成DataBlob对象。 160 161 公钥和私钥可只传入其中一个，此处示例以传入公钥、私钥为例。 162 1632. 调用[cryptoFramework.createAsyKeyGenerator](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateasykeygenerator)，指定字符串参数'SM2_256'，创建密钥算法为SM2、密钥长度为256位的非对称密钥生成器（AsyKeyGenerator）。 164 1653. 调用[AsyKeyGenerator.convertKey](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkey-3)，传入公钥二进制和私钥二进制，生成非对称密钥对象（KeyPair）。 166 167- 以使用callback方式生成SM2密钥对为例： 168 ```ts 169 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 170 171 function convertSM2AsyKey() { 172 let pubKeyArray = new Uint8Array([48, 89, 48, 19, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 8, 42, 129, 28, 207, 85, 1, 130, 45, 3, 66, 0, 4, 90, 3, 58, 157, 190, 248, 76, 7, 132, 200, 151, 208, 112, 230, 96, 140, 90, 238, 211, 155, 128, 109, 248, 40, 83, 214, 78, 42, 104, 106, 55, 148, 249, 35, 61, 32, 221, 135, 143, 100, 45, 97, 194, 176, 52, 73, 136, 174, 40, 70, 70, 34, 103, 103, 161, 99, 27, 187, 13, 187, 109, 244, 13, 7]); 173 let priKeyArray = new Uint8Array([48, 49, 2, 1, 1, 4, 32, 54, 41, 239, 240, 63, 188, 134, 113, 31, 102, 149, 203, 245, 89, 15, 15, 47, 202, 170, 60, 38, 154, 28, 169, 189, 100, 251, 76, 112, 223, 156, 159, 160, 10, 6, 8, 42, 129, 28, 207, 85, 1, 130, 45]); 174 let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKeyArray }; 175 let priKeyBlob: cryptoFramework.DataBlob = { data: priKeyArray }; 176 let generator = cryptoFramework.createAsyKeyGenerator('SM2_256'); 177 generator.convertKey(pubKeyBlob, priKeyBlob, (error, data) => { 178 if (error) { 179 console.error(`convertKey failed, ${error.code}, ${error.message}`); 180 return; 181 } 182 console.info('convertKey success'); 183 }); 184 } 185 ``` 186 187- 同步返回结果（调用方法[convertKeySync](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#convertkeysync12)）： 188 ```ts 189 import { cryptoFramework } from '@kit.CryptoArchitectureKit'; 190 191 function convertSM2AsyKeySync() { 192 let pubKeyArray = new Uint8Array([48, 89, 48, 19, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 8, 42, 129, 28, 207, 85, 1, 130, 45, 3, 66, 0, 4, 90, 3, 58, 157, 190, 248, 76, 7, 132, 200, 151, 208, 112, 230, 96, 140, 90, 238, 211, 155, 128, 109, 248, 40, 83, 214, 78, 42, 104, 106, 55, 148, 249, 35, 61, 32, 221, 135, 143, 100, 45, 97, 194, 176, 52, 73, 136, 174, 40, 70, 70, 34, 103, 103, 161, 99, 27, 187, 13, 187, 109, 244, 13, 7]); 193 let priKeyArray = new Uint8Array([48, 49, 2, 1, 1, 4, 32, 54, 41, 239, 240, 63, 188, 134, 113, 31, 102, 149, 203, 245, 89, 15, 15, 47, 202, 170, 60, 38, 154, 28, 169, 189, 100, 251, 76, 112, 223, 156, 159, 160, 10, 6, 8, 42, 129, 28, 207, 85, 1, 130, 45]); 194 let pubKeyBlob: cryptoFramework.DataBlob = { data: pubKeyArray }; 195 let priKeyBlob: cryptoFramework.DataBlob = { data: priKeyArray }; 196 let generator = cryptoFramework.createAsyKeyGenerator('SM2_256'); 197 try { 198 let keyPair = generator.convertKeySync(pubKeyBlob, priKeyBlob); 199 if (keyPair !== null) { 200 console.info('convertKeySync success'); 201 } 202 } catch (e) { 203 console.error(`get key pair failed, ${e.code}, ${e.message}`); 204 } 205 } 206 ``` 207