• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1# 使用RSA密钥对（PKCS1模式）签名及签名恢复(ArkTS)
2
3<!--Kit: Crypto Architecture Kit-->
4<!--Subsystem: Security-->
5<!--Owner: @zxz--3-->
6<!--Designer: @lanming-->
7<!--Tester: @PAFT-->
8<!--Adviser: @zengyawen-->
9
10对应的算法规格请查看[签名验签算法规格：RSA](crypto-sign-sig-verify-overview.md#rsa)。
11
12**签名**
13
141. 调用[cryptoFramework.createAsyKeyGenerator](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateasykeygenerator)、[AsyKeyGenerator.generateKeyPair](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#generatekeypair-1)，生成密钥算法为RSA、密钥长度为1024位、素数个数为2的非对称密钥对象（KeyPair），包括公钥（PubKey）和私钥（PriKey）。
15
16   如何生成RSA非对称密钥，开发者可参考下文示例，并结合[非对称密钥生成和转换规格：RSA](crypto-asym-key-generation-conversion-spec.md#rsa)和[随机生成非对称密钥对](crypto-generate-asym-key-pair-randomly.md)理解，参考文档与当前示例可能存在入参差异，请在阅读时注意区分。
17
182. 调用[cryptoFramework.createSign](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreatesign)，指定字符串参数'RSA1024|PKCS1|SHA256|SignOnly'，创建非对称密钥类型为RSA1024、填充模式为PKCS1、摘要算法为SHA256的Sign实例，用于完成仅签名操作。
19
203. 调用[Sign.init](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#init-3)，使用私钥（PriKey）初始化Sign实例。
21
224. 调用[Sign.sign](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#sign-1)，生成数据签名。
23
24**验签**
25
261. 调用[cryptoFramework.createVerify](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#cryptoframeworkcreateverify)，指定字符串参数'RSA1024|PKCS1|SHA256|Recover'，与签名的Sign实例保持一致。创建Verify实例，用于完成验签操作。
27
282. 调用[Verify.init](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#init-5)，使用公钥（PubKey）初始化Verify实例。
29
303. 调用[Verify.recover](../../reference/apis-crypto-architecture-kit/js-apis-cryptoFramework.md#recover12)，对数据进行签名恢复。
31
32- 异步方法示例：
33
34  ```ts
35  import { cryptoFramework } from '@kit.CryptoArchitectureKit';
36  import { buffer } from '@kit.ArkTS';
37  let input1: cryptoFramework.DataBlob = { data: new Uint8Array(buffer.from("This is Sign test plan1", 'utf-8').buffer) };
38  async function signMessagePromise(priKey: cryptoFramework.PriKey) {
39    let signAlg = "RSA1024|PKCS1|NoHash|OnlySign";
40    let signer = cryptoFramework.createSign(signAlg);
41    await signer.init(priKey);
42    let signData = await signer.sign(input1);
43    return signData;
44  }
45  async function verifyMessagePromise(signMessageBlob: cryptoFramework.DataBlob, pubKey: cryptoFramework.PubKey) {
46    let verifyAlg = "RSA1024|PKCS1|NoHash|Recover";
47    let verifier = cryptoFramework.createVerify(verifyAlg);
48    await verifier.init(pubKey);
49    let rawSignData = await verifier.recover(signMessageBlob);
50    return rawSignData;
51  }
52  async function main() {
53    let keyGenAlg = "RSA1024";
54    let generator = cryptoFramework.createAsyKeyGenerator(keyGenAlg);
55    let keyPair = await generator.generateKeyPair();
56    let signData = await signMessagePromise(keyPair.priKey);
57    let rawSignData = await verifyMessagePromise(signData, keyPair.pubKey);
58    if (rawSignData !== null) {
59      console.info('recover result: ' + rawSignData.data);
60    } else {
61      console.error("get verify recover result fail!");
62    }
63  }
64  ```
65
66- 同步方法示例：
67
68  ```ts
69  import { cryptoFramework } from '@kit.CryptoArchitectureKit';
70  import { buffer } from '@kit.ArkTS';
71  let input1: cryptoFramework.DataBlob = { data: new Uint8Array(buffer.from("This is Sign test plan1", 'utf-8').buffer) };
72  function signMessagePromise(priKey: cryptoFramework.PriKey) {
73    let signAlg = "RSA1024|PKCS1|NoHash|OnlySign";
74    let signer = cryptoFramework.createSign(signAlg);
75    signer.initSync(priKey);
76    let signData = signer.signSync(input1);
77    return signData;
78  }
79  function verifyMessagePromise(signMessageBlob: cryptoFramework.DataBlob, pubKey: cryptoFramework.PubKey) {
80    let verifyAlg = "RSA1024|PKCS1|NoHash|Recover";
81    let verifier = cryptoFramework.createVerify(verifyAlg);
82    verifier.initSync(pubKey);
83    let rawSignData = verifier.recoverSync(signMessageBlob);
84    return rawSignData;
85  }
86  function main() {
87    let keyGenAlg = "RSA1024";
88    let generator = cryptoFramework.createAsyKeyGenerator(keyGenAlg);
89    let keyPair = generator.generateKeyPairSync();
90    let signData = signMessagePromise(keyPair.priKey);
91    let rawSignData = verifyMessagePromise(signData, keyPair.pubKey);
92    if (rawSignData !== null) {
93      console.info('recover result: ' + rawSignData.data);
94    } else {
95      console.error("get verify recover result fail!");
96    }
97  }
98  ```
99