第Python使用RSA庫加密和解密#先生成一對密鑰，然后保存.pem格式文件，當然也可以直接使用

(pubkey,privkey)=rsa.newkeys(1024)

pub=pubkey.save_pkcs1()

pubfile=open('public.pem','wb')

pubfile.write(pub)

pubfile.close()

pri=privkey.save_pkcs1()

prifile=open('private.pem','wb')

prifile.write(pri)

prifile.close()

#load公鑰和密鑰

message=''

withopen('public.pem',"rb")aspublickfile:

p=publickfile.read()

pubkey=rsa.PublicKey.load_pkcs1(p)

print(pubkey)

withopen('private.pem',"rb")asprivatefile:

p=privatefile.read()

privkey=rsa.PrivateKey.load_pkcs1(p)

print(privkey)

#用公鑰加密、再用私鑰解密

crypto=rsa.encrypt(message.encode('utf-8'),pubkey)

message=rsa.decrypt(crypto,privkey)

message=message.decode('utf-8')

print(message)

#sign用私鑰簽名認證、再用公鑰驗證簽名

signature=rsa.sign(message.encode('utf-8'),privkey,'SHA-1')

verify=rsa.verify(''.encode('utf-8'),signature,pubkey)

print(verify)

二、使用Crypto.PublicKey.RSA庫

1、使用Crypto.PublicKey.RSA生成公鑰、私鑰：

importCrypto.PublicKey.RSA

importCrypto.Random

x=Crypto.PublicKey.RSA.generate(2048)

#Crypto.PublicKey.RSA.generate(2048,Crypto.Random.new().read)使用Crypto.Random.new().read偽隨機數生成器

a=x.exportKey("PEM")#生成私鑰

b=x.publickey().exportKey()#生成公鑰

withopen("a.pem","wb")asx:

x.write(a)

withopen("b.pem","wb")asx:

x.write(b)

2、使用Crypto.PublicKey.RSA.importKey(private_key)生成公鑰和證書：

importCrypto.PublicKey.RSA

withopen("a.pem","rb")asx:

xx=Crypto.PublicKey.RSA.importKey(x.read())

b=xx.publickey().exportKey()#生成公鑰

withopen("b.pem","wb")asx:

x.write(b)

a=xx.exportKey("DER")#生成DER格式的證書

withopen("a.der","wb")asx:

x.write(a)

3、使用Crypto進行RSA加解密

importCrypto.PublicKey.RSA

importCrypto.Cipher.PKCS1_v1_5

importCrypto.Random

importCrypto.Signature.PKCS1_v1_5

importCrypto.Hash

y=b"abcdefg1234567"

withopen("b.pem","rb")asx:

b=x.read()

cipher_public=Crypto.Cipher.PKCS1_v1_5.new(Crypto.PublicKey.RSA.importKey(b))

cipher_text=cipher_public.encrypt(y)#使用公鑰進行加密

withopen("a.pem","rb")asx:

a=x.read()

#如果私鑰有密碼則使用相應密碼Crypto.PublicKey.RSA.importKey(a,password)

cipher_private=Crypto.Cipher.PKCS1_v1_5.new(Crypto.PublicKey.RSA.importKey(a))

text=cipher_private.decrypt(cipher_text,Crypto.Random.new().read)#使用私鑰進行解密

asserttext==y#斷言驗證

withopen("c.pem","rb")asx:

c=x.read()

c_rsa=Crypto.PublicKey.RSA.importKey(c)

signer=Crypto.Signature.PKCS1_v1_5.new(c_rsa)

msg_hash=Crypto.Hash.SHA256.new()

msg_hash.update(y)

sign=signer.sign(msg_hash)#使用私鑰進行'sha256'簽名

withopen("d.pem","rb")asx:

d=x.read()

d_rsa=Crypto.PublicKey.RSA.importKey(d)

verifer=Crypto.Signature.PKCS1_v1_5.new(d_rsa)

msg_hash=Crypto.Hash.SHA256.new()

msg_ha