master v0.0.5
兔子 8 months ago
parent 5d3ebcd501
commit f3f50b4f6c

@ -3,6 +3,7 @@ package starcrypto
import ( import (
"crypto" "crypto"
"crypto/ecdsa" "crypto/ecdsa"
"crypto/rand"
"crypto/rsa" "crypto/rsa"
"crypto/x509" "crypto/x509"
"encoding/pem" "encoding/pem"
@ -17,7 +18,22 @@ func EncodePrivateKey(private crypto.PrivateKey, secret string) ([]byte, error)
case *ecdsa.PrivateKey: case *ecdsa.PrivateKey:
return EncodeEcdsaPrivateKey(private.(*ecdsa.PrivateKey), secret) return EncodeEcdsaPrivateKey(private.(*ecdsa.PrivateKey), secret)
default: default:
return nil, errors.New("private key type error") b, err := x509.MarshalPKCS8PrivateKey(private)
if err != nil {
return nil, err
}
if secret == "" {
return pem.EncodeToMemory(&pem.Block{
Bytes: b,
Type: "PRIVATE KEY",
}), err
}
chiper := x509.PEMCipherAES256
blk, err := x509.EncryptPEMBlock(rand.Reader, "PRIVATE KEY", b, []byte(secret), chiper)
if err != nil {
return nil, err
}
return pem.EncodeToMemory(blk), err
} }
} }
@ -28,7 +44,14 @@ func EncodePublicKey(public crypto.PublicKey) ([]byte, error) {
case *ecdsa.PublicKey: case *ecdsa.PublicKey:
return EncodeEcdsaPublicKey(public.(*ecdsa.PublicKey)) return EncodeEcdsaPublicKey(public.(*ecdsa.PublicKey))
default: default:
return nil, errors.New("public key type error") publicBytes, err := x509.MarshalPKIXPublicKey(public)
if err != nil {
return nil, err
}
return pem.EncodeToMemory(&pem.Block{
Bytes: publicBytes,
Type: "PUBLIC KEY",
}), nil
} }
} }
@ -42,6 +65,28 @@ func DecodePrivateKey(private []byte, password string) (crypto.PrivateKey, error
return DecodeRsaPrivateKey(private, password) return DecodeRsaPrivateKey(private, password)
case "EC PRIVATE KEY": case "EC PRIVATE KEY":
return DecodeEcdsaPrivateKey(private, password) return DecodeEcdsaPrivateKey(private, password)
case "PRIVATE KEY":
var prikey crypto.PrivateKey
var err error
var bytes []byte
blk, _ := pem.Decode(private)
if blk == nil {
return nil, errors.New("private key error")
}
if password != "" {
tmp, err := x509.DecryptPEMBlock(blk, []byte(password))
if err != nil {
return nil, err
}
bytes = tmp
} else {
bytes = blk.Bytes
}
prikey, err = x509.ParsePKCS8PrivateKey(bytes)
if err != nil {
return nil, err
}
return prikey, err
default: default:
return nil, errors.New("private key type error") return nil, errors.New("private key type error")
} }
@ -66,3 +111,7 @@ func EncodeSSHPublicKey(public crypto.PublicKey) ([]byte, error) {
} }
return ssh.MarshalAuthorizedKey(publicKey), nil return ssh.MarshalAuthorizedKey(publicKey), nil
} }
func DecodeSSHPublicKey(pubStr []byte) (crypto.PublicKey, error) {
return ssh.ParsePublicKey(pubStr)
}

Loading…
Cancel
Save