RSA 加密認證 (服務端Python3 + 客戶端HTML)

時間 2020-06-21

標籤 rsa 加密認證服務 python3 python 客戶端 html 欄目系統安全简体版

原文原文鏈接

在衆多項目中都會用到用戶登陸認證的功能塊, 做爲先後端分離的項目, 保證接口敏感數據加密, 是必要的。javascript

RSA

百度百科： RSA公開密鑰密碼體制是一種使用不一樣的加密密鑰與解密密鑰，「由已知加密密鑰推導出解密密鑰在計算上是不可行的」密碼體制
baike.baidu.com/item/RSA算法/…html

咱們採用 Python 服務端生成密鑰對(公鑰和私鑰), 客戶端經過 API 獲取公鑰進行數據加密, 服務端經過私鑰對加密數據進行解密驗證。java

服務端

生成密鑰對代碼塊：python

#!/usr/bin/env python
# _*_ Coding: UTF-8 _*_
from Crypto.PublicKey import RSA

if __name__ == '__main__':
    rsa = RSA.generate(1024)
    private_pem = str(rsa.exportKey(), encoding='utf-8')
    with open('private.pem', 'w') as f:
        f.write(private_pem)
        f.close()
    public_pem = str(rsa.publickey().exportKey(), encoding='utf-8')
    with open('public.pem', 'w') as f:
        f.write(public_pem)
        f.close()
複製代碼

驗證加密字符代碼塊：jquery

#!/usr/bin/env python
# _*_ Coding: UTF-8 _*_
import base64

from Cryptodome.Cipher import PKCS1_v1_5
from Cryptodome.PublicKey import RSA

if __name__ == '__main__':
    string = "加密的字符串"
    with open('private.pem') as file:
        key = file.read().encode()
        file.close()
    cipher = PKCS1_v1_5.new(RSA.importKey(key))
    print(cipher.decrypt(base64.b64decode(string.encode()), 'error').decode())
複製代碼

客戶端

這兒使用的 demo 採用靜態的數據, 你能夠對它進行修改, 而且你能夠複製如下代碼塊保存在 index.html 中用瀏覽器打開：web

<!doctype html>
<html>
<head>
    <title>RSA · MedusaSorcerer</title>
    <script src="https://libs.baidu.com/jquery/1.11.3/jquery.min.js"></script>
    <script src="http://passport.cnblogs.com/scripts/jsencrypt.min.js"></script>
    <script type="text/javascript"> $(function () { $('#submit').click(function () { var data = []; data['username'] = $('#username').val(); data['password'] = $('#password').val(); var publickey = $('#publickey').val(); encryptSend(data, publickey); }); }); function encryptSend(data, publicKey) { var jsencrypt = new JSEncrypt(); jsencrypt.setPublicKey(publicKey); var enData = new Object(); for (var key in data) { enData[key] = jsencrypt.encrypt(data[key]); } $('.content').html(JSON.stringify(enData)); } </script>
</head>
<body>
<label for="publickey">Public Key</label><br>
<textarea id="publickey" rows="10" cols="80">
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCe89pxqVioNubktqWd/1aNc+C+
IbyWB9Cuqux1ds6QTg35JDKFSUOB6VR9FoK6fDeD3DfN7UifVfAkgOz2MRq1oPJD
6+VnbjYzA6DVaN3gZ/9FjU7ZkhL+eHAgi48lALPJTGwO5nEIZIETSegpZW8HBA1k
Z9Iw0gR9zC7S0imIGQIDAQAB
-----END PUBLIC KEY-----
</textarea>
<span style="float: right;">
    <a href="https://juejin.im/user/5da32395e51d4578200cc9c5/posts">
        <img src="https://user-gold-cdn.xitu.io/2019/10/13/16dc5444a4bb2dac?imageView2/1/w/180/h/180/q/85/format/webp/interlace/1"><br>
        返回 MedusaSorcerer 掘金
    </a>
</span>
<br>
<label for="input">jsencrypt:</label><br>
username: <input id="username" name="username" type="text"><br>
password: <input id="password" name="password" type="password"><br>
<input id="submit" type="button" value="submit"/>
<div style="padding-top:20px">輸出內容：</div>
<div class="content" style="width:200px;height:300px;">暫無</div>
</body>
</html>
複製代碼