/// <summary>
/// 使用服务端公钥初始化<see cref="ClientCryptoDelegatingHandler"/>类的新实例
/// </summary>
/// <param name="publicKey">服务端公钥</param>
/// <param name="hashType">签名哈希类型，必须为MD5或SHA1</param>
public ClientCryptoDelegatingHandler(string publicKey, string hashType = "MD5")
{
publicKey.CheckNotNullOrEmpty("publicKey");
hashType.CheckNotNullOrEmpty("hashType");
hashType = hashType.ToUpper();
hashType.Required(str => hashType == "MD5" || hashType == "SHA1", Resources.Http_Security_RSA_Sign_HashType);
RsaHelper rsa = new RsaHelper();
_cryptor = new CommunicationCryptor(rsa.PrivateKey, publicKey, hashType);
_clientPublicKey = rsa.PublicKey;
}
/// <summary>
/// 加密要发送的数据，包含签名，DES加密，RSA加密DES密钥等步骤
/// </summary>
/// <param name="data">要加密的正文明文数据</param>
/// <returns>已加密待发送的密文</returns>
public string EncryptData(string data)
{
data.CheckNotNull("data");
//获取正文摘要
string signData = RsaHelper.SignData(data, _hashType, _ownPrivateKey);
data = new[] { data, signData }.ExpandAndToString(Separator);
//使用DES加密 正文+摘要
DesHelper des = new DesHelper();
data = des.Encrypt(data);
//RSA加密DES密钥
string enDesKey = Convert.ToBase64String(RsaHelper.Encrypt(des.Key, _facePublicKey));
return(new[] { enDesKey, data }.ExpandAndToString(Separator));
}
/// <summary>
/// 解密接收到的加密数据并验证完整性，如果验证通过返回明文
/// </summary>
/// <param name="data">接收到的加密数据</param>
/// <returns>解密并验证成功后，返回明文</returns>
public string DecryptAndVerifyData(string data)
{
data.CheckNotNullOrEmpty("data");
string[] separators = { Separator };
//0为DES密钥密文，1为 正文+摘要 的密文
string[] datas = data.Split(separators, StringSplitOptions.None);
//用接收端私钥RSA解密获取DES密钥
byte[] desKey = RsaHelper.Decrypt(Convert.FromBase64String(datas[0]), _ownPrivateKey);
//DES解密获取 正文+摘要 的明文
data = new DesHelper(desKey).Decrypt(datas[1]);
//0为正文明文，1为摘要
datas = data.Split(separators, StringSplitOptions.None);
data = datas[0];
if (RsaHelper.VerifyData(data, datas[1], _hashType, _facePublicKey))
{
return(data);
}
throw new CryptographicException("加密数据在进行解密时校验失败");
}
/// <summary>
/// 加密初始化
/// </summary>
/// <param name="facePublicKey">对方公钥</param>
/// <param name="hashType">摘要哈希方式，值必须为MD5或SHA1</param>
public void CryptoInitialize(string facePublicKey, string hashType)
{
if (_cryptor == null)
{
RsaHelper ownRsa = new RsaHelper();
Headers.Add(HttpHeaderNames.OSkyClientPublicKey, ownRsa.PublicKey);
_cryptor = new CommunicationCryptor(ownRsa.PrivateKey, facePublicKey, hashType);
}
}