private static void ReadKeyAndWriteKeyTest()
{
//读取OpenSSL产生的椭圆私钥，Import产生的CngKey私钥，不允许Export。所以这里直接获取byte[]
byte[] privateKeyBlob = OpenSSLKeyECC.GetPrivateKeyBytes(@"..\..\TestData\prime256v1.key");
//读取OpenSSL产生的椭圆私钥
CngKey pubKey = OpenSSLKeyECC.GetPublicKey(@"..\..\TestData\prime256v1.pub");
byte[] publicKeyBlob = pubKey.Export(CngKeyBlobFormat.EccPublicBlob);
//将密钥转换保存为OpenSSL ECC密钥格式
byte[] bytesPrivateKeyOpenSSL = OpenSSLKeyECC.ConvertPrivateBlob(privateKeyBlob);
byte[] bytesPublicKeyOpenSSL = OpenSSLKeyECC.ConvertPublicBlob(publicKeyBlob);
FileTools.WriteToFile(@"..\..\TestData\privateKey1.pem", bytesPrivateKeyOpenSSL);
FileTools.WriteToFile(@"..\..\TestData\publicKey1.pem", bytesPublicKeyOpenSSL);
}
private static void FullTest()
{
//待签名数据
byte[] data = Encoding.UTF8.GetBytes("Text");
//创建椭圆密钥对
CngKeyCreationParameters keyCreationParameters = new CngKeyCreationParameters();
keyCreationParameters.ExportPolicy = CngExportPolicies.AllowPlaintextExport;
keyCreationParameters.KeyUsage = CngKeyUsages.Signing;
CngKey key = CngKey.Create(CngAlgorithm.ECDsaP256, null, keyCreationParameters);
byte[] privateKeyBlob = key.Export(CngKeyBlobFormat.EccPrivateBlob);
byte[] publicKeyBlob = key.Export(CngKeyBlobFormat.EccPublicBlob);
//将Windows CNG的密钥转换为OpenSSL的ECC公钥和私钥，并保存到文件
byte[] bytesPrivateKeyOpenSSL = OpenSSLKeyECC.ConvertPrivateBlob(privateKeyBlob);
byte[] bytesPublicKeyOpenSSL = OpenSSLKeyECC.ConvertPublicBlob(publicKeyBlob);
FileTools.WriteToFile(@"..\..\TestData\privateKey.pem", bytesPrivateKeyOpenSSL);
FileTools.WriteToFile(@"..\..\TestData\publicKey.pem", bytesPublicKeyOpenSSL);
//读取密钥
CngKey privateKey = OpenSSLKeyECC.GetPrivateKey(@"..\..\TestData\privateKey.pem");
CngKey publicKey = OpenSSLKeyECC.GetPublicKey(@"..\..\TestData\publicKey.pem");
//使用私钥签名
ECDsaCng dsa1 = new ECDsaCng(privateKey);
dsa1.HashAlgorithm = CngAlgorithm.Sha256;
byte[] signature = dsa1.SignData(data);
//使用公钥验签
ECDsaCng dsa2 = new ECDsaCng(publicKey);
dsa2.HashAlgorithm = CngAlgorithm.Sha256;
bool bVerified = dsa2.VerifyData(data, signature);
if (bVerified)
{
Console.WriteLine("Verified");
}
else
{
Console.WriteLine("Not verified");
}
}