带有 PSS 填充的 RSA-SHA256 在 json 数据类型上出现无效签名错误，但适用于简单字符串（go lang againt python）-解网

问：

我必须在 python 中从 json 数据对象分配签名，并在 go lang 中验证它，反之亦然

如果赋值和验证使用相同的语言或使用输入数据作为字符串，则它有效，但如果输入数据是字典，则失败

私钥

公钥

Python 分配数据

from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import padding
from cryptography.hazmat.backends import default_backend
import base64
import json
from cryptography.exceptions import InvalidSignature


user = {"name": "Foo", "age": 12, "email": "[email protected]"}

def sign_user(message) -> str:
    message_json = json.dumps(message)
    message_byts = message_json.encode("utf-8")
    key_file = open("private_key.pem", "rb")
    private_key = serialization.load_pem_private_key(
        key_file.read(), password=None, backend=default_backend()
    )
    signature = private_key.sign(
        message_byts,
        padding.PSS(
            mgf=padding.MGF1(hashes.SHA256()), salt_length=padding.PSS.MAX_LENGTH
        ),
        hashes.SHA256(),
    )

    signature_base64 = base64.b64encode(signature).decode("utf-8")
    print("\n\n", signature_base64, "\n\n")
    return signature_base64

从 python 创建的签名DReue2qd0Ir/TEQ5rDtegBSqgINIG+LqMnliwh3YbVUlb58TwfrcO1jWvR55LoBa524Fc2ZnWms3g7T2BFxlMxBAU8fFkZ33TYP7VTeImOiP2QThKeQZ11nzr8LjbPnimOj2+2YMXxrP0lTGvf69A5vpXhnPWa+jBXnyoHlw8cJL971FDfUwB7T3SQg+HIEmWk1xEjRedQzyLW+kAAICoeP8u9ClCJgdnd7a2IRDzJQ2A/OhrZaiwdSwrvCmiT9iezOT3t5yCiC/VkzL1BUQx3hl7AGSwzbKmoYqK+9USXkYNmjdOaUQMfql8p1cu46D3DF59dyRS6NWCZ54SkSyTg==

然后在Golang进行验证

验证功能

package certificate

import (
    "crypto"
    "crypto/rand"
    "crypto/rsa"
    "crypto/sha256"
    "crypto/x509"
    "encoding/base64"
    "encoding/pem"
    "os"

    "github.com/goccy/go-json"
    "github.com/gofiber/fiber/v2/log"
)

func VerifySignature(encodedSignature string, message []byte) (bool, error) {
    // Decode signature
    decodedSignature, err := base64.StdEncoding.DecodeString(encodedSignature)
    if err != nil {
        log.Error(err)
        return false, err
    }
    // Load the public key from the file
    publicKeyFile, err := os.ReadFile(publicKeyName)
    if err != nil {
        log.Error(err)
        return false, err
    }

    publicKeyBlock, _ := pem.Decode(publicKeyFile)
    rsaKey, err := x509.ParsePKCS1PublicKey(publicKeyBlock.Bytes)
    if err != nil {
        log.Error(err)
        return false, err
    }

    // Hash the mesage usign SHA-256
    hash := sha256.New()
    hash.Write(message)
    hashedMessage := hash.Sum(nil)

    passOptions := rsa.PSSOptions{
        SaltLength: rsa.PSSSaltLengthAuto,
        Hash:       crypto.SHA256,
    }
    err = rsa.VerifyPSS(rsaKey, crypto.SHA256, hashedMessage[:], decodedSignature, &passOptions)
    if err != nil {
        return false, err
    }

    return true, nil
}

type User struct {
    Name string `json:"name"`
    Age uint `json:"age"`
    Email string `json:"email"`
}
var simpleUser = User{Name: "Foo", Age: 12, Email: "[email protected]"}




func verifySignatureUser(sign string, data User){
    dataBytes, err := json.Marshal(data)
    if err != nil {
        fmt.Print(err)
    }
    verified, err := VerifySignature(sign, dataBytes)
    if err != nil {
        fmt.Println(err)
    }
    fmt.Println(verified)
}


func SimpleTest() {
    var signature = "DReue2qd0Ir/TEQ5rDtegBSqgINIG+LqMnliwh3YbVUlb58TwfrcO1jWvR55LoBa524Fc2ZnWms3g7T2BFxlMxBAU8fFkZ33TYP7VTeImOiP2QThKeQZ11nzr8LjbPnimOj2+2YMXxrP0lTGvf69A5vpXhnPWa+jBXnyoHlw8cJL971FDfUwB7T3SQg+HIEmWk1xEjRedQzyLW+kAAICoeP8u9ClCJgdnd7a2IRDzJQ2A/OhrZaiwdSwrvCmiT9iezOT3t5yCiC/VkzL1BUQx3hl7AGSwzbKmoYqK+9USXkYNmjdOaUQMfql8p1cu46D3DF59dyRS6NWCZ54SkSyTg=="
    verifySignatureUser(signature, simpleUser)
}

但是使用字符串数据类型，一切都很完美。

Python GO 加密 RSA

带有 PSS 填充的 RSA-SHA256 在 json 数据类型上出现无效签名错误，但适用于简单字符串（go lang againt python）

RSA-SHA256 with PSS padding invalid signature error on json data types but work on simple string (go lang againt python)

评论