指定PEM格式字符串数据转换非对称密钥对(ArkTS)
以RSA为例,根据指定的非对称密钥字符串数据,生成非对称密钥对(KeyPair)。
针对非对称密钥的convertPemKey操作:
- 公钥需满足X.509规范、PKCS#1规范、PEM编码格式。
- 私钥需满足PKCS#8规范、PKCS#1规范、PEM编码格式。
指定PEM格式字符串数据转换密钥对
对应的算法规格请查看非对称密钥生成和转换规格。
-
调用cryptoFramework.createAsyKeyGenerator,指定字符串参数'RSA1024',创建RSA密钥类型为RSA1024、素数个数为2的非对称密钥生成器(AsyKeyGenerator)。
生成RSA非对称密钥时,默认素数为2,此处省略了参数PRIMES_2。
-
调用AsyKeyGenerator.convertPemKey,传入二进制密钥数据,生成非对称密钥对象(KeyPair)。
-
调用AsyKeyGenerator.getEncodedPem,将非对称密钥对象中的公钥转换成pkcs1或x509格式,私钥转换成pkcs1或pkcs8格式。
-
以Promise方式生成RSA密钥对为例:
import { cryptoFramework } from '@kit.CryptoArchitectureKit';let priKeyPkcs1Str1024: string ='-----BEGIN RSA PRIVATE KEY-----\n' +'MIICXQIBAAKBgQCwIN3mr21+N96ToxnVnaS+xyK9cNRAHiHGgrbjHw6RAj3V+l+W\n' +'Y68IhIe3DudVlzE9oMjeOQwkMkq//HCxNlIlFR6O6pa0mrXSwPRE7YKG97CeKk2g\n' +'YOS8YEh8toAvm7xKbiLkXuuMlxrjP2j/mb5iI/UASFSPZiQ/IyxDr0AQaQIDAQAB\n' +'AoGAEvBFzBNa+7J4PXnRQlYEK/tvsd0bBZX33ceacMubHl6WVZbphltLq+fMTBPP\n' +'LjXmtpC+aJ7Lvmyl+wTi/TsxE9vxW5JnbuRT48rnZ/Xwq0eozDeEeIBRrpsr7Rvr\n' +'7ctrgzr4m4yMHq9aDgpxj8IR7oHkfwnmWr0wM3FuiVlj650CQQDineeNZ1hUTkj4\n' +'D3O+iCi3mxEVEeJrpqrmSFolRMb+iozrIRKuJlgcOs+Gqi2fHfOTTL7LkpYe8SVg\n' +'e3JxUdVLAkEAxvcZXk+byMFoetrnlcMR13VHUpoVeoV9qkv6CAWLlbMdgf7uKmgp\n' +'a1Yp3QPDNQQqkPvrqtfR19JWZ4uy1qREmwJALTU3BjyBoH/liqb6fh4HkWk75Som\n' +'MzeSjFIOubSYxhq5tgZpBZjcpvUMhV7Zrw54kwASZ+YcUJvmyvKViAm9NQJBAKF7\n' +'DyXSKrem8Ws0m1ybM7HQx5As6l3EVhePDmDQT1eyRbKp+xaD74nkJpnwYdB3jyyY\n' +'qc7A1tj5J5NmeEFolR0CQQCn76Xp8HCjGgLHw9vg7YyIL28y/XyfFyaZAzzK+Yia\n' +'akNwQ6NeGtXSsuGCcyyfpacHp9xy8qXQNKSkw03/5vDO\n' +'-----END RSA PRIVATE KEY-----\n';let publicPkcs1Str1024: string ='-----BEGIN RSA PUBLIC KEY-----\n' +'MIGJAoGBALAg3eavbX433pOjGdWdpL7HIr1w1EAeIcaCtuMfDpECPdX6X5ZjrwiE\n' +'h7cO51WXMT2gyN45DCQySr/8cLE2UiUVHo7qlrSatdLA9ETtgob3sJ4qTaBg5Lxg\n' +'SHy2gC+bvEpuIuRe64yXGuM/aP+ZvmIj9QBIVI9mJD8jLEOvQBBpAgMBAAE=\n' +'-----END RSA PUBLIC KEY-----\n';async function testPkcs1ToPkcs8ByPromise() {let asyKeyGenerator = cryptoFramework.createAsyKeyGenerator('RSA1024');let keyPair = await asyKeyGenerator.convertPemKey(publicPkcs1Str1024, priKeyPkcs1Str1024);let priPemKey = keyPair.priKey;let pubPemKey = keyPair.pubKey;let priString = priPemKey.getEncodedPem('PKCS8');let pubString = pubPemKey.getEncodedPem('X509');console.info('[promise]TestPkcs1ToPkcs8ByPromise priString output: ' + priString);console.info('[promise]TestPkcs1ToPkcs8ByPromise pubString output: ' + pubString);} -
同步返回结果(调用方法convertPemKeySync):
import { cryptoFramework } from '@kit.CryptoArchitectureKit';let priKeyPkcs1Str1024: string ='-----BEGIN RSA PRIVATE KEY-----\n' +'MIICXQIBAAKBgQCwIN3mr21+N96ToxnVnaS+xyK9cNRAHiHGgrbjHw6RAj3V+l+W\n' +'Y68IhIe3DudVlzE9oMjeOQwkMkq//HCxNlIlFR6O6pa0mrXSwPRE7YKG97CeKk2g\n' +'YOS8YEh8toAvm7xKbiLkXuuMlxrjP2j/mb5iI/UASFSPZiQ/IyxDr0AQaQIDAQAB\n' +'AoGAEvBFzBNa+7J4PXnRQlYEK/tvsd0bBZX33ceacMubHl6WVZbphltLq+fMTBPP\n' +'LjXmtpC+aJ7Lvmyl+wTi/TsxE9vxW5JnbuRT48rnZ/Xwq0eozDeEeIBRrpsr7Rvr\n' +'7ctrgzr4m4yMHq9aDgpxj8IR7oHkfwnmWr0wM3FuiVlj650CQQDineeNZ1hUTkj4\n' +'D3O+iCi3mxEVEeJrpqrmSFolRMb+iozrIRKuJlgcOs+Gqi2fHfOTTL7LkpYe8SVg\n' +'e3JxUdVLAkEAxvcZXk+byMFoetrnlcMR13VHUpoVeoV9qkv6CAWLlbMdgf7uKmgp\n' +'a1Yp3QPDNQQqkPvrqtfR19JWZ4uy1qREmwJALTU3BjyBoH/liqb6fh4HkWk75Som\n' +'MzeSjFIOubSYxhq5tgZpBZjcpvUMhV7Zrw54kwASZ+YcUJvmyvKViAm9NQJBAKF7\n' +'DyXSKrem8Ws0m1ybM7HQx5As6l3EVhePDmDQT1eyRbKp+xaD74nkJpnwYdB3jyyY\n' +'qc7A1tj5J5NmeEFolR0CQQCn76Xp8HCjGgLHw9vg7YyIL28y/XyfFyaZAzzK+Yia\n' +'akNwQ6NeGtXSsuGCcyyfpacHp9xy8qXQNKSkw03/5vDO\n' +'-----END RSA PRIVATE KEY-----\n';let publicPkcs1Str1024: string ='-----BEGIN RSA PUBLIC KEY-----\n' +'MIGJAoGBALAg3eavbX433pOjGdWdpL7HIr1w1EAeIcaCtuMfDpECPdX6X5ZjrwiE\n' +'h7cO51WXMT2gyN45DCQySr/8cLE2UiUVHo7qlrSatdLA9ETtgob3sJ4qTaBg5Lxg\n' +'SHy2gC+bvEpuIuRe64yXGuM/aP+ZvmIj9QBIVI9mJD8jLEOvQBBpAgMBAAE=\n' +'-----END RSA PUBLIC KEY-----\n';function testPkcs1ToPkcs8BySync() {let asyKeyGenerator = cryptoFramework.createAsyKeyGenerator('RSA1024');try {let keyPairData = asyKeyGenerator.convertPemKeySync(publicPkcs1Str1024, priKeyPkcs1Str1024);if (keyPairData != null) {console.info('[Sync]: convert pem key pair result: success.');} else {console.error('[Sync]: convert pem key pair result: fail.');}let priPemKey = keyPairData.priKey;let pubPemKey = keyPairData.pubKey;let priString = priPemKey.getEncodedPem('PKCS8');let pubString = pubPemKey.getEncodedPem('X509');console.info('[Sync]TestPkcs1ToPkcs8BySync priString output: ' + priString);console.info('[Sync]TestPkcs1ToPkcs8BySync pubString output: ' + pubString);} catch (e) {console.error(`Sync failed: errCode: ${e.code}, message: ${e.message}`);}}