{"id":5129,"date":"2023-05-12T17:41:30","date_gmt":"2023-05-12T09:41:30","guid":{"rendered":"https:\/\/app.applebyme.cn\/cloud\/?p=5129"},"modified":"2023-05-12T17:41:30","modified_gmt":"2023-05-12T09:41:30","slug":"%e4%bd%bf%e7%94%a8rsa%e5%9c%a8ios%e4%b8%8a%e7%ad%be%e5%90%8d%e5%92%8c%e9%aa%8c%e8%af%81%e6%96%b9%e6%b3%95%e4%bb%8b%e7%bb%8d","status":"publish","type":"post","link":"https:\/\/app.applebyme.cn\/cloud\/ioszhengshu\/5129.html","title":{"rendered":"\u4f7f\u7528rsa\u5728ios\u4e0a\u7b7e\u540d\u548c\u9a8c\u8bc1\u65b9\u6cd5\u4ecb\u7ecd"},"content":{"rendered":"<p>RSA\u662f\u4e00\u79cd\u975e\u5bf9\u79f0\u52a0\u5bc6\u7b97\u6cd5\uff0c\u5e38\u7528\u4e8e\u6570\u5b57\u7b7e\u540d\u548c\u52a0\u5bc6\u3002\u5728iOS\u4e0a\u4f7f\u7528RSA\u8fdb\u884c\u7b7e\u540d\u548c\u9a8c\u8bc1\uff0c\u9700\u8981\u4f7f\u7528iOS\u5185\u7f6e\u7684Security\u6846\u67b6\u3002\u4e0b\u9762\u5c06\u5bf9RSA\u7684\u539f\u7406\u4ee5\u53ca\u5728iOS\u4e0a\u7684\u5177\u4f53\u5b9e\u73b0\u8fdb\u884c\u8be6\u7ec6\u4ecb\u7ecd\u3002<\/p>\n<p>1. RSA\u539f\u7406<\/p>\n<p>RSA\u7b97\u6cd5\u662f\u4e00\u79cd\u57fa\u4e8e\u5927\u7d20\u6570\u5206\u89e3\u7684\u975e\u5bf9\u79f0\u52a0\u5bc6\u7b97\u6cd5\uff0c\u5176\u57fa\u672c\u539f\u7406\u662f\u5c06\u4e24\u4e2a\u5927\u7d20\u6570\u76f8\u4e58\u5f97\u5230\u4e00\u4e2a\u5927\u7684\u5408\u6570\uff0c\u5e76\u5c06\u5176\u4f5c\u4e3a\u516c\u94a5\uff0c\u800c\u5c06\u4e24\u4e2a\u5927\u7d20\u6570\u7684\u4e58\u79ef\u7684\u6b27\u62c9\u51fd\u6570\u503c\u4f5c\u4e3a\u79c1\u94a5\u3002\u5728RSA\u4e2d\uff0c\u516c\u94a5\u548c\u79c1\u94a5\u662f\u4e0d\u540c\u7684\uff0c\u53ef\u4ee5\u901a\u8fc7\u516c\u94a5\u52a0\u5bc6\u6570\u636e\uff0c\u53ea\u6709\u901a\u8fc7\u79c1\u94a5\u624d\u80fd\u89e3\u5bc6\u6570\u636e\u3002<\/p>\n<p>RSA\u7684\u52a0\u5bc6\u8fc7\u7a0b\u5982\u4e0b\uff1a<\/p>\n<p>1. \u9009\u62e9\u4e24\u4e2a\u5927\u7d20\u6570p\u548cq\uff0c\u5e76\u8ba1\u7b97\u5b83\u4eec\u7684\u4e58\u79efn=p*q\u3002<\/p>\n<p>2. \u8ba1\u7b97n\u7684\u6b27\u62c9\u51fd\u6570\u503c\u03c6(n)=(p-1)*(q-1)\u3002<\/p>\n<p>3. \u9009\u62e9\u4e00\u4e2a\u5c0f\u4e8e\u03c6(n)\u4e14\u548c\u03c6(n)\u4e92\u8d28\u7684\u6574\u6570e\uff0c\u4f5c\u4e3a\u52a0\u5bc6\u6307\u6570\u3002e\u7684\u9009\u62e9\u901a\u5e38\u662f65537\u3002<\/p>\n<p>4. \u8ba1\u7b97e\u5bf9\u4e8e\u03c6(n)\u7684\u6a21\u53cd\u5143\u7d20d\uff0c\u4f5c\u4e3a\u89e3\u5bc6\u6307\u6570\u3002\u5373d*e mod \u03c6(n) = 1\u3002<\/p>\n<p>5. \u516c\u94a5\u4e3a(n, e)\uff0c\u79c1\u94a5\u4e3a(n, d)\u3002<\/p>\n<p>6. \u52a0\u5bc6\u65f6\uff0c\u5c06\u660e\u6587m\u8f6c\u6362\u4e3a\u6574\u6570M\uff0c\u8ba1\u7b97\u5bc6\u6587C=M^e mod n\u3002<\/p>\n<p>7. \u89e3\u5bc6\u65f6\uff0c\u5c06\u5bc6\u6587C\u8ba1\u7b97\u51fa\u660e\u6587M=C^d mod n\u3002<\/p>\n<p>2. \u5728iOS\u4e0a\u4f7f\u7528RSA\u8fdb\u884c\u7b7e\u540d\u548c\u9a8c\u8bc1<\/p>\n<p>\u5728iOS\u4e0a\u4f7f\u7528RSA\u8fdb\u884c\u7b7e\u540d\u548c\u9a8c\u8bc1\uff0c\u9700\u8981\u4f7f\u7528Security\u6846\u67b6\u4e2d\u7684SecKeyRef\u5bf9\u8c61\u6765\u8868\u793a\u516c\u94a5\u548c\u79c1\u94a5\u3002SecKeyRef\u5bf9\u8c61\u53ef\u4ee5\u901a\u8fc7\u5bc6\u94a5\u5bf9\u7684DER\u7f16\u7801\u6216PEM\u7f16\u7801\u6765\u521b\u5efa\u3002\u5177\u4f53\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<p>1. \u751f\u6210RSA\u5bc6\u94a5\u5bf9<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528openssl\u547d\u4ee4\u884c\u5de5\u5177\u751f\u6210RSA\u5bc6\u94a5\u5bf9\uff0c\u751f\u6210\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n<p>openssl genrsa -out private_key.pem 2048<\/p>\n<p>\u8fd9\u5c06\u751f\u6210\u4e00\u4e2a2048\u4f4d\u7684RSA\u79c1\u94a5\uff0c\u5e76\u5c06\u5176\u4fdd\u5b58\u5230private_key.pem\u6587\u4ef6\u4e2d\u3002\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5c06\u79c1\u94a5\u8f6c\u6362\u4e3aDER\u7f16\u7801\uff1a<\/p>\n<p>openssl rsa -in private_key.pem -outform DER -out private_key.der<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5c06\u79c1\u94a5\u8f6c\u6362\u4e3aPEM\u7f16\u7801\uff1a<\/p>\n<p>openssl rsa -in private_key.pem -outform PEM -out private_key.pem<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4ece\u79c1\u94a5\u4e2d\u63d0\u53d6\u516c\u94a5\uff0c\u5e76\u5c06\u5176\u4fdd\u5b58\u5230public_key.der\u6587\u4ef6\u4e2d\uff1a<\/p>\n<p>openssl rsa -in private_key.pem -pubout -outform DER -out public_key.der<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5c06\u516c\u94a5\u8f6c\u6362\u4e3aPEM\u7f16\u7801\uff1a<\/p>\n<p>openssl rsa -in private_key.pem -pubout &#8211;<\/p>\n<p><figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/kb.cdn.yimenapp.com\/yimen\/2023\/04\/20230412115052431.jpg\" \/><\/figure>\n<\/p>\n<p>outform PEM -out public_key.pem<\/p>\n<p>2. \u52a0\u8f7dRSA\u516c\u94a5\u548c\u79c1\u94a5<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u4ee3\u7801\u4eceDER\u7f16\u7801\u6216PEM\u7f16\u7801\u4e2d<a href=\"https:\/\/platform.yimenapp.com\/ios-zhengshu-1758.html\">\u82f9\u679c\u8bc1\u4e66\u540d\u79f0\u53ef\u4ee5<\/a>\u52a0\u8f7dRSA\u516c\u94a5\u548c\u79c1\u94a5\uff1a<\/p>\n<p>&#8220;`<\/p>\n<p>&#8211; (SecKeyRef)loadPrivateKeyFromDER:(NSData *)privateKeyData {<\/p>\n<p>    NSMutableDictionary *keyAttr = [[NSMutableDictionary alloc] init];<\/p>\n<p>    [keyAttr setObject:(__bridge id)kSecAttrKeyTypeRSA forKey:(__bridge id)kSecAttrKeyType];<\/p>\n<p>    [keyAttr setObject:@(privateKeyData.length) forKey:(__bridge id)kSecAttrKeySizeInBits];<\/p>\n<p>    SecKeyRef privateKeyRef = NULL;<\/p>\n<p>    SecKeyRef result = NULL;<\/p>\n<p>    CFErrorRef error = NULL;<\/p>\n<p>    privateKeyRef = SecKeyCreateWithData((__bridge CFDataRef)privateKeyData, (__bridge CFDictionaryRef)keyAttr, &amp;error);<\/p>\n<p>    if (privateKeyRef == NULL || error != NULL) {<\/p>\n<p>        NSLog(@&#8221;load private key failed&#8221;);<\/p>\n<p>        return NULL;<\/p>\n<p>    }<\/p>\n<p>    result = SecKeyCopyPrivateKey(privateKeyRef);<\/p>\n<p>    CFRelease(privateKeyRef);<\/p>\n<p>    return result;<\/p>\n<p>}<\/p>\n<p>&#8211; (SecKeyRef)loadPublicKeyFromDER:(NSData *)publicKeyData {<\/p>\n<p>    NSMutableDictionary *keyAttr = [[NSMutableDictionary alloc] init];<\/p>\n<p>    [keyAttr setObject:(__bridge id)kSecAttrKeyTypeRSA forKey:(__bridge id)kSecAttrKeyType];<\/p>\n<p>    [keyAttr setObject:@(publicKeyData.length) forKey:(__bridge id)kSecAttrKeySizeInBits];<\/p>\n<p>   <a href=\"https:\/\/platform.yimenapp.com\/ios-zhengshu-3099.html\">\u82f9\u679c\u63a8\u9001\u8bc1\u4e66\u5982\u4f55\u4e0a\u4f20<\/a> SecKeyRef publicKeyRef = NULL;<\/p>\n<p>    SecKeyRef result = NULL;<\/p>\n<p>    CFErrorRef error = NULL;<\/p>\n<p>    publicKeyRef = SecKeyCreateWithData((__bridge CFDataRef)publicKeyData, (__bridge CFDictionaryRef)keyAttr, &amp;error);<\/p>\n<p>    if (publicKeyRef == NULL || error != NULL) {<\/p>\n<p>        NSLog(@&#8221;load public key failed&#8221;);<\/p>\n<p>        return NULL;<\/p>\n<p>    }<\/p>\n<p>    result = SecKeyCopyPublicKey(publicKeyRef);<\/p>\n<p>    CFRelease(publicKeyRef);<\/p>\n<p>    return result;<\/p>\n<p>}<\/p>\n<p>&#8220;`<\/p>\n<p>3. \u4f7f\u7528RSA\u79c1\u94a5\u8fdb\u884c\u7b7e\u540d<\/p>\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u4ee3\u7801\u4f7f\u7528RSA\u79c1\u94a5\u5bf9\u6570\u636e\u8fdb\u884c\u7b7e\u540d\uff1a<\/p>\n<p>&#8220;`<\/p>\n<p>&#8211; (NSData *)signData:(NSData *)data withPrivateKey:(SecKeyRef)privateKey {<\/p>\n<p>    size_t signedDataLength = SecKeyGetBlockSize(privateKey);<\/p>\n<p>    uint8_t *signedData = malloc(signedDataLength);<\/p>\n<p>    memset(signedData, 0, signedDataLength);<\/p>\n<p>    if (SecKeyRawSign(privateKey, kSecPaddingPKCS1SHA256, data.bytes, data.length, signedData, &amp;signedDataLength) != errSecSuccess) {<\/p>\n<p>        NSLog(@&#8221;sign data failed&#8221;);<\/p>\n<p>        free(signedData);<\/p>\n<p>        return nil;<\/p>\n<p>    }<\/p>\n<p>    NSData *result = [NSData<\/p>\n<p>        \u4e00\u95e8APP\u8bc1\u4e66\u5236\u4f5c\u5de5\u5177(https:\/\/platform.yimenapp.com\/)\u63d0\u4f9bAPP\u8bc1\u4e66\u5728\u7ebf\u5236\u4f5c\uff0c\u652f\u6301\u82f9\u679c\u8bc1\u4e66\u3001\u5b89\u5353\u8bc1\u4e66\u5728\u7ebf\u4e00\u952e\u5feb\u6377\u5236\u4f5c\u3002\u5de5\u5177\u5b8c\u5168\u514d\u8d39\uff0c\u6ce8\u518c\u6210\u4e3a\u4e00\u95e8APP\u5f00\u53d1\u8005\u5373\u53ef\u4f7f\u7528\uff0c\u5168\u4e2d\u6587\u5316\u4e91\u7aefAPP\u8bc1\u4e66\u5de5\u5177\u3002<br \/>\n\u4e00\u952e\u5236\u4f5cIOS\u82f9\u679c\u8bc1\u4e66\uff0c\u5305\u542bappstore\u4e0a\u67b6\u8bc1\u4e66\u3001\u5f00\u53d1\u73af\u5883\u6d4b\u8bd5\u8bc1\u4e66\u3001ADhoc\u751f\u4ea7\u73af\u5883\u6d4b\u8bd5\u8bc1\u4e66\u3001\u5728\u7ebf\u751f\u6210P12\u5f00\u53d1\u8005\u8bc1\u4e66\u8bc1\u4e66\uff0cP12\u63a8\u9001\u8bc1\u4e66\u3001P8\u63a8\u9001\u8bc1\u4e66\uff0c\u5feb\u6377\u7ed1\u5b9aUDID\u3001\u81ea\u5b9a\u4e49\u5305\u540dBundle ID\u3001\u5728\u7ebf\u83b7\u53d6\u63cf\u8ff0\u6587\u4ef6\uff1b<br \/>\n\u4e00\u952e\u5236\u4f5c\u5b89\u5353\u8bc1\u4e66\uff0c\u652f\u6301\u81ea\u5b9a\u4e49\u5b89\u5353\u5305\u540d\u3001\u7b7e\u540d\u6587\u4ef6\u5bc6\u7801(storepass)\u3001\u522b\u540d(alias)\u3001\u522b\u540d\u5bc6\u7801(keypass)\u3001\u516c\u53f8\/\u673a\u6784\u540d\u79f0 (O)\u3001\u90e8\u95e8 (OU)\u3001\u56fd\u5bb6\/\u5730\u533a (C)\u3001\u7701\u4efd (ST)\u3001\u57ce\u5e02 (L)\u3001\u90ae\u7bb1 (E)\u3001\u4ee5\u53ca\u5b89\u5353\u8bc1\u4e66\u6709\u6548\u671f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>RSA\u662f\u4e00\u79cd\u975e\u5bf9\u79f0\u52a0\u5bc6\u7b97\u6cd5\uff0c\u5e38\u7528\u4e8e\u6570\u5b57\u7b7e\u540d\u548c\u52a0\u5bc6\u3002\u5728iOS\u4e0a\u4f7f\u7528RSA\u8fdb\u884c\u7b7e\u540d\u548c\u9a8c\u8bc1\uff0c\u9700\u8981\u4f7f\u7528iOS\u5185\u7f6e\u7684Security\u6846\u67b6\u3002\u4e0b\u9762\u5c06\u5bf9RSA\u7684\u539f\u7406\u4ee5\u53ca\u5728iOS\u4e0a\u7684\u5177\u4f53\u5b9e\u73b0\u8fdb\u884c\u8be6\u7ec6\u4ecb\u7ecd\u30021. RSA<\/p>\n","protected":false},"author":24,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3570],"tags":[7182,1244,869,7183,7181],"class_list":["post-5129","post","type-post","status-publish","format-standard","hentry","category-ioszhengshu","tag-iosappstore","tag-1244","tag-869","tag-7183","tag-7181"],"_links":{"self":[{"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/posts\/5129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/comments?post=5129"}],"version-history":[{"count":0,"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/posts\/5129\/revisions"}],"wp:attachment":[{"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/media?parent=5129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/categories?post=5129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/app.applebyme.cn\/cloud\/wp-json\/wp\/v2\/tags?post=5129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}