php小编苹果为您带来Golang提取ECDH私钥的简洁攻略。ECDH是一种非对称加密算法，用于在两个通信方之间建立安全的密钥交换。在Golang中，提取ECDH私钥是实现安全通信的重要步骤之一。本文将介绍如何使用Golang编程语言提取ECDH私钥的详细步骤和注意事项，帮助您快速掌握这一关键技能。无论您是初学者还是有经验的开发者，本文都将为您提供有用的指导和实用的示例代码。让我们一起开始吧！
问题内容
我知道ECDH私钥是公钥的超集。任务是提取私钥ecdh。
生成PublicKey的方法如下：
import (
"crypto/ecdh"
"crypto/rand"
"crypto/ecdsa"
"crypto/x509"
"encoding/base64"
"encoding/pem"
"fmt"
)
func main() {
alicePrivateKey, err := ecdh.P256().GenerateKey(rand.Reader)
alicePublicKey, err := MarshalECDHPublicKey(alicePrivateKey.PublicKey())
if err != nil {
fmt.Errorf("failed to marshal public key into PKIX format")
}
fmt.Printf("alicePubK => %s\n", alicePublicKey)
clientECDSAPubKey, err := UnmarshalECDSAPublicKey(alicePublicKey)
if err != nil {
panic(err)
}
println(clientECDSAPubKey)
println("no error")
}
func MarshalECDHPublicKey(pk *ecdh.PublicKey) (string, error) {
ecdhSKBytes, err := x509.MarshalPKIXPublicKey(pk)
if err != nil {
return "", fmt.Errorf("failed to marshal public key into PKIX format")
}
ecdhSKPEMBlock := pem.EncodeToMemory(
&pem.Block{
Type: "PUBLIC KEY",
Bytes: ecdhSKBytes,
},
)
return base64.StdEncoding.EncodeToString(ecdhSKPEMBlock), nil
}解决方法
我假设您想以 pem 格式提取 ecdh 私钥，就像使用公钥一样。从公钥中提取私钥是不可能的（计算上不可行）。我已经为您实现了 UnmarshalECDSAPublicKey 函数（最好重命名为 MarshalECDHPrivateKey）
立即学习“go语言免费学习笔记（深入）”；
// MarshalPKCS8PrivateKey converts a private key to PKCS #8, ASN.1 DER form.
//
// The following key types are currently supported: *rsa.PrivateKey,
// *ecdsa.PrivateKey, ed25519.PrivateKey (not a pointer), and *ecdh.PrivateKey.
// Unsupported key types result in an error.
//
// This kind of key is commonly encoded in PEM blocks of type "PRIVATE KEY".
func UnmarshalECDSAPublicKey(alicePrivateKey *ecdh.PrivateKey) (string, error) {
ecdhSKBytes, err := x509.MarshalPKCS8PrivateKey(alicePrivateKey)
if err != nil {
return "", fmt.Errorf("failed to marshal private key into PKIX format")
}
ecdhSKPEMBlock := pem.EncodeToMemory(
&pem.Block{
Type: "PRIVATE KEY",
Bytes: ecdhSKBytes,
},
)
return string(ecdhSKPEMBlock), nil
}
正如其他人在有关 MarshalECDHPublicKey 函数的评论中指出的那样，您不需要使用 base64.StdEncoding.EncodeToString(ecdhSKPEMBlock) 再次编码，因为 pem.EncodeToMemory 会做同样的事情，您只需将其转换为字符串即可。
