python ECIES HKDF KDF2密钥派生计算出共享公钥解密数据

最新推荐文章于 2025-04-23 11:38:43 发布

Maple_2021_007

最新推荐文章于 2025-04-23 11:38:43 发布

阅读量545

点赞数

文章标签： python 开发语言爬虫

本文链接：https://blog.youkuaiyun.com/weixin_39038035/article/details/130988447

版权

该代码示例展示了如何使用Python进行ECIES加密解密，结合HKDF和KDF2进行密钥派生。首先，它生成ECDSA的公私钥对，然后利用远程公钥进行密钥交换。接着，使用HKDF从共享密钥中派生出一个衍生密钥。此外，还包含了AES-GCM的加密和解密功能，以及KDF2函数的实现。整个过程是为确保在安全通信中进行数据保护。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

python ECIES HKDF KDF2密钥派生计算出共享公钥解密数据

# -*- coding: utf-8 -*-

import base64
import binascii
import os
from hashlib import sha256

from sd.utils.KDF import KDF2
from Crypto.Cipher import AES
from cryptography.hazmat.primitives import serialization
from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.asymmetric import ec
from cryptography.hazmat.primitives.kdf.hkdf import HKDF


def generate_key_pair():
    private_key = ec.generate_private_key(ec.SECP256R1())
    public_key = private_key.public_key()
    print(public_key.public_numbers())
    print(public_key.key_size)

    # private_key_str = private_key.private_bytes(serialization.Encoding.PEM, serialization.PrivateFormat.PKCS8, serialization.NoEncryption()).decode()
    public_key_byte = public_key.public_bytes(serialization.Encoding.X962, serialization.PublicFormat.UncompressedPoint)
    public_key_b64 = base64.b64encode(public_key_byte).decode()
    return private_key, public_key, public_key_b64


def load_ec_pub_key(remote_key_base64_str=None):
    remote_key_bytes = base64.b64decode(remote_key_base64_str)  # to bytes
    remote_public_key = ec.EllipticCurvePublicKey.from_encoded_point(curve=ec.SECP256R1(), data=remote_key_bytes)
    return remote_public_key


def ecies_kem_hkdf(private_key, remote_key_base64_str, salt, info, shared_key_len=32):
    remote_key_bytes = base64.b64decode(remote_key_base64_str)  # to bytes
    remote_public_key = ec.EllipticCurvePublicKey.from_encoded_point(curve=ec.SECP256R1(), data=remote_key_bytes)
    shared_key = private_key.exchange(ec.ECDH(), remote_public_key)
    derived_key = HKDF(
        algorithm=hashes.SHA256(),
        length=shared_key_len,
        salt=base64.b64decode(salt),
        info=base64.b64decode(info)
    ).derive(remote_key_bytes + shared_key)

    derived_key = base64.b64encode(derived_key).decode()
    return derived_key


def ecies_kem_kdf2(private_key, ephemeral_public_key_str, secret_key_len=32):
    # private_key_bytes = base64.b64decode(private_key_str)
    # private_key = ec.derive_private_key(int.from_bytes(private_key_bytes, byteorder='big'), ec.SECP256R1())
    # private_key = serialization.load_der_private_key(private_key_bytes, password=None)

    print("private key=" + base64.b64encode(private_key.private_bytes(serialization.Encoding.PEM, serialization.PrivateFormat.PKCS8, serialization.NoEncryption())).decode())

    ephemeral_public_key_bytes = base64.b64decode(ephemeral_public_key_str)  # to bytes
    ephemeral_public_key_bytes = ec.EllipticCurvePublicKey.from_encoded_poin