RSA檔案加密解密

• 生成祕鑰對
• 檔案加密
• 檔案解密

生成祕鑰對

    @staticmethod
    def create_rsa_keys(code='nooneknows'):
        # 生成 2048 位的 RSA 金鑰
        key = RSA.generate(2048)
        encrypted_key = key.exportKey(passphrase=code, pkcs=8, protection="scryptAndAES128-CBC")
        # 生成私鑰
        with open('private_rsa_key.bin'
 
, 'wb') as f:
            f.write(encrypted_key)
        # 生成公鑰
        with open('rsa_public.pem', 'wb') as f:
            f.write(key.publickey().exportKey())

檔案加密

    @staticmethod
    def file_encryption(file_name, public_key):
        """
        檔案加密
        :param file_name: 檔案路徑名
        :param public_key: 公鑰
        :return:
        """
 

        # 二進位制只讀開啟檔案，讀取檔案資料
        with open(file_name, 'rb') as f:
            data = f.read()
        file_name_new = file_name + '.rsa'
        with open(file_name_new, 'wb') as out_file:
            # 收件人祕鑰 - 公鑰
            recipient_key = RSA.import_key(open(public_key).read())
            # 一個 16 位元組的會話金鑰
 

            session_key = get_random_bytes(16)
            # Encrypt the session key with the public RSA key
            cipher_rsa = PKCS1_OAEP.new(recipient_key)
            out_file.write(cipher_rsa.encrypt(session_key))
            # Encrypt the data with the AES session key
            cipher_aes = AES.new(session_key, AES.MODE_EAX)

            cipher_text, tag = cipher_aes.encrypt_and_digest(data)
            out_file.write(cipher_aes.nonce)
            out_file.write(tag)
            out_file.write(cipher_text)
        return file_name_new

檔案解密

    @staticmethod
    def file_decryption(file_name, code, private_key):
        """
        檔案解密
        :param file_name: 檔案路徑名
        :param code: 密碼
        :param private_key: 私鑰
        :return: 
        """
        with open(file_name, 'rb') as f_in:
            # 匯入私鑰
            private_key = RSA.import_key(open(private_key).read(), passphrase=code)
            # 會話金鑰, 隨機數, 訊息認證碼, 機密的資料
            enc_session_key, nonce, tag, cipher_text = [f_in.read(x) for x in (private_key.size_in_bytes(), 16, 16, -1)]
            cipher_rsa = PKCS1_OAEP.new(private_key)
            session_key = cipher_rsa.decrypt(enc_session_key)
            cipher_aes = AES.new(session_key, AES.MODE_EAX, nonce)
            # 解密
            data = cipher_aes.decrypt_and_verify(cipher_text, tag)
        # 檔案重新命名
        out_file_name = file_name.replace('.rsa', '')
        with open(out_file_name, 'wb') as f_out:
            f_out.write(data)
        return out_file_name