从 node js crypto 准备签名/验证模块

问题描述

我正在研究一个将签名/验证的节点加密模块。我已经管理了验证模块：

'use strict';

const crypto = require('crypto');
const fs = require('fs');
const path = require('path');

const publicKey = fs.readFileSync(path.join(__dirname,'key.pub'));
const encryptDataPath = path.join(__dirname,'encryptData.txt');
let encryptData = fs.readFileSync(encryptDataPath).toString();

//console.log(encryptData);


// start decoding
const plainEncryptData = Buffer.from(encryptData,'base64').toString();


const [signatureb64,contentb64] = plainEncryptData.split('\n');


const signature = Buffer.from(signatureb64,'base64');
const content = Buffer.from(contentb64,'base64').toString();

const verifier = crypto.createVerify('RSA-SHA256');
verifier.update(content);
verifier.end();

const isValid = verifier.verify(publicKey,signature);

if (!isValid) {
    console.log('not valid');
} else {    
    console.log(content);
}

这是公钥（pub.key）：

这里是 encryptData.txt（加密数据）

ZmZzeUNhcmU2Q1pTRHo2M0VrT0tGeGJUWitDMGJydnF0dzRWZDc5STJIUTJuWndPZzVoaE8rbU5keEhIMHBEak0xVUxHRGNYQ0w1Wk5maVN4M096dDJXZEowSmk4R1pGZTZOc0s1dm05SDJHd1hUR3Q0VHl1ejFkbGlqbjRwcTBSM0xLSDl6SThWT1RLNTdySWlGeVZQa0pxQzJJMkowaW1LYTZxbWpGU0hsVTVQU3BrVk9YYUxGMVJNQjBsWm5ncDcwMEJXT1k4V3FlSHlvS0pKY0NXTkpJRGrdWEw1ZWpuTXFpY0VUTzZWV25BMThkVitRQUZRS2k5SG5SR1VuVGhlYUI2QU9jcWRzMGZzWVlvM0xZZlQwbDZELzJHd0dJZXZ3LzlxMmoxVmJkcfNBUTBldTJYUlJ4Z2VFZmFlQys0MUZIZ0haNHc4UXBmb09leW1WSkN3PT0KZXlKMGVYQmxJam9pWW5KdmJucGxJaXdpWTNWemRHOXRaWEpKWkNJNklqRTJRMdlxVWxOak9YZ3lNV1pEU0c1Rklpd2laWGh3YVhKbFFYUWlPakUyTWpZMU56WXpOakl3TURBc0ltbHpWSEpwWVd3aU9uUnlkV1VzSW14cFkyVnVjMlZMWlhraU9pSmpPVEk1TldJMk9TMWlaV1UyTFRRek1XRXRPR1EzWkMwd1lqYzBNR1l3TVdOaE1tUWlMQ0pqY21WaGRHVmtRWFFpT2pFMk1qVXpOalkzTmprMU16Rjk=

现在，我正在尝试创建其签名模块，该模块将创建与 encryptData.txt 相同的加密数据：

'use strict';

const crypto = require('crypto');
const fs = require('fs');
const path = require('path');

const publicKey = fs.readFileSync(path.join(__dirname,'key.pub'));

let content = {}
content.type = "bronze";
content.customerId = "16covrSc9x21fCHnE";
content.expireAt = 1626576362000;
content.isTrial = true;
content.licenseKey = "c9295b69-bee6-431a-8d7d-0b740f01ca2d";
content.createdAt = 1625366769531;


const encryptDataPath = path.join(__dirname,'encryptData.txt');
let a = fs.readFileSync(encryptDataPath).toString();

// signing
const signer = crypto.createSign('RSA-SHA256');
signer.update(content);
signer.end();

const signature = signer.sign(publicKey,'base64');

console.log('sign: ',signature);

但是当我运行这个加密模块时，它抛出了这个错误：

internal/crypto/util.js:97
    throw new ERR_INVALID_ARG_TYPE(
    ^

TypeError [ERR_INVALID_ARG_TYPE]: The "data" argument must be one of type string,Buffer,TypedArray,or DataView. Received type object
    at Sign.update (internal/crypto/sig.js:49:10)
    at Object.<anonymous> (/home/ubuntu/www/node-encrpt/encode.js:23:8)
    at Module._compile (internal/modules/cjs/loader.js:959:30)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:995:10)
    at Module.load (internal/modules/cjs/loader.js:815:32)
    at Function.Module._load (internal/modules/cjs/loader.js:727:14)
    at Function.Module.runMain (internal/modules/cjs/loader.js:1047:10)
    at internal/main/run_main_module.js:17:11 {
  code: 'ERR_INVALID_ARG_TYPE'
}

我无法弄清楚为什么会发生这种情况。

如何完成加密模块？

解决方法

嗯，错误很简单：这一行...

signer.update(content);

... 尝试处理一个对象（content 的值），但它不能：update 不希望关心传递数据的正确序列化。由您决定如何处理。

一种常见的方法是使用 JSON 作为序列化格式：

signer.update(JSON.stringify(content));

但实际上，您可以使用任何能够将对象的内容映射到字符串、Buffer、TypedArray 或 DataView 的函数。这些是 signer.update() 预期的唯一类型。

encryption javascript signing