HMAC SHA256在Java上签名，在C ++私钥-公钥上验证

问题描述

我尝试使用私钥通过Java对某些数据进行签名，然后使用公钥通过C ++对其进行验证。我使用Java作为客户端，使用C ++作为服务器。 Java在Windows上运行，C ++在Ubuntu上运行

在Java中我使用

key = "MIIEowIBAAKCAQ......s8mFoA2"; //private key
        
        
        byte[] b1 = Base64.decodeBase64(key);

this.Sign =  hmacSha256Base64("test",b1);

/**************/

public static String hmacSha256Base64(String message,byte[] secretKey) throws
      NoSuchAlgorithmException,InvalidKeyException,UnsupportedEncodingException,NoSuchProviderException {
       
       Mac hmacSha256;
       try {
        hmacSha256 = Mac.getInstance("HmacSHA256","BC");
       } catch (NoSuchAlgorithmException nsae) {
        hmacSha256 = Mac.getInstance("HMAC-SHA-256");
       }
       SecretKeySpec secretKeySpec = new SecretKeySpec(secretKey,"HmacSHA256");
       hmacSha256.init(secretKeySpec);
       // Build and return signature
       return Base64.encodeBase64String(hmacSha256.doFinal(message.getBytes("UTF-8")));
      }

在C ++上，要验证我是否真正尝试其他代码，例如：

int verify_it(const unsigned char *msg,size_t mlen,const unsigned char *val,size_t vlen,EVP_PKEY *pkey)
{
    /* Returned to caller */
    int result = 0;
    EVP_MD_CTX* ctx = NULL;
    unsigned char buff[EVP_MAX_MD_SIZE];
    size_t size;
    int rc;

    if (!msg || !mlen || !val || !vlen || !pkey)
        return 0;

    ctx = EVP_MD_CTX_new();
    if (ctx == NULL) {
        printf("EVP_MD_CTX_create failed,error 0x%lx\n",ERR_get_error());
        goto err;
    }

    rc = EVP_DigestSignInit(ctx,NULL,EVP_sha256(),pkey);
    if (rc != 1) {
        printf("EVP_DigestSignInit failed,ERR_get_error());
        goto err;
    }

    rc = EVP_DigestSignUpdate(ctx,msg,mlen);
    if (rc != 1) {
        printf("EVP_DigestSignUpdate failed,ERR_get_error());
        goto err;
    }

    size = sizeof(buff);
    rc = EVP_DigestSignFinal(ctx,buff,&size);
    if (rc != 1) {
        printf("EVP_DigestSignFinal failed,ERR_get_error());
        goto err;
    }

    result = (vlen == size) && (CRYPTO_memcmp(val,size) == 0);
err:
    EVP_MD_CTX_free(ctx);
    return result;
} 

RSA* createPublicRSA(std::string TermId,bool is_local) {
    RSA *rsa = NULL;
    BIO *keybio;

    FILE * fp = fopen((SettingsConfig["UserKeys"] + "user_public/" + TermId).c_str(),"rb");

    if (fp != 0)
    {
        rsa = PEM_read_RSA_PUBKEY(fp,&rsa,NULL);
        fclose(fp);
    }
    
    return rsa;
}

size_t calcDecodeLength(const char* b64input) {
    size_t len = strlen(b64input),padding = 0;

    if (b64input[len - 1] == '=' && b64input[len - 2] == '=') //last two chars are =
        padding = 2;
    else if (b64input[len - 1] == '=') //last char is =
        padding = 1;
    return (len * 3) / 4 - padding;
}

void Base64Decode(const char* b64message,unsigned char** buffer,size_t* length) {
    BIO *bio,*b64;

    int decodeLen = calcDecodeLength(b64message);
    *buffer = (unsigned char*)malloc(decodeLen + 1);
    (*buffer)[decodeLen] = '\0';

    bio = BIO_new_mem_buf(b64message,-1);
    b64 = BIO_new(BIO_f_base64());
    bio = BIO_push(b64,bio);

    *length = BIO_read(bio,*buffer,strlen(b64message));
    BIO_free_all(bio);
}       
std::string test = "XChhsTE....NkE="; //Sign from Java      
    std::string msg = "test";
    
    RSA* publicRSA = createPublicRSA("#1.pem",false); //public key

    EVP_PKEY* pubKey = EVP_PKEY_new();
    EVP_PKEY_assign_RSA(pubKey,publicRSA);


    unsigned char* encMessage;
    size_t encMessageLength;

    Base64Decode(test.c_str(),&encMessage,&encMessageLength);

    int result_sign = verify_it((unsigned char*)msg.c_str(),msg.length(),encMessage,encMessageLength,pubKey);

    std::cout << std::to_string(result_sign) << std::endl; //return 0

其他任何示例都返回false。不知道是什么问题，请帮忙！谢谢！

p.s。私钥：

MIIEowIBAAKCAQEAra2jau89VIfcunyOth5O08EZqFVSgVzk9Tv0ELG + zH89D / s0DMLSkACXUSYq2EFRXUS05doajB55ZVoD2qYiUjJPrZDnPS + H3F / 9tqRf + o2bbb4DWRd9MJbMt2E2Q8auIN3M49XvlQnZ2 + dSvplLepYv6H + fbILBsYfQUxh4RX5B + qvk1JdbMh1rhgLV6y9 / lYkF3UlL8W5EBA2A1YQvgrwl / nBjXTTk3PVv + OmWGFRFE0BGuf7oYEuoX86732gAtLkImqLNeNNhgUVVhFiDUOOyWjybxH9UiH28eYBZqzJlyY9D3xeC3ZUkTvfJOURK5t8vagS / t8Vu3xsMHWQ7DwIDAQABAoIBAHbNlkGp0Uwne6fdWEnfxZA4QPLTGpL / FmdiUXux + pAsYXqzHVG1Ww / CN7 / 82cYAOEYSn6OzZAGBPw1DW + uPRV7wp2xU + Ljz8H69g7ISEs1zXGTfW67v0GUSYor2ZoZKPAajcmpPh4ltqacxP3q9pdH / NlpWIpm5gAGOo8STsoHl0PItHpxYbWXRylzWIgysalYPRERicT / ibQlJ4w8jhdk1lqYZAyEg2trJXDXxiNGx19OxEfRoqDVumK + W7Pn38ye9zgjuR8TYRAMPJ1WcQ9HZPLZKbVBvjztLSvUk / Q + Z8PoomIN9s + Ggev1y6 + ccOiRWpPQLp45483k5fHHXTpECgYEA4KJsRwGTw3yomIAN + k0eFSL / + + bJJBimQXjRcc0qw + NbeLoytfVrnSCBD85QYamcB8tMg CvcCdJve46ByOsmYN6jXLdUmai4Nt / kJfUU6bWpPwBdtUOGKb9mYH4xLGnnJqyUhCJ + vhY6WrOUBXu1KfkQZUEc / R / EWyEo09UNsCsCgYEAxe3IQ2tXI1zJ91xu0R309eToH / ZhfVSKR6UBoCKptEweBBPlCj8tQcKS6Ao9Oyk28rSoAYM8thy1V9 + XItku97L + fP1JSZMkGq3g / r4DH uklshDoR3xAYOSZ6 / 89BxsV0O9a92bb0CV472wM7HHH0KAMtODwRqw8IpC5qlMHiq0CgYEAxYTMJJt0bF3 + eSmQINkSbI97 + PkVUL / XW5469H1mo0d70f6Mxj7aQwdr + I / t8BFnGzceNFmMf25z7HbgE + UAuAjMKEhjsUEzybyQhfe8TcwYZ3dQ7oPTQn4z7QDJCD6Oq + jwJkeWnlo5MWvZ6gBeyetgyUe50R6Z72920NzzzkUCgYBeY / V7YXde3 + NZWfVnONgXZCDnDUKU2HpRjHln + T / foeU2oJ478sEMeVRB4JAu5IrV2B2 / Cu0rFCnPTEvxTI2 / htcimFAZDFjNeFqyYb9vQFS / xJxhavnwu1REXaam + T2 + lEdXcPAnJZe05lyLbf + SmKE2qYcszPqoqUhB1 / LiyQKBgGDXVyw05oSvR9GGKfMKIghRimeF97 + EZhS718zcuDqXJ8Qmn + S + qrrwvn1X7TZbZ3bnM6JSnC5FcgLLVTWulLShjIo2ctsqaZUPnUJTBPoCJMkmGCR8H6XaVuFlfElT / jXglqwS + UkMMM2WPkDubnLzuTuslH1DJnrBBs8mFoA2

公钥：

-----公钥-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra2jau89VIfcunyOth5O 08EZqFVSgVzk9Tv0ELG + zH89D / s0DMLSkACXUSYq2EFRXUS05doajB55ZVoD2qYi UjJPrZDnPS + H3f / 9tqRf + o2bbb4DWRd9MJbMt2E2Q8auIN3M49XvlQnZ2 + dSvplL epYv6H + fbILBsYfQUxh4RX5B + qvk1JdbMh1rhgLV6y9 / lYkF3UlL8W5EBA2A1YQv 抓取/ nBjXTTk3PVv + OmWGFRFE0BGuf7oYEuoX86732gAtLkImqLNeNNhgUVVhFiD UOOyWjybxH9UiH28eYBZqzJlyY9D3xeC3ZUkTvfJOURK5t8vagS / t8Vu3xsMHWQ7 迪达卡 -----结束公钥-----

消息：12105333071

来自Java的签名：XChhsTE + Yr4wkiibvTFiLTMhJ8tLqYo7WQs /// VtNkE =

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）

c++openssl sign