在C#的那一刻,我正在签署这样的挑战：

RSACryptoServiceProvider rsa;

RSAPKCS1SignatureFormatter RSAFormatter = new RSAPKCS1SignatureFormatter(rsa);

RSAFormatter.SetHashAlgorithm("SHA1");

byte[] SignedHash = RSAFormatter.CreateSignature(paramDataToSign);

然后我将SignedHash提供给Windows,它接受它并且一切正常.但我需要将此部分移至Android,并且存在问题,即我无法获得相同的签名哈希值.

在Android中,我尝试制作签名哈希,但它们与C#中生成的哈希不同.

Signature signer = Signature.getInstance("SHA1withRSA", "BC");

signer.initSign(privateKey);

signer.update(paramDataToSign);

signer.sign();

在C#中 – 使用下面一段代码 – 我得到的结果与Android相同,但它不是一个选项,因为Windows不接受签名的哈希.

ISigner signer = SignerUtilities.GetSigner("SHA1withRSA");

signer.Init(true, privateKey);

signer.BlockUpdate(paramDataToSign, 0, paramDataToSign.Length);

signer.GenerateSignature();

这里写的是C#PKCS1SignatureFormatter和Java Signature应该给出相同的结果,但它们没有. http://www.jensign.com/JavaScience/dotnet/VerifySig/

可能是什么问题呢？

以下是我得到的基本64(WebSafe)值：

Challenge = zHyz12Tk4m151nssYIBWqBCAxhQ

RSAPKCS1SignatureFormatter SignedHash = kmu39keplCAV4Qnu22wdprLz4nGSsrVtHbxQ5YMUG7p-0YwReCG4ROIlFvYs4CGfjCiAGFPw4PLrLx7mrlAA6iuhJMkgm_PMTW9alQYTH612hLEUP4EmK0M2kw8CveLcjI3HA08z8bByllIzRyAlM8bcR438vw2uhx_CbgvOOHn8vwBPnvWbFqpi2doYoq2xEuFBRe7eBPrxbMRqEd3ExdQ9c9rYT4ivOJ4pbioyi6D5i5_1crvGwM6nQanMZCmooRYJO65NP3B4wWnvQZpJLRD0U08wWcvyGBFWp188ZovDjnkTQZku6lzmwGXfqQwtBz9uNvLcTbp7cVyt5EyQxw

Signature and ISigner SignedHash = Vt-b5QfGPnSPpZuIB8-H4N1K5hQXpImS4e8k56_HruDSqy3DLsz96QKUrccshjr1z9nTK3Mwvd5yPdyTJOqSUcDQqxV46LPhWQNsubqKxAz97ePpeslIH1gHdnzkh46ixsWqgDrhR7egQtDkU8PPsph1qahCxaVkRYspQBV0jPZ-LK4EjoGGnuWTCihVKjruXJZ2VY8yZ9QRAsHVptr0Nv-mldO2MFK-oEVbtVbHqUPf5So8im3oRSm68OqY4g56bCdFNSbhcFBjrZ1QPjnxiIk43-_5tevafqoOB2D_E_mQHCJwmRg3MrNij6IdAdloCejnhCWzgMHdcG1Ug_Qmig

编辑：

所以最简单的解决方案是使用Bouncy Castle API：

AsymmetricBlockCipher rsaEngine = new PKCS1Encoding(new RSABlindedEngine());

rsaEngine.init(true, privateKey);

DigestInfo dInfo = new DigestInfo(new AlgorithmIdentifier(X509ObjectIdentifiers.id_SHA1, DERNull.INSTANCE), paramDataToSign);

byte[] digestInfo = dInfo.getEncoded(ASN1Encoding.DER);

rsaEngine.processBlock(digestInfo, 0, digestInfo.length);

解决方法:

问题是RSAFormatter.CreateSignature(paramDataToSign);传递哈希值,而signer.update(paramDataToSign);在散列之前传递数据.因此,您可能必须删除Java代码的MessageDigest计算才能使其生效.

或者,如果您只有哈希值,则可以查看Bouncy Castle轻量级API以查找接受预先哈希值的方法.这可以使用新的RSADigestSigner(new StaticDigest(paramDataToSign,“SHA-1”)).generateSignature()来执行.

问题是StaticDigest不存在,所以如果你真的需要它,你必须在这里发表评论.替代方案,镜像RSADigestSigner的实现,但替换预先计算的哈希.

标签：c,java,cryptography,bouncycastle,digital-signature

来源： https://codeday.me/bug/20190623/1272204.html