function login() {　　 //声明一个椭圆曲线对象　　 var curve = new Curve25519();　　 　　 //随机一个64位的hex数值，并转化为字节类型，做为x25519的私钥var privateKey = new Key25519(hexToBytes(randomWord(64)));

　　 //得到椭圆曲线的公钥var publickey = curve.genPub(privateKey).key;　　　　 //把前端的私钥传入到后端，后端计算得出公用的aes加密的密钥，同时得到后端的公钥$.post("/Login/GetX25519PublicKey", { publicKey: bytesToHex(publickey) }, function (data) {　　　　　　　　　　//得到后端的公钥，结合前端的私钥，计算得出前端aes加密的密钥（前后端计算的密钥是一致的）var shareKey = bytesToHex(curve.genShared(privateKey, new Key25519(hexToBytes(data.PublicKey))).key);　　　　　　　　　  //声明一个登录对象var loginUser = new Object();　　　　  　　　　　//用户名loginUser.UserName = $.trim($("#txtUserName").val());　　　　  //密码两次sha384加密        loginUser.Password = sha384(sha384($.trim($("#txtPWD").val())));　　     //验证码　　　　 loginUser.ValidateCode = $.trim($("#txtValidateCode").val());

　　　　  //使用公用密钥shareKey进行ase加密（aes后边的参数介绍下mode有gcm和ccm模式，这里用gcm模式；ts长度gcm模式是128；iter轮询次数默认10000，咱们改为1000，10000次数太多了会卡顿；salt盐随机数,iv是向量）var aesData = sjcl.encrypt(shareKey, JSON.stringify(loginUser), { mode: 'gcm', ts: 128, iter: 1000, salt: sjcl.random.randomWords(4), iv: sjcl.random.randomWords(3) });　　　　  　　　　  //传入加密后的login字符串，同时需要传入后端返回的key（用于后端方便查找对应的公用密钥）$.post("/Login/UserLogin", { loginUser: aesData, key: data.Key }, function (data) {if (data.Result == false) 　　　　　　　{　　　　　　　　  alert("登录失败")} else {window.location = "/";}});});
}

//随机一定长度的hex数值
function randomWord(len) {var str = "",arr = ['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'];for (var i = 0; i < len; i++) {var pos = Math.round(Math.random() * (arr.length - 1));str += arr[pos];}return str;
}

       //后端得到前端传过来的公钥，生成aes公用密钥，使用的是 BouncyCastle　类库　　　public static Dictionary<string, string> GenerateX25519Keys(string publicKey){SecureRandom secureRandom = new SecureRandom();byte[] privateByte = new byte[X25519.ScalarSize];byte[] publicByte = new byte[X25519.PointSize];byte[] shareByte = new byte[X25519.PointSize];secureRandom.NextBytes(privateByte);X25519.ScalarMultBase(privateByte, 0, publicByte, 0);X25519.ScalarMult(privateByte, 0, Hex.Decode(publicKey), 0, shareByte, 0);Dictionary<string, string> dc = new Dictionary<string, string>();//生成x25519 hex公钥dc.Add("PublicKey", Hex.ToHexString(publicByte));//生成x25519 hex私钥dc.Add("PrivateKey", Hex.ToHexString(privateByte));//生成aes公用密钥dc.Add("ShareKey", Hex.ToHexString(shareByte));//返回一个dictionary对象return dc;}public ActionResult GetX25519PublicKey(string publicKey){//得到x25519keyDictionary<string, string> eccKeys = GenerateX25519Keys(publicKey);　　　　　　  　　　　　　　//RedisNewtonsoftSerializer serializer = new NewtonsoftSerializer();RedisConfiguration redisConfiguration = RedisCachingSectionHandler.GetConfig();IRedisCacheConnectionPoolManager connectionPoolManager = new RedisCacheConnectionPoolManager(redisConfiguration);IRedisCacheClient redisClient = new RedisCacheClient(connectionPoolManager, serializer, redisConfiguration);//使用guid keystring key = Guid.NewGuid().ToString("n") + Guid.NewGuid().ToString("n");//把x25519字典用redis缓存起来redisClient.GetDbFromConfiguration().Add(key, eccKeys, DateTime.Now.AddSeconds(30));//返回guid key和x25519 公钥return Json(new { Key = key, PublicKey = eccKeys["PublicKey"] });} 

        //根据aes公用key 解密前端传进来的aes密文，使用的是 BouncyCastle　类库　　　　 //传进来的密文 {"iv":"r5idcq/NZ7VEpZv9","v":1,"iter":1000,"ks":128,"ts":128,"mode":"gcm","adata":"","cipher":"aes","salt":"rEwzN7o5UANsLvB4xf4bZg==","ct":"YI5Ubuvev8787ryV4+X+/1+ICXixZfqkhRxKg0zfi/27M24+Y8w9BOeIhe0tTEa1B1WP8tPYpcTYTHw58G/rpZUxSPNurhUXaAZKoiigl5eeaqOqNq9xHd0s+mKi+l1zuiL3qo5sxb0OcDxuL0clp46UyN0y8gr6xmimuszXalWdssfvCuoT8saJ4rwrcmM2TrjBMP/HG96VjAEzBD1q+teHFWJ50q4PLw=="}　public static string DecryptString(string ciphertext, string key){//把aes密文转换为json对象JObject aesJObject = JObject.Parse(ciphertext);//把json对象的ct属性转换为字节（ct就是加密后的密文）byte[] ciphertextByte = Convert.FromBase64String(aesJObject["ct"].ToString());//把json的salt属性转换为字节byte[] salt = Convert.FromBase64String(aesJObject["salt"].ToString());//把json的iv属性转换为字节byte[] iv = Convert.FromBase64String(aesJObject["iv"].ToString());//声明一个PBKDF2对象Pkcs5S2ParametersGenerator pbkdf2 = new Pkcs5S2ParametersGenerator(new Sha256Digest());//根据aes公用key，salt，iter轮询次数(前面传进来的是1000，这里也是1000)初始化PBKDF2对象
            pbkdf2.Init(Encoding.UTF8.GetBytes(key), salt, 1000);byte[] keyByte = ((KeyParameter)pbkdf2.GenerateDerivedMacParameters(16 * 8)).GetKey();// 解密得到字符串return Encoding.UTF8.GetString(Decrypt(ciphertextByte, keyByte, iv));}//解密aes密文public static byte[] Decrypt(byte[] ciphertext, byte[] key, byte[] iv){//声明aes gcm对象GcmBlockCipher cipher = new GcmBlockCipher(new AesEngine());KeyParameter keyParam = ParameterUtilities.CreateKeyParameter("AES", key);//根据key和IV初始化ParametersWithIV cipherParameters = new ParametersWithIV(keyParam, iv);cipher.Init(false, cipherParameters);//解密byte[] plaintext = new byte[cipher.GetOutputSize(ciphertext.Length)];int length = cipher.ProcessBytes(ciphertext, 0, ciphertext.Length, plaintext, 0);cipher.DoFinal(plaintext, length);//返还前端加密前的login字节return plaintext;}}//解密aes login密文public ActionResult UserLogin(string loginUser, string key){　　　　　　try{//Redis相关NewtonsoftSerializer serializer = new NewtonsoftSerializer();RedisConfiguration redisConfiguration = RedisCachingSectionHandler.GetConfig();IRedisCacheConnectionPoolManager connectionPoolManager = new RedisCacheConnectionPoolManager(redisConfiguration);IRedisCacheClient redisClient = new RedisCacheClient(connectionPoolManager, serializer, redisConfiguration);//使用传进来的来 Key获取Redis缓存的x25519 DictionaryDictionary<string, string> eccKey = redisClient.GetDbFromConfiguration().Get<Dictionary<string, string>>(key);if (eccKey == null){return;}//移除redis中x25519
                redisClient.GetDbFromConfiguration().Remove(key);//解密得到前端的login对象LoginViewModel loginUserView = JsonConvert.DeserializeObject<LoginViewModel>(DecryptString(loginUser, eccKey["ShareKey"]));//业务逻辑// ...return Json(new { Result = true });}catch (Exception ex){logError.Error(ex);　　　　　　　　　 return ;}}