create.go

package ecdh

import (
    "errors"
    "crypto/rand"
    "crypto/x509"
    "encoding/pem"

    cryptobin_ecdh "github.com/deatil/go-cryptobin/ecdh"
    cryptobin_ecdh_key "github.com/deatil/go-cryptobin/ecdh/key"
    cryptobin_pkcs8 "github.com/deatil/go-cryptobin/pkcs8"
)

type (
    // 配置
    Opts       = cryptobin_pkcs8.Opts
    // PBKDF2 配置
    PBKDF2Opts = cryptobin_pkcs8.PBKDF2Opts
    // Scrypt 配置
    ScryptOpts = cryptobin_pkcs8.ScryptOpts
)

var (
    // 获取 Cipher 类型
    GetCipherFromName = cryptobin_pkcs8.GetCipherFromName
    // 获取 hash 类型
    GetHashFromName   = cryptobin_pkcs8.GetHashFromName
)

// 生成私钥 pem 数据
// 使用:
// obj := New().SetCurve("P256").GenerateKey()
// priKey := obj.CreatePrivateKey().ToKeyString()
func (this ECDH) CreatePrivateKey() ECDH {
    if this.privateKey == nil {
        err := errors.New("ecdh: privateKey error.")
        return this.AppendError(err)
    }

    privateKey, err := x509.MarshalPKCS8PrivateKey(this.privateKey)
    if err != nil {
        return this.AppendError(err)
    }

    privateBlock := &pem.Block{
        Type:  "PRIVATE KEY",
        Bytes: privateKey,
    }

    this.keyData = pem.EncodeToMemory(privateBlock)

    return this
}

// 生成 PKCS8 私钥带密码 pem 数据
// CreatePrivateKeyWithPassword("123", "AES256CBC", "SHA256")
func (this ECDH) CreatePrivateKeyWithPassword(password string, opts ...any) ECDH {
    if this.privateKey == nil {
        err := errors.New("ecdh: privateKey error.")
        return this.AppendError(err)
    }

    opt, err := cryptobin_pkcs8.ParseOpts(opts...)
    if err != nil {
        return this.AppendError(err)
    }

    // 生成私钥
    privateKey, err := x509.MarshalPKCS8PrivateKey(this.privateKey)
    if err != nil {
        return this.AppendError(err)
    }

    // 生成加密数据
    privateBlock, err := cryptobin_pkcs8.EncryptPEMBlock(
        rand.Reader,
        "ENCRYPTED PRIVATE KEY",
        privateKey,
        []byte(password),
        opt,
    )
    if err != nil {
        return this.AppendError(err)
    }

    this.keyData = pem.EncodeToMemory(privateBlock)

    return this
}

// 生成公钥 pem 数据
func (this ECDH) CreatePublicKey() ECDH {
    if this.publicKey == nil {
        err := errors.New("ecdh: publicKey error.")
        return this.AppendError(err)
    }

    publicKeyBytes, err := x509.MarshalPKIXPublicKey(this.publicKey)
    if err != nil {
        return this.AppendError(err)
    }

    publicBlock := &pem.Block{
        Type:  "PUBLIC KEY",
        Bytes: publicKeyBytes,
    }

    this.keyData = pem.EncodeToMemory(publicBlock)

    return this
}

// =======================

// 生成私钥 pem 数据, 库自使用的 asn1 格式
func (this ECDH) CreateECDHPrivateKey() ECDH {
    if this.privateKey == nil {
        err := errors.New("ecdh: privateKey error.")
        return this.AppendError(err)
    }

    priv, err := cryptobin_ecdh.FromPrivateKey(this.privateKey)
    if err != nil {
        return this.AppendError(err)
    }

    privateKey, err := cryptobin_ecdh_key.MarshalPrivateKey(priv)
    if err != nil {
        return this.AppendError(err)
    }

    privateBlock := &pem.Block{
        Type:  "PRIVATE KEY",
        Bytes: privateKey,
    }

    this.keyData = pem.EncodeToMemory(privateBlock)

    return this
}

// 生成 PKCS8 私钥带密码 pem 数据, 库自使用的 asn1 格式
func (this ECDH) CreateECDHPrivateKeyWithPassword(password string, opts ...any) ECDH {
    if this.privateKey == nil {
        err := errors.New("ecdh: privateKey error.")
        return this.AppendError(err)
    }

    opt, err := cryptobin_pkcs8.ParseOpts(opts...)
    if err != nil {
        return this.AppendError(err)
    }

    priv, err := cryptobin_ecdh.FromPrivateKey(this.privateKey)
    if err != nil {
        return this.AppendError(err)
    }

    // 生成私钥
    privateKey, err := cryptobin_ecdh_key.MarshalPrivateKey(priv)
    if err != nil {
        return this.AppendError(err)
    }

    // 生成加密数据
    privateBlock, err := cryptobin_pkcs8.EncryptPEMBlock(
        rand.Reader,
        "ENCRYPTED PRIVATE KEY",
        privateKey,
        []byte(password),
        opt,
    )
    if err != nil {
        return this.AppendError(err)
    }

    this.keyData = pem.EncodeToMemory(privateBlock)

    return this
}

// 生成公钥 pem 数据, 库自使用的 asn1 格式
func (this ECDH) CreateECDHPublicKey() ECDH {
    if this.publicKey == nil {
        err := errors.New("ecdh: publicKey error.")
        return this.AppendError(err)
    }

    pub, err := cryptobin_ecdh.FromPublicKey(this.publicKey)
    if err != nil {
        return this.AppendError(err)
    }

    publicKeyBytes, err := cryptobin_ecdh_key.MarshalPublicKey(pub)
    if err != nil {
        return this.AppendError(err)
    }

    publicBlock := &pem.Block{
        Type:  "PUBLIC KEY",
        Bytes: publicKeyBytes,
    }

    this.keyData = pem.EncodeToMemory(publicBlock)

    return this
}

// =======================

// 根据公钥和私钥生成对称密钥
func (this ECDH) CreateSecretKey() ECDH {
    if this.privateKey == nil {
        err := errors.New("ecdh: privateKey error.")
        return this.AppendError(err)
    }

    if this.publicKey == nil {
        err := errors.New("ecdh: publicKey error.")
        return this.AppendError(err)
    }

    secretKey, err := this.privateKey.ECDH(this.publicKey)
    if err != nil {
        return this.AppendError(err)
    }

    this.secretData = secretKey

    return this
}