使用现有公钥的 RSA 加密

Question

我正在尝试使用以下方法加密 NSData：

- (NSData *) encryptWithData:(NSData *)content {

size_t plainLen = [content length];

void *plain = malloc(plainLen);
[content getBytes:plain
           length:plainLen];

size_t cipherLen = 256;
void *cipher = malloc(cipherLen);

OSStatus returnCode = SecKeyEncrypt("PUBLIC KEY HERE", kSecPaddingPKCS1, plain,
                                    plainLen, cipher, &cipherLen);

NSData *result = nil;
if (returnCode != 0) {
    NSLog(@"SecKeyEncrypt fail. Error Code: %ld", returnCode);
}
else {
    result = [NSData dataWithBytes:cipher
                            length:cipherLen];
}

free(plain);
free(cipher);

return result;

}

写在哪里 "PUBLIC KEY HERE" 我想加载一个我已经复制到我的捆绑包中的现有公钥。我该怎么做？

Answer 1

例如使用包含公钥的证书文件：

NSData *certificateData = [NSData dataWithContentsOfURL:certificateURL options:0 error:&error];
if (certificateData) {
    SecCertificateRef certificate = SecCertificateCreateWithData(NULL, (__bridge CFDataRef)(certificateData));
    // ...
    SecKeyRef publicKey;
    SecCertificateCopyPublicKey(certificate, &publicKey);
    // ...
}

从包中加载数据：

NSArray *certificateURLs = [[NSBundle mainBundle] URLsForResourcesWithExtension:@"cer" subdirectory:@"myCertificates"];
for (NSURL *certificateURL in certificateURLs) {
    NSData *certificateData = [NSData dataWithContentsOfURL:certificateURL options:0 error:&error];
    // ...
}