98 lines
2.1 KiB
Go
98 lines
2.1 KiB
Go
package utils
|
||
|
||
import (
|
||
"crypto/aes"
|
||
"crypto/cipher"
|
||
"crypto/rand"
|
||
"crypto/sha256"
|
||
"encoding/base64"
|
||
"fmt"
|
||
"io"
|
||
|
||
"github.com/pkg/errors"
|
||
)
|
||
|
||
// 使用aes gcm加密信息
|
||
func GcmEncrypt(plaintext []byte, key []byte) (ciphertext []byte, err error) {
|
||
block, err := aes.NewCipher(key[:])
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
gcm, err := cipher.NewGCM(block)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
nonce := make([]byte, gcm.NonceSize())
|
||
_, err = io.ReadFull(rand.Reader, nonce)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
return gcm.Seal(nonce, nonce, plaintext, nil), nil
|
||
}
|
||
|
||
// 使用aes gcm解密信息
|
||
func GcmDecrypt(ciphertext []byte, key []byte) (plaintext []byte, err error) {
|
||
block, err := aes.NewCipher(key[:])
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
gcm, err := cipher.NewGCM(block)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
if len(ciphertext) < gcm.NonceSize() {
|
||
return nil, errors.New("malformed ciphertext")
|
||
}
|
||
|
||
return gcm.Open(nil,
|
||
ciphertext[:gcm.NonceSize()],
|
||
ciphertext[gcm.NonceSize():],
|
||
nil,
|
||
)
|
||
}
|
||
|
||
// 对字符串进行sha256加密，取前16个字符
|
||
func encryptKey(s string) []byte {
|
||
h := sha256.New()
|
||
h.Write([]byte(s))
|
||
bs := fmt.Sprintf("%x", h.Sum(nil))
|
||
return []byte(bs)[:16]
|
||
}
|
||
|
||
func Encrypt(src []byte, mac string) (crypted []byte, err error) {
|
||
return GcmEncrypt(src, encryptKey(mac))
|
||
}
|
||
|
||
func Decrypt(crypted []byte, mac string) (origData []byte, err error) {
|
||
return GcmDecrypt(crypted, encryptKey(mac))
|
||
}
|
||
|
||
// EncryptAuthPassword 账号密码加密
|
||
func EncryptAuthPassword(rawPassword string, saltKey string) (string, error) {
|
||
bytes := []byte(rawPassword)
|
||
encryptPassword, err := Encrypt(bytes, saltKey)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
afterPassword := base64.StdEncoding.EncodeToString(encryptPassword)
|
||
return afterPassword, nil
|
||
}
|
||
|
||
// DecryptAuthPassword 账号密码解密
|
||
func DecryptAuthPassword(encryptPassword string, saltKey string) (string, error) {
|
||
bytesPassword, err := base64.StdEncoding.DecodeString(encryptPassword)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
bytesPassword, err = Decrypt(bytesPassword, saltKey)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
return string(bytesPassword), nil
|
||
}
|