OpenSSL ENGINE机制详解与应用

OPENSSL
ENGINE
3星 · 超过75%的资源 需积分: 50 32 下载量 120 浏览量 更新于2024-09-13 收藏 44KB DOC 举报
"OPENSSL ENGINE机制的介绍及简单实现" OpenSSL ENGINE机制是OpenSSL库中的一个重要特性，它允许开发者将第三方的加密库或硬件加密设备集成到OpenSSL中，以便透明地使用这些设备进行加密操作。这一机制的引入始于OpenSSL的0.9.6版本，而在0.9.7版本中，它被集成到核心库中，成为OpenSSL的核心组成部分。 Engine机制的主要目的是提供一种方式，使得OpenSSL能够灵活地利用各种硬件加速器或非标准软件库来执行加密算法，而无需对应用程序进行大量修改。这种机制对于那些需要高性能加密运算或者依赖特定硬件加密设备的场景非常有用。Engine不仅使得OpenSSL能够适应更多的加密环境，而且也创建了一个通用的加密接口，可以与多种加密库和设备协同工作。 OpenSSL 0.9.7版本支持的Engine接口种类繁多，包括CryptoSwift、nCipher、Atalla、Nuron、UBSEC、Aep、SureWare以及IBM4758 CCA硬件加密设备。此外，还有支持PKCS#11接口和微软CryptoAPI的Engine接口正在被开发。然而，这些Engine接口的支持程度可能各不相同，可能只涵盖了部分公开密钥算法。 在实际使用中，Engine可以通过简要名称来引用，例如在编程或执行命令时。这些名称通常是大小写敏感的，并且通常建议使用小写字母。表1列出了OpenSSL 0.9.7版本支持的硬件设备及其对应的简要描述，这对于理解和配置Engine接口至关重要。 为了实现Engine机制，开发者需要编写少量的接口代码来桥接OpenSSL和第三方库或硬件设备。尽管这需要一定的密码学知识，但相对而言，工作量并不大。通过这种方式，Engine机制为OpenSSL提供了强大的可扩展性，使其能够适应不断变化的加密需求和新技术。 在实际应用中，Engine机制可以用于提高加密性能，特别是在处理大量数据加密和解密时，如在金融交易、数据存储和传输等领域。通过利用硬件加速，可以显著减少计算时间，提高系统效率。同时，对于那些必须遵循特定加密标准或法规的组织，Engine机制也为他们提供了合规的解决方案。 OpenSSL ENGINE机制是一种强大的工具，它增强了OpenSSL的灵活性和兼容性，使得开发者能够充分利用现有的加密资源，同时降低了集成新加密技术的复杂度。无论是软件加密库还是硬件加密设备，都能通过Engine机制无缝地融入OpenSSL的加密框架，为各种加密应用场景提供了广泛的支撑。

使用数字证书（usb key）进行PKCS#7数字签名

2013-08-02 上传
越来越多的应用需要我们使用USB接口数字证书进行PKCS#7数字签名。本文分别介绍了使用微软CryptoAPI方式和OpenSSL Engine方式进行数字签名。特别地，提出了OpenSSL Engine简化方式，这种方式更为灵活方便易行。

SSL和OPENSSL 资料整理

2018-11-02 上传
1. 说明了SSL协议的服务范围：1）认证用户和服务器 2）加密数据放置被窃取 3）保护数据完整性不被篡改； 2. 介绍了openssl：openssl是一个支持SSL认证的服务器，是一个开放源码的自由软件，支持多个操作系统；

openssl编程帮助文档

2010-04-19 上传
第一章 基础知识.....................................................................................................................10 1.1 对称算法.....................................................................................................................10 1.2 摘要算法.....................................................................................................................10 1.3 公钥算法.....................................................................................................................11 1.4 回调函数.....................................................................................................................13 第二章 openssl 简介................................................................................................................15 2.1 openssl 简介................................................................................................................15 2.2 openssl 安装................................................................................................................15 2.2.1 linux 下的安装................................................................................................15 2.2.2 windows 编译与安装.....................................................................................15 2.3 openssl 源代码............................................................................................................16 2.4 openssl 学习方法........................................................................................................18 第三章 堆栈.............................................................................................................................19 3.1 openssl 堆栈................................................................................................................19 3.2 数据结构.....................................................................................................................19 3.3 源码.............................................................................................................................19 3.4 定义用户自己的堆栈函数.........................................................................................20 3.5 编程示例.....................................................................................................................21 第四章 哈希表.........................................................................................................................23 4.1 哈希表.........................................................................................................................23 4.2 哈希表数据结构.........................................................................................................23 4.3 函数说明.....................................................................................................................24 4.4 编程示例.....................................................................................................................26 第五章 内存分配.....................................................................................................................29 5.1 openssl 内存分配........................................................................................................29 5.2 内存数据结构.............................................................................................................29 5.3 主要函数.....................................................................................................................30 5.4 编程示例.....................................................................................................................30 第六章 动态模块加载.............................................................................................................32 6.1 动态库加载.................................................................................................................32 6.2 DSO 概述....................................................................................................................32 6.3 数据结构.....................................................................................................................32 6.4 编程示例.....................................................................................................................33 第七章 抽象IO .......................................................................................................................36 7.1 openssl 抽象IO ..........................................................................................................36 7.2 数据结构.....................................................................................................................36 7.3 BIO 函数....................................................................................................................37 7.4 编程示例.....................................................................................................................38 7.4.1 mem bio...........................................................................................................38 7.4.2 file bio .............................................................................................................38 7.4.3 socket bio ........................................................................................................39 7.4.4 md BIO............................................................................................................41 7.4.5 cipher BIO.......................................................................................................41 7.4.6 ssl BIO.............................................................................................................42 5 7.4.7 其他示例.........................................................................................................44 第八章 配置文件.....................................................................................................................45 8.1 概述.............................................................................................................................45 8.2 openssl 配置文件读取................................................................................................45 8.3 主要函数.....................................................................................................................45 8.4 编程示例.....................................................................................................................46 第九章 随机数.........................................................................................................................48 9.1 随机数.........................................................................................................................48 9.2 openssl 随机数数据结构与源码................................................................................48 9.3 主要函数.....................................................................................................................49 9.4 编程示例.....................................................................................................................50 第十章 文本数据库.................................................................................................................52 10.1 概述.........................................................................................................................52 10.2 数据结构.................................................................................................................52 10.3 函数说明.................................................................................................................53 10.4 编程示例.................................................................................................................53 第十一章 大数.........................................................................................................................56 11.1 介绍.............................................................................................................................56 11.2 openssl 大数表示........................................................................................................56 11.3 大数函数.....................................................................................................................56 11.4 使用示例.....................................................................................................................59 第十二章 BASE64 编解码.....................................................................................................66 12.1 BASE64 编码介绍.....................................................................................................66 12.2 BASE64 编解码原理..................................................................................................66 12.3 主要函数.................................................................................................................67 12.4 编程示例.................................................................................................................67 第十三章 ASN1 库..................................................................................................................70 13.1 ASN1 简介..................................................................................................................70 13.2 DER 编码....................................................................................................................71 13.3 ASN1 基本类型示例..................................................................................................71 13.4 openssl 的ASN.1 库..................................................................................................74 13.5 用openssl 的ASN.1 库DER 编解码....................................................................75 13.6 Openssl 的ASN.1 宏..................................................................................................76 13.7 ASN1 常用函数..........................................................................................................77 13.8 属性证书编码...........................................................................................................90 第十四章 错误处理.................................................................................................................95 14.1 概述.........................................................................................................................95 14.2 数据结构.................................................................................................................95 14.3 主要函数.................................................................................................................97 14.4 编程示例.................................................................................................................99 第十五章 摘要与HMAC......................................................................................................102 15.1 概述.......................................................................................................................102 15.2 openssl 摘要实现......................................................................................................102 15.3 函数说明...............................................................................................................102 6 15.4 编程示例...............................................................................................................103 15.5 HMAC.......................................................................................................................104 第十六章 数据压缩...............................................................................................................106 16.1 简介.......................................................................................................................106 16.2 数据结构...............................................................................................................106 16.3 函数说明...............................................................................................................107 16.4 openssl 中压缩算法协商..........................................................................................107 16.5 编程示例...............................................................................................................108 第十七章 RSA.......................................................................................................................109 17.1 RSA 介绍...................................................................................................................109 17.2 openssl 的RSA 实现................................................................................................109 17.3 RSA 签名与验证过程..............................................................................................110 17.4 数据结构...............................................................................................................110 17.4.1 RSA_METHOD.................................................................................................110 17.4.2 RSA............................................................................................................... 111 17.5 主要函数...............................................................................................................112 17.6 编程示例.......................................................................................................................113 17.6.1 密钥生成............................................................................................................113 17.6.2 RSA 加解密运算..........................................................................................115 17.6.3 签名与验证........................................................................................................118 第十八章 DSA.......................................................................................................................121 18.1 DSA 简介..............................................................................................................121 18.2 openssl 的DSA 实现................................................................................................121 18.3 DSA 数据结构..........................................................................................................122 18.4 主要函数...............................................................................................................123 18.5 编程示例...............................................................................................................124 18.5.1 密钥生成............................................................................................................124 18.5.2 签名与验证........................................................................................................125 第十九章DH...............................................................................................................................128 19.1 DH 算法介绍............................................................................................................128 19.2 openssl 的DH 实现..................................................................................................128 19.3 数据结构.......................................................................................................................129 19.4 主要函数...............................................................................................................130 19.5 编程示例...............................................................................................................131 第二十章 椭圆曲线...............................................................................................................134 20.1 ECC 介绍..................................................................................................................134 20.2 openssl 的ECC 实现................................................................................................134 20.3 主要函数...............................................................................................................135 20.4 编程示例...............................................................................................................135 第二十一章 EVP...................................................................................................................139 21.1 EVP 简介......................................................................................................................139 21.2 数据结构......................................................................................................................139 21.2.1 EVP_PKEY...................................................................................................139 21.2.2 EVP_MD.......................................................................................................140 7 21.2.3 EVP_CIPHER...............................................................................................141 21.2.4 EVP_CIPHER_CTX.....................................................................................142 21.3 源码结构......................................................................................................................142 21.4 摘要函数......................................................................................................................143 21.5 对称加解密函数..........................................................................................................143 21.6 非对称函数..................................................................................................................144 21.7 BASE64 编解码函数................................................................................................145 21.8 其他函数.......................................................................................................................145 21.9 对称加密过程............................................................................................................147 21.10 编程示例...............................................................................................................148 第二十二章 PEM 格式.........................................................................................................155 22.1 PEM 概述.................................................................................................................155 22.2 openssl 的PEM 实现................................................................................................155 22.3 PEM 函数.................................................................................................................156 22.4 编程示例...............................................................................................................157 第二十三章 Engine ...............................................................................................................161 23.1 Engine 概述..............................................................................................................161 23.2 Engine 支持的原理..................................................................................................161 23.3 Engine 数据结构......................................................................................................161 23.4 openssl 的Engine 源码...........................................................................................162 23.5 Engine 函数..............................................................................................................163 23.6 实现Engine 示例.................................................................................................164 第二十四章 通用数据结构...................................................................................................178 24.1 通用数据结构...............................................................................................................178 24.2 X509_ALGOR..........................................................................................................178 24.3 X509_VAL................................................................................................................179 24.4 X509_SIG .................................................................................................................181 24.5 X509_NAME_ENTRY.............................................................................................182 24.6 X509_NAME............................................................................................................182 24.7 X509_EXTENSION .................................................................................................188 24.8 X509_ATTRIBUTE..................................................................................................194 24.9 GENERAL_NAME ..................................................................................................195 第二十五章 证书申请...........................................................................................................199 25.1 证书申请介绍.......................................................................................................199 25.2 数据结构...............................................................................................................199 25.3 主要函数...............................................................................................................200 25.4 编程示例...............................................................................................................202 25.4.1 生成证书请求文件............................................................................................202 25.4.2 解码证书请求文件.......................................................................................204 第二十六章 X509 数字证书.................................................................................................206 26.1 X509 数字证书.........................................................................................................206 26.2 opessl 实现................................................................................................................206 26.3 X509 数据结构.........................................................................................................206 26.4 X509_TRUST 与X509_CERT_AUX......................................................................209 8 26.5 X509_PURPOSE ......................................................................................................211 26.6 主要函数...............................................................................................................214 26.7 证书验证...............................................................................................................217 26.7.1 证书验证项........................................................................................................217 26.7.2 Openssl 中的证书验证.................................................................................217 第二十七章 OCSP.................................................................................................................218 27.1 概述.......................................................................................................................218 27.2 openssl 实现..............................................................................................................218 27.3 主要函数...............................................................................................................218 27.4 编程示例.......................................................................................................................223 第二十八章 CRL...................................................................................................................224 28.1 CRL 介绍..................................................................................................................224 28.2 数据结构...............................................................................................................224 28.3 CRL 函数..................................................................................................................225 28.4 编程示例...............................................................................................................226 第二十九章 PKCS7...............................................................................................................229 29.1 概述...............................................................................................................................229 29.2 数据结构...............................................................................................................229 29.3 函数.......................................................................................................................230 29.4 消息编解码.............................................................................................................230 29.4.1 data ..............................................................................................................231 29.4.2 signed data...................................................................................................231 29.4.3 enveloped ....................................................................................................232 29.4.4 signed_and_enveloped ................................................................................233 29.4.5 digest ...........................................................................................................234 29.4.6 encrypted.....................................................................................................234 29.4.7 读取PEM .....................................................................................................235 29.4.8 解码pkcs7 ....................................................................................................236 第三十章 PKCS12...............................................................................................................237 30.1 概述.......................................................................................................................237 30.2 openss 实现...............................................................................................................237 30.3 数据结构.......................................................................................................................237 30.4 函数...............................................................................................................................238 30.5 编程示例...............................................................................................................240 第三十一章 SSL 实现...........................................................................................................250 31.1 概述...............................................................................................................................250 31.2 openssl 实现..............................................................................................................250 31.3 建立SSL 测试环境..............................................................................................250 31.4 数据结构...............................................................................................................251 31.5 加密套件...............................................................................................................252 31.6 密钥信息...............................................................................................................253 31.7 SESSION ..................................................................................................................253 31.8 多线程支持...........................................................................................................254 31.9 编程示例...............................................................................................................254 9 31.10 函数.......................................................................................................................265 第三十二章 Openssl 命令.....................................................................................................268 32.1 概述...............................................................................................................................268 32.2 asn1parse...................................................................................................................268 32.3 dgst...........................................................................................................................270 32.4 gendh.........................................................................................................................271 32.5 passwd.......................................................................................................................271 32.6 rand ...........................................................................................................................272 32.7 genrsa ........................................................................................................................273 32.8 req .............................................................................................................................273 32.9 x509...........................................................................................................................276 32.10 version...................................................................................................................279 32.11 speed......................................................................................................................279 32.12 sess_id .................................................................................................................280 32.13 s_server ...............................................................................................................280 32.14 s_client ................................................................................................................282 32.15 rsa........................................................................................................................284 32.16 pkcs7 ...................................................................................................................285 32.17 dsaparam .............................................................................................................285 32.18 gendsa..................................................................................................................286 32.19 enc .......................................................................................................................287 32.20 ciphers .................................................................................................................288 32.21 CA.......................................................................................................................288 32.22 verify ...................................................................................................................292 32.23 rsatul....................................................................................................................293 32.24 crl ..........................................................................................................................294 32.25 crl2pkcs7 ...........................................................................................................295 32.26 errstr ..................................................................................................................296 32.27 ocsp .............................................................................................................................296 32.28 pkcs12 .................................................................................................................299 32.29 pkcs8 ...................................................................................................................301 32.30 s_time ..................................................................................................................302 32.31 dhparam 和dh.............................................................................................................303 32.32 ecparam.................................................................................................................305 32.33 ec .........................................................................................................................306 32.34 dsa .......................................................................................................................307 32.35 nseq .....................................................................................................................308 32.36 prime ...................................................................................................................308 32.37 smime ..................................................................................................................309

static void SetKeyLength(HcfAlgParaValue value, void *cipher) { CipherAttr *cipherAttr = (CipherAttr *)cipher; cipherAttr->keySize = value; switch (value) { case HCF_ALG_AES_128: case HCF_ALG_AES_192: case HCF_ALG_AES_256: cipherAttr->algo = HCF_ALG_AES; break; case HCF_ALG_3DES_192: cipherAttr->algo = HCF_ALG_DES; break; case HCF_OPENSSL_RSA_512: case HCF_OPENSSL_RSA_768: case HCF_OPENSSL_RSA_1024: case HCF_OPENSSL_RSA_2048: case HCF_OPENSSL_RSA_3072: case HCF_OPENSSL_RSA_4096: case HCF_OPENSSL_RSA_8192: cipherAttr->algo = HCF_ALG_RSA; break; default: LOGE("Invalid algo %u.", value); break; } }代码解析

2023-06-07 上传
在代码中，HCF_ALG_AES_128、HCF_ALG_AES_192、HCF_ALG_AES_256、HCF_ALG_3DES_192、HCF_OPENSSL_RSA_512、HCF_OPENSSL_RSA_768、HCF_OPENSSL_RSA_1024、HCF_OPENSSL_RSA_2048、HCF_OPENSSL_RSA_3072、HCF_OPENSSL_...

_lib.OpenSSL_add_all_algorithms() AttributeError: module 'lib' has no attribute 'OpenSSL_add_all_algorithms'

2023-03-22 上传
这个错误提示表明在 'lib' 模块中没有 'OpenSSL_add_all_algorithms' 属性。这可能是因为 'lib' 模块没有正确加载或者 'OpenSSL_add_all_algorithms' 不是 'lib' 模块的属性。你可以检查 'lib' 模块是否正确安装并且...

讲解 int32_t GetRealPrimes(int32_t primesFlag) { switch (primesFlag) { case HCF_OPENSSL_PRIMES_2: LOGI("set primes 2"); return PRIMES_2; case HCF_OPENSSL_PRIMES_3: LOGI("set primes 3"); return PRIMES_3; case HCF_OPENSSL_PRIMES_4: LOGI("set primes 4"); return PRIMES_4; case HCF_OPENSSL_PRIMES_5: LOGI("set primes 5"); return PRIMES_5; default: LOGI("set default primes 2"); return PRIMES_2; } }

2023-06-03 上传
具体来说，函数通过switch语句判断primesFlag的值，如果是HCF_OPENSSL_PRIMES_2，则返回一个名为PRIMES_2的32位整数质数；如果是HCF_OPENSSL_PRIMES_3，则返回一个名为PRIMES_3的32位整数质数；如果是HCF_OPENSSL_...

typedef enum { HCF_ALG_ECC_224 = 1, HCF_ALG_ECC_256, HCF_ALG_ECC_384, HCF_ALG_ECC_521, HCF_ALG_AES_128, HCF_ALG_AES_192, HCF_ALG_AES_256, HCF_ALG_3DES_192, HCF_ALG_MODE_NONE, HCF_ALG_MODE_ECB, HCF_ALG_MODE_CBC, HCF_ALG_MODE_CTR, HCF_ALG_MODE_OFB, HCF_ALG_MODE_CFB, HCF_ALG_MODE_CFB1, HCF_ALG_MODE_CFB8, HCF_ALG_MODE_CFB64, HCF_ALG_MODE_CFB128, HCF_ALG_MODE_CCM, HCF_ALG_MODE_GCM, HCF_ALG_NOPADDING, HCF_ALG_PADDING_PKCS5, HCF_ALG_PADDING_PKCS7, // rsa keysize HCF_OPENSSL_RSA_512, HCF_OPENSSL_RSA_768, HCF_OPENSSL_RSA_1024, HCF_OPENSSL_RSA_2048, HCF_OPENSSL_RSA_3072, HCF_OPENSSL_RSA_4096, HCF_OPENSSL_RSA_8192, // rsa cipher padding, HCF_OPENSSL_RSA_PKCS1_PADDING, HCF_OPENSSL_RSA_PKCS1_OAEP_PADDING, HCF_OPENSSL_RSA_PSS_PADDING, // digest HCF_OPENSSL_DIGEST_NONE, HCF_OPENSSL_DIGEST_MD5, HCF_OPENSSL_DIGEST_SHA1, HCF_OPENSSL_DIGEST_SHA224, HCF_OPENSSL_DIGEST_SHA256, HCF_OPENSSL_DIGEST_SHA384, HCF_OPENSSL_DIGEST_SHA512, // primes HCF_OPENSSL_PRIMES_2, HCF_OPENSSL_PRIMES_3, HCF_OPENSSL_PRIMES_4, HCF_OPENSSL_PRIMES_5, } HCF_ALG_PARA_VALUE; 结合上一个进行代码讲解

2023-06-03 上传
这些参数的命名方式使用了 `HCF_OPENSSL_` 前缀，表明它们是与 OpenSSL 库相关的。 通过使用这些常量，开发者可以更方便地在代码中使用这些参数值，而不需要直接使用数值。同时，这些常量的命名也更加清晰明了，...

openssl_public_encrypt

2023-05-30 上传
openssl_public_encrypt是一个OpenSSL库中的函数，用于使用公钥加密数据。它的语法如下： ```php int openssl_public_encrypt(string $data , string &$crypted , mixed $key [, int $padding = OPENSSL_PKCS1_...

代码讲解 const EVP_MD *GetOpensslDigestAlg(uint32_t alg) { switch (alg) { case HCF_OPENSSL_DIGEST_NONE: return NULL; case HCF_OPENSSL_DIGEST_MD5: LOGI("set EVP_md5"); return EVP_md5(); case HCF_OPENSSL_DIGEST_SHA1: LOGI("set EVP_sha1"); return EVP_sha1(); case HCF_OPENSSL_DIGEST_SHA224: LOGI("set EVP_sha224"); return EVP_sha224(); case HCF_OPENSSL_DIGEST_SHA256: LOGI("set EVP_sha256"); return EVP_sha256(); case HCF_OPENSSL_DIGEST_SHA384: LOGI("set EVP_sha384"); return EVP_sha384(); case HCF_OPENSSL_DIGEST_SHA512: LOGI("set EVP_sha512"); return EVP_sha512(); default: LOGE("Invalid digest num is %u.", alg); return NULL; } }

2023-06-03 上传
如果alg的值为HCF_OPENSSL_DIGEST_MD5，返回EVP_md5()函数的返回值，表示使用MD5算法；如果alg的值为HCF_OPENSSL_DIGEST_SHA1，返回EVP_sha1()函数的返回值，表示使用SHA-1算法；以此类推。 如果传入的alg参数不在...

php openssl_decrypt

2024-05-25 上传
- $options: 可选，可以包括 OPENSSL_RAW_DATA 和 OPENSSL_ZERO_PADDING。 - $iv: 可选，初始化向量。 - $tag: 可选，认证标记。 - $aad: 可选，额外的认证数据。 - $tag_length: 可选，认证标记长度。默认为16。 ...
xiaofuchen2004
  • 粉丝: 0
  • 资源: 1
上传资源 快速赚钱

最新资源