增加vendor

2022-05-24 13:49:25 +08:00
parent c3a24eeb3c
commit 65ece0418e
742 changed files with 509206 additions and 0 deletions
@@ -0,0 +1,43 @@
+package aes
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"errors"
+)
+
+// AES-CBC 加密数据
+func CBCEncrypt(originData, key, iv []byte) ([]byte, error) {
+	return cbcEncrypt(originData, key, iv)
+}
+
+// AES-CBC 解密数据
+func CBCDecrypt(secretData, key, iv []byte) ([]byte, error) {
+	return cbcDecrypt(secretData, key, iv)
+}
+
+func cbcEncrypt(originData, key, iv []byte) ([]byte, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	originData = PKCS7Padding(originData, block.BlockSize())
+	secretData := make([]byte, len(originData))
+	blockMode := cipher.NewCBCEncrypter(block, iv[:block.BlockSize()])
+	blockMode.CryptBlocks(secretData, originData)
+	return secretData, nil
+}
+
+func cbcDecrypt(secretData, key, iv []byte) (originByte []byte, err error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	originByte = make([]byte, len(secretData))
+	blockMode := cipher.NewCBCDecrypter(block, iv[:block.BlockSize()])
+	blockMode.CryptBlocks(originByte, secretData)
+	if len(originByte) == 0 {
+		return nil, errors.New("blockMode.CryptBlocks error")
+	}
+	return PKCS7UnPadding(originByte), nil
+}
@@ -0,0 +1,105 @@
+package aes
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"errors"
+)
+
+// AES-ECB 加密数据
+func ECBEncrypt(originData, key []byte) ([]byte, error) {
+	return ecbEncrypt(originData, key)
+}
+
+// AES-ECB 解密数据
+func ECBDecrypt(secretData, key []byte) ([]byte, error) {
+	return ecbDecrypt(secretData, key)
+}
+
+func ecbEncrypt(originData, key []byte) ([]byte, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	originData = PKCS7Padding(originData, block.BlockSize())
+	secretData := make([]byte, len(originData))
+	blockMode := newECBEncrypter(block)
+	blockMode.CryptBlocks(secretData, originData)
+	return secretData, nil
+}
+
+func ecbDecrypt(secretData, key []byte) (originByte []byte, err error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	blockMode := newECBDecrypter(block)
+	originByte = make([]byte, len(secretData))
+	blockMode.CryptBlocks(originByte, secretData)
+	if len(originByte) == 0 {
+		return nil, errors.New("blockMode.CryptBlocks error")
+	}
+	return PKCS7UnPadding(originByte), nil
+}
+
+// ===========
+
+type ecb struct {
+	b         cipher.Block
+	blockSize int
+}
+
+func newECB(b cipher.Block) *ecb {
+	return &ecb{
+		b:         b,
+		blockSize: b.BlockSize(),
+	}
+}
+
+type ecbEncrypter ecb
+
+// newECBEncrypter returns a BlockMode which encrypts in electronic code book
+// mode, using the given Block.
+func newECBEncrypter(b cipher.Block) cipher.BlockMode {
+	return (*ecbEncrypter)(newECB(b))
+}
+
+func (x *ecbEncrypter) BlockSize() int { return x.blockSize }
+
+func (x *ecbEncrypter) CryptBlocks(dst, src []byte) {
+	if len(src)%x.blockSize != 0 {
+		panic("crypto/cipher: input not full blocks")
+	}
+	if len(dst) < len(src) {
+		panic("crypto/cipher: output smaller than input")
+	}
+	for len(src) > 0 {
+		x.b.Encrypt(dst, src[:x.blockSize])
+		src = src[x.blockSize:]
+		dst = dst[x.blockSize:]
+	}
+}
+
+type ecbDecrypter ecb
+
+// newECBDecrypter returns a BlockMode which decrypts in electronic code book
+// mode, using the given Block.
+func newECBDecrypter(b cipher.Block) cipher.BlockMode {
+	return (*ecbDecrypter)(newECB(b))
+}
+
+func (x *ecbDecrypter) BlockSize() int { return x.blockSize }
+
+func (x *ecbDecrypter) CryptBlocks(dst, src []byte) {
+	if len(src)%x.blockSize != 0 {
+		panic("crypto/cipher: input not full blocks")
+	}
+	if len(dst) < len(src) {
+		panic("crypto/cipher: output smaller than input")
+	}
+	for len(src) > 0 {
+		x.b.Decrypt(dst, src[:x.blockSize])
+		src = src[x.blockSize:]
+		dst = dst[x.blockSize:]
+	}
+}
@@ -0,0 +1,49 @@
+package aes
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"fmt"
+
+	"github.com/go-pay/gopay/pkg/util"
+)
+
+// AES-GCM 加密数据
+func GCMEncrypt(originText, additional, key []byte) (nonce []byte, cipherText []byte, err error) {
+	return gcmEncrypt(originText, additional, key)
+}
+
+// AES-GCM 解密数据
+func GCMDecrypt(cipherText, nonce, additional, key []byte) ([]byte, error) {
+	return gcmDecrypt(cipherText, nonce, additional, key)
+}
+
+func gcmDecrypt(secretData, nonce, additional, key []byte) ([]byte, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return nil, fmt.Errorf("cipher.NewGCM(),error:%w", err)
+	}
+	originByte, err := gcm.Open(nil, nonce, secretData, additional)
+	if err != nil {
+		return nil, err
+	}
+	return originByte, nil
+}
+
+func gcmEncrypt(originText, additional, key []byte) ([]byte, []byte, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, nil, err
+	}
+	nonce := []byte(util.RandomString(12))
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return nil, nil, fmt.Errorf("cipher.NewGCM(),error:%w", err)
+	}
+	cipherBytes := gcm.Seal(nil, nonce, originText, additional)
+	return nonce, cipherBytes, nil
+}
@@ -0,0 +1,42 @@
+package aes
+
+import "bytes"
+
+// 加密填充模式（添加补全码） PKCS5Padding
+// 加密时，如果加密bytes的length不是blockSize的整数倍，需要在最后面添加填充byte
+func PKCS5Padding(ciphertext []byte, blockSize int) []byte {
+	paddingCount := blockSize - len(ciphertext)%blockSize //需要padding的数目
+	paddingBytes := []byte{byte(paddingCount)}
+	padtext := bytes.Repeat(paddingBytes, paddingCount) //生成填充的文本
+	return append(ciphertext, padtext...)
+}
+
+// 解密填充模式（去除补全码） PKCS5UnPadding
+// 解密时，需要在最后面去掉加密时添加的填充byte
+func PKCS5UnPadding(origData []byte) []byte {
+	length := len(origData)
+	unpadding := int(origData[length-1])   //找到Byte数组最后的填充byte
+	return origData[:(length - unpadding)] //只截取返回有效数字内的byte数组
+}
+
+// 加密填充模式（添加补全码） PKCS5Padding
+// 加密时，如果加密bytes的length不是blockSize的整数倍，需要在最后面添加填充byte
+func PKCS7Padding(ciphertext []byte, blockSize int) []byte {
+	paddingCount := blockSize - len(ciphertext)%blockSize //需要padding的数目
+	paddingBytes := []byte{byte(paddingCount)}
+	padtext := bytes.Repeat(paddingBytes, paddingCount) //生成填充的文本
+	return append(ciphertext, padtext...)
+}
+
+// 解密填充模式（去除补全码） PKCS7UnPadding
+// 解密时，需要在最后面去掉加密时添加的填充byte
+func PKCS7UnPadding(origData []byte) (bs []byte) {
+	length := len(origData)
+	unPaddingNumber := int(origData[length-1]) // 找到Byte数组最后的填充byte 数字
+	if unPaddingNumber <= 16 {
+		bs = origData[:(length - unPaddingNumber)] // 只截取返回有效数字内的byte数组
+	} else {
+		bs = origData
+	}
+	return
+}