secure_file_transfer/crypto.py

1.CryptoTest模块，该模块包括四个类，分别是是aestest、hashtest、rsatest和signverify。
 # CryptoTest.py
# 封装4个类
from Crypto.Cipher import AES
from binascii import b2a_hex, a2b_hex
import hashlib, base64
from Crypto.Cipher import PKCS1_OAEP
from Crypto.PublicKey import RSA
from Crypto.Signature import PKCS1_v1_5
from Crypto.Hash import SHA256


# AES算法类，实现AES的加密和解密
class aestest():
    def __init__(self, key):
        self.key = key
        self.mode = AES.MODE_CBC

    def encrypt(self, text):
        cryptor = AES.new(self.key, self.mode, self.key)
        text = text.encode("utf-8")
        length = 16
        count = len(text)
        add = length - (count % length)
        text = text + (b'\0' * add)
        self.ciphertext = cryptor.encrypt(text)
        entext = b2a_hex(self.ciphertext).decode("utf-8")
        # ciphertext.bin是生成的密文文件
        with open('ciphertext.bin', 'w') as f1:
            f1.write(entext)
        return entext

    def decrypt(self, text):
        cryptor = AES.new(self.key, self.mode, self.key)
        plain_text = cryptor.decrypt(a2b_hex(text))
        plaintext = plain_text.rstrip(b'\0').decode("utf-8")
        with open('plaintext.bin', 'w') as f2:
            f2.write(plaintext)
        return plaintext


# hash类，实现摘要值的计算
class hashtest():
    hash = hashlib.sha256()
    hash.update('admin'.encode('utf-8'))


# RSA类，实现密钥产生、加密和解密
class rsatest():
    privkey = []
    pubkey = []

    def generatekeys(self, file1, file2):
        key = RSA.generate(2048)
        encrypted_key = key.exportKey(pkcs=8)
        self.privkey = encrypted_key
        self.pubkey = key.publickey().exportKey()
        with open(file1, 'wb') as f:
            f.write(encrypted_key)
        with open(file2, 'wb') as f:
            f.write(key.publickey().exportKey())

    def encrypt(self, file, encryptedfile, pubk):
        with open(file, 'rb') as f:
            recipient_key = RSA.import_key(open(pubk).read())
            cipher_rsa = PKCS1_OAEP.new(recipient_key)
            c = cipher_rsa.encrypt(f.read())
            with open(encryptedfile, 'wb') as out_file:
                out_file.write(c)

    def decrypt(self, file, decryptedfile, prik):
        with open(file, 'rb') as f:
            private_key = RSA.import_key(open(prik).read())
            cipher_rsa = PKCS1_OAEP.new(private_key)
            m = cipher_rsa.decrypt(f.read())
            with open(decryptedfile, 'wb') as out_file:
                out_file.write(m)


# 签名验证类，实现RSA算法的签名和验证
class signverify:
    def sign(self, data, privkeyfile, sigfile):
        privkey = open(privkeyfile,\ "rb").read().decode("utf-8")
        key = RSA.importKey(privkey)
        data1 = open(data, "rb").read()
        h = SHA256.new(data1)
        signer = PKCS1_v1_5.new(key)
        signature = signer.sign(h)
        sig = base64.b64encode(signature)
        with open(sigfile, "wb") as f:
            f.write(sig)

    def verify(self, data, pubkeyfile, sigfile):
        publickey = open(pubkeyfile,\ "rb").read().decode("utf-8")
        key = RSA.importKey(publickey)
        data1 = open(data, "rb").read()
        h = SHA256.new(data1)
        verifier = PKCS1_v1_5.new(key)
        signature = open(sigfile, "rb").read().decode('utf-8')
        if verifier.verify(h, base64.b64decode(signature)):
            return True
        return False


2.发送方和接收方产生自己的公钥
  # RSAkey.py
# 发送方和接收分别执行产生自己的公私钥

import CryptoTest

if __name__ == '__main__':
    myrsa = CryptoTest.rsatest()
    file1 = input()  # 私钥
    file2 = input()  # 公钥
    myrsa.generatekeys(file1, file2)

3.发送方的操作封包过程
 # sender.py
# 发送发封包过程
import CryptoTest

# 发送方A的三步，发送方A已经获得接收方B的公钥Bpubkey.bin

# 第1步，用AES对称密钥加密明文文件
with open('aeskey.txt', 'rb') as f:  # aeskey.txt是对称密钥文件
    aessymkey = f.read()
Aaestest = CryptoTest.aestest(aessymkey)  # 实例化对象
print('请输入要加密的明文文件')
fname = input()  # 输入要加密的明文文件
with open(fname, 'r') as f:
    m = f.read()
    Aaestest.encrypt(m)  # AES的CBC模式加密
print("明文文件加密后的密文文件是ciphertext.bin")

# 第2步，用对方公钥Bpubkey.bin加密  对称密钥文件aeskey.txt
Arsa = CryptoTest.rsatest()
Arsa.encrypt('aeskey.txt', 'keyencrypted.bin', 'Bpubkey.bin')
print("对称密钥文件aeskey.txt加密后的文件是keyencrypted.bin")

# 第3步，生成明文的摘要值，用自己的私钥Aprikey.bin对摘要值签名
asign = CryptoTest.signverify()
asign.sign('data.txt', 'Aprikey.bin', 'digitalsign.bin')
print("A签名后的文件是digitalsign.bin")
print("将三个文件ciphertext.bin，keyencrypted.bin，\
     digitalsign.bin发送给接收方")