我正在尝试使用 BouncyCastle 使用 OpenPGP 加密字符串（不是文件）。我使用 GPG4win (Kleopatra) 生成了一个公钥/私钥对进行测试。我的代码有效，并输出了加密文件，但是我无法使用 Kleopatra 再次解密该文件。我收到一条消息：“无法确定这是 OpenPGP 还是 S/MIME 签名 - 也许它根本就不是签名？”。
这是我用来加密文件的代码：
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.IO;
using Org.BouncyCastle;
using Org.BouncyCastle.OpenSsl;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Engines;
using Org.BouncyCastle.Security;
using Org.BouncyCastle.Bcpg;
using Org.BouncyCastle.Bcpg.OpenPgp;
namespace RXNet
{
public static class Encrypter //Inspired by http://blogs.microsoft.co.il/blogs/kim/archive/2009/01/23/pgp-zip-encrypted-files-with-c.aspx
{
private const int BUFFER_SIZE = 1 << 16;
public static string EncryptPackAndBase64(string strdata, string keyString)
{
if (strdata.Length == 0)
throw new ArgumentException("A blank string was provided.");
//Extract the key from PGP format
PgpPublicKey enckey = readPublicKeyFromString(keyString);
Stream outputStream = new MemoryStream();
MemoryStream dataStream = new MemoryStream(Encoding.Unicode.GetBytes(strdata));
using (Stream encryptedOut = ChainEncryptedOut(outputStream, enckey))
using (Stream compressedOut = ChainCompressedOut(encryptedOut))
{
//PgpSignatureGenerator signatureGenerator = InitSignatureGenerator(compressedOut);
using (Stream literalOut = ChainLiteralOut(compressedOut, dataStream.Length))
{
WriteOutput(literalOut, dataStream);
}
return System.Convert.ToBase64String(((MemoryStream)outputStream).ToArray());
}
}
private static byte[] ReadFully(Stream input)
{
using (MemoryStream ms = new MemoryStream())
{
input.CopyTo(ms);
return ms.ToArray();
}
}
private static PgpPublicKey readPublicKeyFromString(string base64str)
{
byte[] key = System.Convert.FromBase64String(base64str);
using (Stream keyIn = new MemoryStream(key))
using (Stream inputStream = PgpUtilities.GetDecoderStream(keyIn))
{
PgpPublicKeyRingBundle publicKeyRingBundle = new PgpPublicKeyRingBundle(inputStream);
PgpPublicKey foundKey = getFirstPublicKey(publicKeyRingBundle);
if (foundKey != null)
return foundKey;
}
throw new ArgumentException("No encryption key found in public key ring.");
}
private static PgpPublicKey getFirstPublicKey(PgpPublicKeyRingBundle publicKeyRingBundle)
{
foreach (PgpPublicKeyRing kRing in publicKeyRingBundle.GetKeyRings())
{
PgpPublicKey key = kRing.GetPublicKeys()
.Cast<PgpPublicKey>()
.Where(k => k.IsEncryptionKey)
.FirstOrDefault();
if (key != null)
return key;
}
return null;
}
private static Stream ChainCompressedOut(Stream encryptedOut)
{
PgpCompressedDataGenerator compressedDataGenerator =
new PgpCompressedDataGenerator(CompressionAlgorithmTag.Zip);
return compressedDataGenerator.Open(encryptedOut);
}
private static Stream ChainEncryptedOut(Stream outputStream, PgpPublicKey key)
{
PgpEncryptedDataGenerator encryptedDataGenerator;
encryptedDataGenerator =
new PgpEncryptedDataGenerator(SymmetricKeyAlgorithmTag.Cast5, new SecureRandom());
encryptedDataGenerator.AddMethod(key);
return encryptedDataGenerator.Open(outputStream, new byte[BUFFER_SIZE]);
}
private static Stream ChainLiteralOut(Stream compressedOut, long length)
{
PgpLiteralDataGenerator pgpLiteralDataGenerator = new PgpLiteralDataGenerator();
return pgpLiteralDataGenerator.Open(compressedOut, PgpLiteralData.Binary, PgpLiteralData.Console, length, DateTime.Now);
}
private static void WriteOutput(Stream literalOut, Stream inputStream)
{
int length = 0;
byte[] buf = new byte[BUFFER_SIZE];
while ((length = inputStream.Read(buf, 0, buf.Length)) > 0)
{
literalOut.Write(buf, 0, length);
}
}
}
}
然后我将其称为如下：
string encc = Encrypter.EncryptPackAndBase64("Test 123 123 123", @"mQENBFEznzsBCADIg9CTEJygWls+b+pGqFcD9rx8XjGfo9l513Av0GpDKuCEaP+Dq4A1wox3RcK/
GgPJFUR2uKOTjOR9DLOoUewOhbej4jD/k1I3Hy6uybICqy6Og2lnntErNT06qwRZZyTvgcWbIHzv
W3+RxursLPD6fHC1pf2FuiMTqM0Q11Y3CRn7auLu4EXUjYzNCSYUZNcPpAlh+GOmIuILUsZDpgks
qnEh3Bhzv+nhL8lgwUfmnGfUBjTTuVqqymoAIFZx1eJBBZiDdrMBX4uAxSjk6YI2fGcscvUOapyk
52FG58q8mAlxX+Ys8F60mm2A3kcMerkJQl5rQ5GTPGarTJ+Xn2oLABEBAAG0Ik1hdHQgSmFkY3ph
ayA8bWF0dEB3cGFuZGJhY29uLmNvbT6JATgEEwECACIFAlEznzsCGw8GCwkIBwMCBhUIAgkKCwQW
AgMBAh4BAheAAAoJEMMjybDZ/OUoT6sH/iw46MEWsc1A8447OUQ/7dqZpBrVXQZUzMkf7V/v/9bP
A0Zh5VTcvwRGBawOZGfML1uMGEuiVOS0y1zy7YAWNs4qUkmCIWg4CBwWRpGFu2aBMK70rsRRoNFO
GHYVVFwB7cS5qFZ2JUzI+SJb6BszV35TEeL1U/vkANRq3WSgDMCaHtWQbefVZ/3d4RYvBKujrASX
KoAcIMQAMRR9if994gxRSs9m3BbB8snNB8QT40cGG5HeOiaYBsxFV8leOpd34NzOfVr5KxeB/qm9
BdU8HW76FD+XPMONCCwCxZSRljUxcGzMPKZPb0OKaRFRXHcqvkd4SCJ6n1OGOcbeLdaXqFw=");
FileStream st = new FileStream(@"D:\enc.bin", FileMode.Create, FileAccess.Write);
var b = Convert.FromBase64String(encc);
st.Write(b, 0, b.Length);
st.Close();
在完整的环境中，我将获取作为 Base64 字符串的键，这就是我这样传递它的原因。我尝试使用装甲版本的钥匙，但没有用；这是我手动进行 Base64 处理的二进制版本。