React Native + Nodejs 使用RSA加密登录

想用rn做个RSA(非对称加密)登录

基本流程就是在服务端生成RSA后，将“公钥”发到客户端，然后客户端用“公钥”加密信息发送到服务端，服务务端用私钥解密。

过程不复杂，问题在于，nodejs和rn都准备用js做RSA加密，本来想用node-rsa做的，可是搞不懂它怎么设置公钥加密

于是直接做node-rsa的基础库http://www-cs-students.stanford.edu/~tjw/jsbn/，简单封装了下做了个demo

客户端：

'use strict';
const React = require('react-native');

var url="192.168.1.103:8082"

var RSAClient= require('./rsa-client');//客户端rsa加密
var _publicKey = new RSAClient();

//初始化“公钥”
fetch('http://'+url+'/RSA')
  .then((response) => response.json())
  .then(
    (ret) => {
      _publicKey.setPublic(ret.n, ret.e);
    }
  ).done();

//“公钥”加密，加密后的数据是hex编码比较长，所以转成base64
var encrypt=function(val){
  var hex2b64 = require('./base64').hex2b64;
  return hex2b64(_publicKey.encrypt(val));
};

var login=function(data,doSuccess,doError){
    fetch('http://'+url+'/login',
        {
          method: 'POST',
          headers: {
            'Accept': 'application/json',
            'Content-Type': 'application/json',
          },
          body: JSON.stringify(data)
        })
    .then(function(response) {return response.json();})
    .then(
      function(resData){
        doSuccess(resData);
      }
    )
    .done();
};

var {
    View,
    Text,
    TextInput,
    StyleSheet,
    TouchableOpacity
} = React;

var Index = React.createClass({
  getInitialState: function() {
    return {
      userName: "",
      passWord: "",
      encrypted:""
    };
  },
  render:function() {
    return (
      <View style={{borderColor:'#FA6778',
                    justifyContent: 'center',
                    flex:1,
                    }}>

        <View style={{flex:1}}>
          <Text>encrypted = {this.state.encrypted}</Text>

          <Text>decrypted = {this.state.decrypted}</Text>

        </View>

        <View style={{flex:1.2}}>
          <View style={styles.singleLine}>
            <TextInput autoCapitalize="none"
                style={{flex:1, fontSize: 16,padding: 6,borderWidth: 0,textDecorationLine :'none'}}
                placeholder="User Name"
                onChangeText={(text) =>
              { this.setState({userName:text});}}
              value={this.state.userName}
              />

          </View>
          <View style={styles.singleLine}>
            <TextInput placeholder="PassWord"
                password ={true}
                style={{flex:1, fontSize: 16,padding: 6,borderWidth: 0,textDecorationLine :'none'}}
                onChangeText={(text) =>
              { this.setState({passWord:text});}}
              value={this.state.passWord}
              />
          </View>

        <TouchableOpacity style={styles.btn}
                          onPress={
                          ()=>
          {
          let _pwd= encrypt(this.state.passWord);
          login(
            {userName:this.state.userName,passWord:_pwd},
            (retJson) => {
            if(1==retJson.loginState){
              this.setState({encrypted:retJson.encrypted,decrypted:retJson.decrypted});
            }
          });

          }
          }>
          <Text style={{
            flex: 1,
            fontSize: 18,
            alignSelf: 'center',
          }}>OK</Text>
        </TouchableOpacity>

        </View>

        <View style={{flex:1}}></View>

    </View>);
  }
});

var styles = StyleSheet.create({
btn: {
  alignSelf: 'stretch',
  alignItems: 'center',
  justifyContent: 'center',
  backgroundColor: '#3333FF',
  height: 40,
  borderRadius: 5,
  margin: 8,
  padding: 8,
},
singleLine: {
    height: 40,
    borderWidth: 1,
    borderRadius: 5,
    borderColor: 'lightblue',
    margin: 15,
  },
});
module.exports=Index;

服务端：

var Router= require('router'),
    http = require('http'),
    fs = require('fs'),
    path = require('path');
/*
module.id
module.filename
module.loaded
module.parent
module.children
console.log(module);
*/

var router = Router()

//**************RSA BEGIN************************
var RSAService = require('./RSAService');
var _key = new RSAService.rsaKey();
_key.generate(384,"10001");
/*
console.log("Generating RSA Key...");
console.log("_key e");
console.log(_key.e.toString(16));
console.log("_key n");
console.log(_key.n.toString(16));
console.log("_key d");
console.log(_key.d.toString(16));
console.log("_key p");
console.log(_key.p.toString(16));
console.log("_key q");
console.log(_key.q.toString(16));
console.log("_key dmp1");
console.log(_key.dmp1.toString(16));
console.log("_key dmq1");
console.log(_key.dmq1.toString(16));
console.log("_key coeff");
console.log(_key.coeff.toString(16));
*/

var hex2b64 = RSAService.hex2b64;
var b64tohex= RSAService.b64tohex;

var publicKey={e:_key.e.toString(16),n:_key.n.toString(16)};//公钥

router.get('/RSA',
function (req, res) {
  res.setHeader('Content-Type', 'application/json; charset=utf-8')

    res.write(JSON.stringify(publicKey));
    res.end();
});

router.post('/login', function (req, res) {
    var _cnt=0;
    var body = '';
    req.on('data',
      function (data) {
        body += data;
        _cnt++;
        // Too much POST data, kill the connection!
        // 1e6 === 1 * Math.pow(10, 6) === 1 * 1000000 ~~~ 1MB
        if (body.length > 1e6)
            request.connection.destroy();
    });

    req.on('end',
      function () {
        // var post = qs.parse(body);
        // use post['blah'], etc.
        var _state=1,_pwd='';
            var _pObj= JSON.parse(body);
            if(_pObj.passWord){
                try{
                  _pwd =_key.decrypt(b64tohex(_pObj.passWord));// key.decrypt(_pObj.passWord, 'utf8');
                  console.log('_pwd: ', _pwd);
                }catch(er){
                    console.log(er);
            _state=0;
            _pwd="ERROR";
                }

            res.write(JSON.stringify({loginState:_state,encrypted:_pObj.passWord,decrypted:_pwd}));
            }
          res.end();

            console.log('time='+Date.now());
    });
});

var server = http.createServer(
    function(req, res) {
    console.log(req.url);
  router(req, res,
        function(req,res){});
});

server.listen(
    8082, '::',
    function () {
        console.log('http server listening on port 8082   time='+Date.now() );
    });

客户端/服务端 RSA文件http://files.cnblogs.com/files/Grart/rsa.rar