AppStd/DigitalData.Core
Template
8
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

refactor(RSAFactory): Methode CreateEncryptedPrivateKeyPem hinzugefügt, um mit direkt benutzerdefinierten pbeParametern zu erstellen.

Browse Source 
- Umbenennung der Methode CreateRSAPrivateKeyPem in CreatePrivateKeyPem
This commit is contained in:
Developer 02 2024-12-13 15:45:09 +01:00
parent d013d3edfa
commit a9ebc406f3
3 changed files with 30 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
DigitalData.Core.Abstractions/Security/IRSAFactory.cs
View File

@ -4,14 +4,19 @@ namespace DigitalData.Core.Abstractions.Security
{ {
public interface IRSAFactory public interface IRSAFactory
{ {
string CreateRSAPrivateKeyPem(int? keySizeInBits = null); string CreatePrivateKeyPem(int? keySizeInBits = null);
string CreateEncryptedPrivateKeyPem( public string CreateEncryptedPrivateKeyPem(
int? keySizeInBits = null,
string? password = null,
PbeEncryptionAlgorithm? pbeEncryptionAlgorithm = null, PbeEncryptionAlgorithm? pbeEncryptionAlgorithm = null,
HashAlgorithmName? hashAlgorithmName = null, HashAlgorithmName? hashAlgorithmName = null,
int? iterationCount = null); int? iterationCount = null,
int? keySizeInBits = null,
string? password = null);
public string CreateEncryptedPrivateKeyPem(
PbeParameters pbeParameters,
int? keySizeInBits = null,
string? password = null);
} }
public interface IRSAFactory<TParams> : IRSAFactory { } public interface IRSAFactory<TParams> : IRSAFactory { }

5
DigitalData.Core.Security/Config/AsymCryptParams.cs
View File

@ -16,9 +16,8 @@ namespace DigitalData.Core.Security.Config
private string CreateFileName(params object[] objs) => string.Join(Separator, objs); private string CreateFileName(params object[] objs) => string.Join(Separator, objs);
private string CreatePem(bool isEncrypted) => isEncrypted private string CreatePem(bool isEncrypted) => isEncrypted
? Instance.RSAFactory.CreateEncryptedPrivateKeyPem(keySizeInBits: KeySizeInBits, password: Secrets.PBE_PASSWORD, ? Instance.RSAFactory.CreateEncryptedPrivateKeyPem(pbeParameters: PbeParameters, keySizeInBits: KeySizeInBits, password: Secrets.PBE_PASSWORD)
pbeEncryptionAlgorithm: PbeEncryptionAlgorithm, hashAlgorithmName: PbeHashAlgorithmName, iterationCount: PbeIterationCount) : Instance.RSAFactory.CreatePrivateKeyPem(keySizeInBits: KeySizeInBits);
: Instance.RSAFactory.CreateRSAPrivateKeyPem(keySizeInBits: KeySizeInBits);
public override void OnDeserialized() public override void OnDeserialized()
{ {

22
DigitalData.Core.Security/Cryptographer/RSAFactory.cs
View File

@ -11,15 +11,15 @@ namespace DigitalData.Core.Security.Cryptographer
public RSAFactory(IOptions<TRSAFactoryParams> options) => _params = options.Value; public RSAFactory(IOptions<TRSAFactoryParams> options) => _params = options.Value;
public string CreateRSAPrivateKeyPem(int? keySizeInBits = null) public string CreatePrivateKeyPem(int? keySizeInBits = null)
=> RSA.Create(keySizeInBits ?? _params.KeySizeInBits).ExportRSAPrivateKeyPem(); => RSA.Create(keySizeInBits ?? _params.KeySizeInBits).ExportRSAPrivateKeyPem();
public string CreateEncryptedPrivateKeyPem( public string CreateEncryptedPrivateKeyPem(
int? keySizeInBits = null,
string? password = null,
PbeEncryptionAlgorithm? pbeEncryptionAlgorithm = null, PbeEncryptionAlgorithm? pbeEncryptionAlgorithm = null,
HashAlgorithmName? hashAlgorithmName = null, HashAlgorithmName? hashAlgorithmName = null,
int? iterationCount = null) int? iterationCount = null,
int? keySizeInBits = null,
string? password = null)
{ {
password ??= _params.PbePassword; password ??= _params.PbePassword;
@ -36,5 +36,19 @@ namespace DigitalData.Core.Security.Cryptographer
return new string(pemChars); return new string(pemChars);
} }
public string CreateEncryptedPrivateKeyPem(
PbeParameters pbeParameters,
int? keySizeInBits = null,
string? password = null)
{
password ??= _params.PbePassword;
var encryptedPrivateKey = RSA.Create(keySizeInBits ?? _params.KeySizeInBits).ExportEncryptedPkcs8PrivateKey(password.AsSpan(), pbeParameters);
var pemChars = PemEncoding.Write(_params.EncryptedPrivateKeyPemLabel, encryptedPrivateKey);
return new string(pemChars);
}
} }
} }