时间戳

首页 > 解决方案 > 使用给出错误“ValueError：加密/解密失败”的加密包解密数据。

python-3.x - 使用给出错误“ValueError：加密/解密失败”的加密包解密数据。

问题描述

import base64
import os.path
from shutil import copyfile
from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import serialization, hashes
from cryptography.hazmat.primitives.asymmetric import padding, rsa
from cryptography.hazmat.backends.openssl.rsa import _RSAPublicKey, _RSAPrivateKey
from asym_crypto_yaml import (decrypt_value, encrypt_value, Encrypted,
load_private_key_from_file, load_public_key_from_file,
generate_new_private_key, generate_new_public_key,
load, dump, NUMBER_OF_BYTES_PER_ENCRYPTED_CHUNK, KEY_CHUNK_SIZE,
SUPPORTED_KEY_SIZES, generate_private_key_to_file, generate_private_key_to_file, generate_public_key_to_file,
encrypt_value_and_print ,add_secret_to_yaml_file, decrypt_yaml_file_and_write_encrypted_file_to_disk,
reencrypt_secrets_and_write_to_yaml_file)
from functools import reduce

def test_add_secret_to_yaml_file():
    private_key_output_filename = "/home/asy/private_key.private"
    public_key_output_filename = "/home/asy/public_key.public"
    private_key = generate_private_key_to_file(private_key_output_filename)
    public_key = generate_public_key_to_file(private_key_output_filename, public_key_output_filename)

    yaml_file_fixture = "/home/asy/saml.yml"
    yaml_file_to_append_to = "/home/asy/saml_du.yml"
    test_key_to_encrypt = ['FACEBOOK_APP_ID', 'FACEBOOK_APP_SECRET', 'AWS_S3_BUCKET', 'SECRET_TOKEN', 'TWITTER_CONSUMER_KEY', 'TWITTER_CONSUMER_SECRET',
    'TWITTER_OAUTH_TOKEN', 'TWITTER_OAUTH_TOKEN_SECRET', 'LINKEDIN_API_KEY', 'LINKEDIN_SECRET_KEY']
    print ("################################ENCRYPT YAML########################################")
    before_dict = None
    with open(yaml_file_to_append_to, "r") as f:
        before_dict = load(f)
    #  Encrypt data in yml file
    for test_key in test_key_to_encrypt:
        print ('Encrypted key is:', test_key)
        print ('Encrypted value is:', before_dict[test_key])
        add_secret_to_yaml_file(test_key, before_dict[test_key], public_key_output_filename, yaml_file_to_append_to)

    print ("################################DECRYPT YAML########################################")
    before_dict = None
    with open(yaml_file_to_append_to, "r") as f:
        before_dict = load(f)
    # Decrypt data from yml file (Using same function)
    for test_key_value in test_key_to_encrypt:
        print ('key is', before_dict[test_key_value])
        test_encrypted_key_value = decrypt_value(before_dict[test_key_value], private_key)
        print ("decrypt data", test_encrypted_key_value)
    # 

def decrypt_data():
    private_key_output_filename = "/home/asy/private_key.private"
    public_key_output_filename = "/home/asy/public_key.public"
    private_key = generate_private_key_to_file(private_key_output_filename)
    public_key = generate_public_key_to_file(private_key_output_filename, public_key_output_filename)

    yaml_file_to_append_to = "/home/asy/saml_du.yml"
    test_key_to_encrypt = ['FACEBOOK_APP_ID', 'FACEBOOK_APP_SECRET', 'AWS_S3_BUCKET', 'SECRET_TOKEN', 'TWITTER_CONSUMER_KEY', 'TWITTER_CONSUMER_SECRET',
    'TWITTER_OAUTH_TOKEN', 'TWITTER_OAUTH_TOKEN_SECRET', 'LINKEDIN_API_KEY', 'LINKEDIN_SECRET_KEY']
    print ("################################DECRYPT YAML########################################")
    before_dict = None
    with open(yaml_file_to_append_to, "r") as f:
        before_dict = load(f)

    for test_key_value in test_key_to_encrypt:
        print ('key is', test_key_value)
        print ('value is', before_dict[test_key_value])
        test_encrypted_key_value = decrypt_value(before_dict[test_key_value], private_key)
        print ("decrypt data", test_encrypted_key_value)

if __name__ == "__main__":
    test_add_secret_to_yaml_file()
    # decrypt_data()

示例 yml 文件：

SECRET_TOKEN:            "d4e5783de1c74c7a4e3a27578df6gdgf6g786g8df7g6g87d6fgb709"
FACEBOOK_APP_ID:         "35864341"
FACEBOOK_APP_SECRET:     "759a1e7sd7fvyfsd473"
TWITTER_CONSUMER_KEY:    "1UrRKJDF8SD7FSDF3S"
TWITTER_CONSUMER_SECRET: "5W7TE8KJJk787bnG0s"
TWITTER_OAUTH_TOKEN:     "716397744-3rHXFkFkjKjkjK78PQ5"
TWITTER_OAUTH_TOKEN_SECRET: "DuDJKFSD89SDFD"
LINKEDIN_API_KEY:        "2vjkJKjk4"
LINKEDIN_SECRET_KEY:     "5KLSJDFsE"
GMAIL_USERNAME:          "username@gmail.com"
GMAIL_PASSWORD:          "PASSWORD"
AWS_ACCESS_KEY_ID:       "ASDKLSDJFIA"
AWS_SECRET_ACCESS_KEY:   "7ASDFJksdfjskdlf87sdfKb"
AWS_S3_BUCKET:           "bucket"

development:
  MAILER_HOST: "localhost:3000"

test:
  MAILER_HOST: "localhost:3000"

production:
  MAILER_HOST: "domain.com"

我正在使用“asym_crypto_yaml”yaml 包在 .yml 文件中写入加密值。我无法从不同的解密函数（decrypt_data()）中解密值。如果我第一次执行代码，上面的代码只会解密值。但是从第二次开始，它给出了“加密/解密错误”。

我的目标是从 yml 文件中解密数据。一点帮助将不胜感激。

标签： python-3.xcryptography

解决方案

触发错误是因为decrypt_data()用于解密的私钥不属于用于test_add_secret_to_yaml_file()执行加密的公钥。因此，使用此私钥解密失败。

该问题可以通过使用 中decrypt_data()生成的密钥对的私钥来解决test_add_secret_to_yaml_file()。为此，请删除 中的generate_private_key_to_file()andgenerate_public_key_to_file()调用（以生成和存储密钥对）decrypt_data()。load_private_key_from_file()可以从存储它的文件中加载所需的私钥test_add_secret_to_yaml_file()。

推荐阅读