dongpan9760 2017-06-22 21:13
浏览 76
已采纳

go crypto / ecdsa即使数据不同也可以验证为真

I have some data in form of map and I'm converting it to []byt and signing it and when verifying, it gives True value even when data used for verifying and signing are different. Here is what I did-

func main(){
    n, _ := ioutil.ReadFile("privatekey")

    private_key,_ := x509.ParseECPrivateKey(n)
    public_key := private_key.PublicKey


    data := map[string]string{
        "data1": "somestring",
        "data2": "12312",
        "data3": "34fs4",
    }

    json_data, _ := json.Marshal(data)

    data_2 := map[string]string{
        "data1": "somestring",
        "data2": "13312",
        "data4": "fh34",
    }



    json_data_2,_ := json.Marshal(data_2)

    r, s, _ := ecdsa.Sign(rand.Reader, private_key, json_data)

    verifystatus := ecdsa.Verify(&public_key, json_data_2, r, s)
    fmt.Println(verifystatus)
}

It is printing true. I tried changing the data and it seems that If json_data and json_data_2 have first 32 bytes common, then Verify returns true. Is there some limit over the length of byte array I can send to ecdsa.Verify()? If so how can I use it for larger data?

  • 写回答

1条回答 默认 最新

  • dongtaijue1578 2017-06-22 21:16
    关注

    The golang ecdsa.Sign and ecdsa.Verify functions are expected to take the output of a cryptographic hash function, rather than the message itself. So you are correct that only the first 32 bytes are being examined, in this case.

    To resolve the problem first hash the messages using a cryptographic hash function such as SHA-2

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 python天天向上类似问题,但没有清零
  • ¥30 3天&7天&&15天&销量如何统计同一行
  • ¥30 帮我写一段可以读取LD2450数据并计算距离的Arduino代码
  • ¥15 C#调用python代码(python带有库)
  • ¥15 矩阵加法的规则是两个矩阵中对应位置的数的绝对值进行加和
  • ¥15 活动选择题。最多可以参加几个项目?
  • ¥15 飞机曲面部件如机翼,壁板等具体的孔位模型
  • ¥15 vs2019中数据导出问题
  • ¥20 云服务Linux系统TCP-MSS值修改?
  • ¥20 关于#单片机#的问题:项目:使用模拟iic与ov2640通讯环境:F407问题:读取的ID号总是0xff,自己调了调发现在读从机数据时,SDA线上并未有信号变化(语言-c语言)