我对https://www.pycryptodome.org/en/latest/src/examples.html#encrypt-data-with-rsa有问题。
它说我应该使用,但在例子中未定义。我是否应该使用?
from Crypto.PublicKey import RSA
from Crypto.Random import get_random_bytes
from Crypto.Cipher import AES, PKCS1_OAEP
file_out = open("encrypted_data.bin", "wb")
recipient_key = RSA.import_key(open("receiver.pem").read())
session_key = get_random_bytes(16)
# Encrypt the session key with the public RSA key
cipher_rsa = PKCS1_OAEP.new(recipient_key)
file_out.write(cipher_rsa.encrypt(session_key))
# Encrypt the data with the AES session key
cipher_aes = AES.new(session_key, AES.MODE_EAX)
ciphertext, tag = cipher_aes.encrypt_and_digest(data)
[ file_out.write(x) for x in (cipher.nonce, tag, ciphertext) ]
它说我应该使用,但在例子中未定义。我是否应该使用?
cipher = AES.new(key, AES.MODE_EAX)
cipher = AES.new(key, AES.MODE_EAX, nonce)
还是其他?我赌赢了 cipher = AES.new(key, AES.MODE_EAX, nonce)
,但我想确定它在密码学上是安全的。在这种情况下,cipher
所需的 key
应该是 recipient_key
,对吗?