"""
注意：
api簽名時：簽名用私鑰，驗簽用公鑰
數據加密時：加密用公鑰，解密用私鑰
密鑰和公鑰保存的圖片會在下邊展示出來
"""
import rsa
# 對api的簽名機制進行驗證：簽名用私鑰，驗簽用公鑰
class RsaEncrypt:
  def __init__(self, sign_str):
    self.sign_str = sign_str
  def rsa_generate(self):
    """
    生成私鑰和公鑰并保存
    :return:
    """
    # 生成公鑰和私鑰
    pubkey, privkey = rsa.newkeys(1024)
    pub = pubkey.save_pkcs1()
    # 公鑰
    with open('public.pem', 'wb') as w_pub:
      w_pub.write(pub)
    # 私鑰
    pri = privkey.save_pkcs1()
    with open('private.pem', 'wb') as w_pri:
      w_pri.write(pri)
    return "保存成功"
  @classmethod
  def read_rsa(self):
    """
    讀取公鑰和私鑰
    :return:
    """
    with open('public.pem', 'rb') as publickfile:
      pub = publickfile.read()
      pubkey = rsa.PublicKey.load_pkcs1(pub)
    with open('private.pem', 'rb') as privatefile:
      priv = privatefile.read()
      # print(pub)
      privkey = rsa.PrivateKey.load_pkcs1(priv)
    return pubkey, privkey
  def str_sign(self):
    privkey = self.read_rsa()[1]
    # 先將要加密的數據轉成二進制
    str_encode = self.sign_str.encode()
    # 用私鑰進行加密，并設置加密算法
    signature = rsa.sign(str_encode, privkey, 'SHA-1') # 簽名加密算法可以更換比如：SHA-256
    # print(signature)
    return signature
  def sign_verify(self, signature):
    """
    驗證簽名是否正確，如果正確，則返回簽名算法,否則返回驗證失敗
    :param signature:
    :return:
    """
    pubkey = self.read_rsa()[0]
    try:
      agl = rsa.verify(self.sign_str.encode(), signature, pubkey)
      # print(type(agl))
      print(agl) # 返回加密算法代表驗簽成功
      return True
    except rsa.VerificationError:
      print("驗證失敗")
      return False

# 對數據進行加密:加密用公鑰，解密用私鑰
class DataEncrypt:
  def __init__(self, data_str):
    self.data_str = data_str
    self.secret_key = RsaEncrypt.read_rsa()# 調用RsaEncrypt類的讀取密鑰對方法
  def data_encrypt(self):
    """
    用公鑰對數據進行加密
    :return:
    """
    str_encrypt = rsa.encrypt(self.data_str.encode(), self.secret_key[0])
    print(str_encrypt) # 加密后看著像二進制，但有不太像，看不懂
    return str_encrypt
  def data_decrypt(self, encrypt):
    str = rsa.decrypt(encrypt, self.secret_key[1]).decode()
    print(str) # 返回加密前的數據
    return str
if __name__ == '__main__':
 # 驗證簽名機制
  sing_test = RsaEncrypt('dfad--fa/d.s$$$&{}()>