如何将公钥存储在机器级别的RSA密钥容器中 [英] How to store a public key in a machine-level RSA key container

问题描述

在仅存储公钥/私钥对的公钥时，使用机器级RSA密钥容器时出现问题。

I'm having a problem using a machine level RSA key container when storing only the public key of a public/private key pair.

以下代码创建一个公共/私有对，并从该对提取公钥。该对和公钥存储在单独的密钥容器中。

The following code creates a public/private pair and extracts the public key from that pair. The pair and the public key are stored in separate key containers. The keys are then obtained from those key containers at which point they should be the same as the keys going into the containers.

代码的工作原理是为 CspParameters.Flags 指定了CspProviderFlags.UseDefaultKeyContainer （即从 PublicKey 容器读回的密钥是相同的），但是当 CspParameters.Flags 指定< cspProviderFlags.UseMachineKeyStore 时，从 PublicKey 是不同的。

The code works when CspProviderFlags.UseDefaultKeyContainer is specified for CspParameters.Flags (i.e. the key read back out from the PublicKey container is the same), but when CspProviderFlags.UseMachineKeyStore is specified for CspParameters.Flags the key read back from PublicKey is different.

为什么行为不同，我需要做什么不同的从机器级别的RSA密钥容器检索公钥？ p>

Why is the behaviour different, and what do I need to do differently to retrieve the public key from a machine-level RSA key container?

var publicPrivateRsa = new RSACryptoServiceProvider(new CspParameters()
{
    KeyContainerName = "PublicPrivateKey",
    Flags = CspProviderFlags.UseMachineKeyStore
    //Flags = CspProviderFlags.UseDefaultKeyContainer
}
    )
{
    PersistKeyInCsp = true,

};

var publicRsa = new RSACryptoServiceProvider(new CspParameters()
{
    KeyContainerName = "PublicKey",
    Flags = CspProviderFlags.UseMachineKeyStore
    //Flags = CspProviderFlags.UseDefaultKeyContainer
}
    )
{
    PersistKeyInCsp = true
};


//Export the key.
publicRsa.ImportParameters(publicPrivateRsa.ExportParameters(false));


Console.WriteLine(publicRsa.ToXmlString(false));
Console.WriteLine(publicPrivateRsa.ToXmlString(false));

//Dispose those two CSPs.
using (publicRsa)
{
    publicRsa.Clear();
}
using (publicPrivateRsa)
{
    publicRsa.Clear();
}

publicPrivateRsa = new RSACryptoServiceProvider(new CspParameters()
{
    KeyContainerName = "PublicPrivateKey",
    Flags = CspProviderFlags.UseMachineKeyStore
    //Flags = CspProviderFlags.UseDefaultKeyContainer
}
    );


publicRsa = new RSACryptoServiceProvider(new CspParameters()
{
    KeyContainerName = "PublicKey",
    Flags = CspProviderFlags.UseMachineKeyStore
    //Flags = CspProviderFlags.UseDefaultKeyContainer
}
    );

Console.WriteLine(publicRsa.ToXmlString(false));
Console.WriteLine(publicPrivateRsa.ToXmlString(false));


using (publicRsa)
{
    publicRsa.Clear();
}
using (publicPrivateRsa)
{
    publicRsa.Clear();
}

推荐答案

不是为了这个目的（这是从如何：存储不对称密钥在一个密钥容器从.NET Framework开发人员指南，并通过在MSDN上的disccusion ）。

It seems that key containers are not intended for this purpose (this is implied by "How to: Store Asymmetric Keys in a Key Container" from the .NET Framework Developer's Guide, and confirmed by a disccusion on MSDN).

需要使用其他机制，例如将密钥存储在XML文件中，以实现此目标。

Other mechanisms, such as storing the key in an XML file, need to be used to achieve this goal.

这篇关于如何将公钥存储在机器级别的RSA密钥容器中的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！