56 lines
1.5 KiB
Plaintext
56 lines
1.5 KiB
Plaintext
iv(integrity verification) toolkits完整性验证工具链说明
|
||
|
||
|
||
#使用帮助
|
||
[root@5gc iv]# ./iv
|
||
Usage:
|
||
./iv generate_private_key private_key_name
|
||
./iv generate_public_key private_key_name public_key_name
|
||
./iv signature private_key_name source_cms_file source_file
|
||
./iv verify_signature public_key_name source_cms_file source_file
|
||
|
||
|
||
#生成私钥
|
||
[root@5gc iv]# ./iv generate_private_key pri.key
|
||
Generating RSA private key, 2048 bit long modulus (2 primes)
|
||
..............+++++
|
||
...................+++++
|
||
e is 65537 (0x010001)
|
||
en pri.key_pri.key ==> pri.key_pri.key.aes_en
|
||
注意：这时候私钥已经被自动加密存储了
|
||
|
||
|
||
#通过私钥生成公钥
|
||
[root@5gc iv]# ./iv generate_public_key pri.key pub.key
|
||
writing RSA key
|
||
|
||
|
||
#签名
|
||
#source.bin 是某个二进制的文件，安装包、升级包或者任何其他文件
|
||
#source.cms 是生成的签名文件
|
||
[root@5gc iv]# ./iv signature pri.key source.cms source.bin
|
||
|
||
|
||
#验证通过
|
||
[root@5gc iv]# ./iv verify_signature pub.key source.cms source.bin
|
||
Verified OK
|
||
|
||
|
||
#修改原始文件后，验证不通过
|
||
[root@5gc iv]# vi source.bin
|
||
[root@5gc iv]# ./iv verify_signature pub.key source.cms source.bin
|
||
Verification Failure
|
||
|
||
|
||
#针对修改后的source.bin再次签名，验证通过
|
||
[root@5gc iv]# ./iv signature pri.key source.cms source.bin
|
||
[root@5gc iv]# ./iv verify_signature pub.key source.cms source.bin
|
||
Verified OK
|
||
|
||
|
||
#修改签名文件后，验证不通过
|
||
[root@5gc iv]# vi source.cms
|
||
[root@5gc iv]# ./iv verify_signature pub.key source.cms source.bin
|
||
Verification Failure
|
||
|