You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

关于openssl rsa -des3加密私钥的ASN.1格式及存储逻辑问询

RSA DES3加密私钥的ASN.1格式解析疑问

我正在为学校项目研究RSA密钥生成,使用-des3标志加密私钥时,对其ASN.1格式存在疑问。

原始RSA私钥

-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

DES3加密后的私钥

使用密码“test”执行命令:

openssl rsa -in key -des3 -out deskey

得到采用DES-EDE3-CBC加密的私钥:

-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

我的分析与疑问

我通过ASN.1解析工具分析了加密密钥的结构,目前的理解如下:

  • 加密密钥通过PBKDF2生成,盐值为89416996C4818A4F,迭代次数2048,伪随机函数为HMACSHA256
  • RSA私钥使用上述生成的密钥及初始化向量BE94C6C08F8C5693加密

我存在以下疑问:

  1. 我猜测十六进制字符串中从A8 32 76 2E B5 A0 37 CE开始到结尾的部分是加密后的私钥,这个判断是否正确?
  2. 解密后得到的内容是什么格式?是标准ASN.1私钥还是其他格式?
  3. 我上述关于PBKDF2和加密参数的理解是否正确?

内容的提问来源于stack exchange,提问作者Adrian

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.07.24 07:22:01