Swift实现ECDH共享密钥生成代码问题排查（附Python参考代码）

我已通过Python实现了将字节序列形式的ephemeralKey转换为椭圆曲线公钥，再用自身私钥生成共享密钥的功能，但编写的Swift代码存在问题，请求排查错误。

Python 实现代码 #

from cryptography.hazmat.primitives.asymmetric import ec

privateKey = ec.generate_private_key(ec.SECP256R1())
devicePublicKey = ec.EllipticCurvePublicKey.from_encoded_point(ec.SECP256R1(), ephemeralKey)
sharedKey = privateKey.exchange(ec.ECDH(), devicePublicKey)

问题Swift代码 #

let privateKeyParams: [String: Any] = [
    kSecAttrKeyClass as String: kSecAttrKeyClassPrivate,
    kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
    kSecAttrKeySizeInBits as String: 256
            ]
var error: Unmanaged<CFError>?
let privateKey = SecKeyCreateRandomKey(privateKeyParams as CFDictionary, &error)
let attributes: [String:Any] = 
        [
            kSecAttrKeyClass as String: kSecAttrKeyClassPublic,
            kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
            kSecAttrKeySizeInBits as String: 256,
        ]
let devicePublicKey = SecKeyCreateWithData(ephemeralKey as CFData, attributes as CFDictionary, nil)!
let sharedKey = ecdhSecretCalculation(publicKey: devicePublicKey, privateKey: privateKey) 

func ecdhSecretCalculation(publicKey: SecKey, privateKey: SecKey) -> Data? {
        var error: Unmanaged<CFError>?
        
        let keyPairAttr:[String : Any] = [
            kSecAttrKeySizeInBits as String: 256,
            SecKeyKeyExchangeParameter.requestedSize.rawValue as String: 32,
            kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
            kSecPrivateKeyAttrs as String: [kSecAttrIsPermanent as String: false],
            kSecPublicKeyAttrs as String:[kSecAttrIsPermanent as String: false]
        ]
        
        let algorithm:SecKeyAlgorithm = .ecdhKeyExchangeStandardX963SHA256
        
        let shared = SecKeyCopyKeyExchangeResult(privateKey, algorithm, publicKey, keyPairAttr as CFDictionary, &error) as Data?
        
        return shared
}

错误点排查与修正 #

1. 缺失曲线明确指定 #

Python代码明确使用SECP256R1曲线，但Swift代码在创建公私钥时未指定曲线ID，导致系统无法准确识别密钥对应的椭圆曲线。需添加kSecAttrKeyCurve参数，值为kSecP256KeyCurve（对应SECP256R1）。

2. ECDH交换参数冗余且算法不匹配 #

• ecdhSecretCalculation中的keyPairAttr包含了kSecPrivateKeyAttrs、kSecPublicKeyAttrs等不必要的参数，这些参数仅用于密钥生成，与密钥交换无关。
• 选择的.ecdhKeyExchangeStandardX963SHA256算法会对共享密钥做X9.63格式包装+SHA256哈希，与Python中纯ECDH交换的行为不一致，应替换为.ecdhKeyExchangeStandard。

3. 强制解包与错误处理缺失 #

代码中使用!强制解包，且未处理SecKeyCreateRandomKey、SecKeyCreateWithData的创建错误，极易导致崩溃。

修正后的Swift代码 #

// 生成SECP256R1私钥
let privateKeyParams: [String: Any] = [
    kSecAttrKeyClass as String: kSecAttrKeyClassPrivate,
    kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
    kSecAttrKeySizeInBits as String: 256,
    kSecAttrKeyCurve as String: kSecP256KeyCurve
]
var error: Unmanaged<CFError>?
guard let privateKey = SecKeyCreateRandomKey(privateKeyParams as CFDictionary, &error) else {
    print("私钥生成失败: \(error!.takeRetainedValue())")
    return
}

// 从字节序列创建SECP256R1公钥
let publicKeyAttrs: [String: Any] = [
    kSecAttrKeyClass as String: kSecAttrKeyClassPublic,
    kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
    kSecAttrKeySizeInBits as String: 256,
    kSecAttrKeyCurve as String: kSecP256KeyCurve
]
guard let devicePublicKey = SecKeyCreateWithData(ephemeralKey as CFData, publicKeyAttrs as CFDictionary, &error) else {
    print("公钥创建失败: \(error!.takeRetainedValue())")
    return
}

// 计算ECDH共享密钥
func ecdhSecretCalculation(publicKey: SecKey, privateKey: SecKey) -> Data? {
    var error: Unmanaged<CFError>?
    
    let exchangeAttrs: [String: Any] = [
        SecKeyKeyExchangeParameter.requestedSize.rawValue as String: 32
    ]
    
    guard let sharedData = SecKeyCopyKeyExchangeResult(
        privateKey,
        .ecdhKeyExchangeStandard,
        publicKey,
        exchangeAttrs as CFDictionary,
        &error
    ) as Data? else {
        print("共享密钥计算失败: \(error!.takeRetainedValue())")
        return nil
    }
    
    return sharedData
}

// 使用示例
if let sharedKey = ecdhSecretCalculation(publicKey: devicePublicKey, privateKey: privateKey) {
    print("生成的共享密钥: \(sharedKey.hexEncodedString())")
}

额外说明 #

确保ephemeralKey为未压缩格式的SECP256R1公钥字节序列（开头为0x04，后续64字节为x+y坐标），Swift的SecKeyCreateWithData也支持压缩格式（开头0x02/0x03），但需保证曲线参数匹配。

内容的提问来源于stack exchange，提问作者RawMean