Bootstrap

javascript实现rsa算法(支持微信小程序)

概述:

本代码是本人从c代码上转换成的javascript代码,本人踏踏实实改了一个星期(累死我了),反反复复测试验证通过的。公钥计算快,私钥计算很慢。
在微信小程序上测试验证通过的,和我们常用的文件wxapp_rsa.js对比
1、代码少,才30k左右,而wxapp_rsa.js有400k;
2、功能少了对公钥文件解析(很麻烦,我基本上不会在前端用到),取代直接传密钥的各个部分(公钥指数模,私钥指数模);
3、功能少了base64处理,这功能简单很容易其他地方找到;

测试平台:

已经在如下环境中测试通过,其他平台(浏览器)应该也不会有问题:
1、nodejs中node.exe运行
2、微信小程序

功能代码:

function strRsaCtxParams() {
  this.keyn;
  this.keye;
  this.keyd;
  this.keybits;
};

function rsa_pkcs1_pad(orgdata, mode/*0:0填充,1:F填充, 2:不为0随机数填充*/, bits) {
	var outData = new Uint8Array(parseInt((bits + 7) / 8));
	var i = 0;
	var j = 0;
  
  for (i = 0; i < outData.length; i++) {
    outData[i] = 0;
  }
  //return outData;
  //mode = 1;
	if (orgdata.length > outData.length - 4) {
		throw Error('数据长度过长导致不能填充');
	}
	if (mode != 0 && mode != 1 && mode != 2) {
		throw Error('填充模式必须在0,1,2中选择');
	}
	outData[0] = 0x00;
	outData[1] = mode;
	
	for (i = 2; i < outData.length - orgdata.length - 1; i++) {
		if (mode == 0) {
			outData[i] = 0;
		} else if (mode == 1) {
			outData[i] = 0xFF;
		} else if (mode == 2) {
			outData[i] = parseInt(Math.random() * 256) & 0xff;
			if (outData[i] == 0) {
				/* 简单点,为0改为1 */
				outData[i] = 1;
			}
		}
  }
  //console.log("i1 = %d", i);
  outData[i] = 0;
  i++;
	j = 0;
	while (i < outData.length && j < orgdata.length) {
    outData[i] = orgdata[j];
    i++;
		j++;
  }
  //console.log("i2 = %d", i);
  
  return outData;
}

function rsa_set_key(keyNArray, keyEArray, keyDArray) {
  var rsaCtxParams = new strRsaCtxParams();
  //var i = 0;

  if (keyNArray == null || keyNArray.length <= 0) {
    throw Error('n的值不能为空');
  }

  rsaCtxParams.keybits = CalArrayBits(keyNArray, keyNArray.length);
  rsaCtxParams.keyn = NN_Decode(keyNArray, keyNArray.length);
  //console.log("rsaCtxParams.keyn len = %d index0=%d index1=%d index63=%d", rsaCtxParams.keyn.length, rsaCtxParams.keyn[0],  rsaCtxParams.keyn[1], rsaCtxParams.keyn[63]);
  if (keyEArray != null) {
    rsaCtxParams.keye = NN_Decode(keyEArray, keyEArray.length);
  }
  if (keyDArray != null) {
    rsaCtxParams.keyd = NN_Decode(keyDArray, keyDArray.length);
  }

  return rsaCtxParams;
}

function rsa_pub_cal(rsaCtxParams, lpIn) {
  var m = null;
  var c = null;
  var eDigits, nDigits;
  var outResult = null;
  var tmpInt = 0;

  if (rsaCtxParams.keyn == null || rsaCtxParams.keyn.length <= 0) {
    throw Error('n的值不能为空');
  }
  if (rsaCtxParams.keye == null || rsaCtxParams.keye.length <= 0) {
    throw Error('e的值不能为空');
  }

  m = NN_Decode(lpIn, lpIn.length);
  if (BignumCmp(m, rsaCtxParams.keyn) >= 0) {
    throw Error('输入数据不能大于等于n');
  }
  //console.log("m len = %d", m.length);
  //printfInts("m", m, m.length);
  nDigits = NN_Digits(rsaCtxParams.keyn, 0, rsaCtxParams.keyn.length);
  eDigits = NN_Digits(rsaCtxParams.keye, 0, rsaCtxParams.keye.length);
  //console.log("nDigits = %d  eDigits = %d", nDigits, eDigits);
  c = new Array(parseInt(((rsaCtxParams.keybits) + 31) / 32));
  init_u32array(c, c.length);
  NN_ModExp(c, m, rsaCtxParams.keye, eDigits, rsaCtxParams.keyn, nDigits, rsaCtxParams);

  tmpInt = parseInt((rsaCtxParams.keybits + 7) / 8);
  outResult = new Uint8Array(tmpInt);
  NN_Encode(outResult, 0, tmpInt, c, 0, nDigits);

  return outResult;
}

function rsa_pri_cal(rsaCtxParams, lpIn) {
  var m = null;
  var c = null;
  var nDigits = 0;
  var dDigits = 0;
  var outResult = null;
  var tmpInt = 0;

  if (rsaCtxParams.keyn == null || rsaCtxParams.keyn.length <= 0) {
    throw Error('n的值不能为空');
  }
  if (rsaCtxParams.keyd == null || rsaCtxParams.keyd.length <= 0) {
    throw Error('e的值不能为空');
  }

  c = NN_Decode(lpIn, lpIn.length);
  if (BignumCmp(c, rsaCtxParams.keyn) >= 0) {
    throw Error('输入数据不能大于等于n');
  }

  nDigits = NN_Digits(rsaCtxParams.keyn, 0, rsaCtxParams.keyn.length);
  dDigits = NN_Digits(rsaCtxParams.keyd, 0, rsaCtxParams.keyd.length);

  m = new Array(parseInt(((rsaCtxParams.keybits) + 31) / 32));
  //console.log("pro0");
  NN_ModExp(m, c, rsaCtxParams.keyd, dDigits, rsaCtxParams.keyn, nDigits, rsaCtxParams);
  //console.log("pro1");

  tmpInt = parseInt((rsaCtxParams.keybits + 7) / 8);
  outResult = new Uint8Array(tmpInt);
  NN_Encode(outResult, 0, tmpInt, m, 0, nDigits);

  return outResult;
}

function NN_Encode(a, aindex, len, b, bindex, digits) {
  var t;
  var j;
  var i, u;

  for (i = 0, j = len - 1; i < digits && j >= 0; i++) {
    t = b[i + bindex];
    for (u = 0; j >= 0 && u < 32; j--, u += 8) {
      a[j + aindex] = (t >>> u) & 0xffffffff;
    }
  }

  for (; j >= 0; j--) {
    a[j + aindex] = 0;
  }
}

function NN_ASSIGN_DIGIT(a, aindex, b, digits) {
  NN_AssignZero(a, aindex, digits);
  a[0] = b;
}

function DIGIT_2MSB(x) {
  //(unsigned int)(((x) >> (NN_DIGIT_BITS - 2)) & 3)
  return ((((x) >>> (32 - 2)) & 3) & 0xffffffff) >>> 0;
}

//var testI = 0;

function NN_ModExp(a, b, c, cDigits, d, dDigits, rsaCtxParams) {
  var uPowerLen = parseInt((rsaCtxParams.keybits + 31) / 32);
  var bPower = new Array(3 * uPowerLen);
  var t = new Array(uPowerLen);
  var i = 0, j = 0, s = 0;
  var ci = 0;
  var ciBits = 0;

  init_u32array(bPower, bPower.length);

  //for (i = 0; i < bPower.length; i++) {
  //	bPower[i] = 0;
  //}

  //console.log("dDigits = %d", dDigits);
  //printfInts("bPower", bPower, bPower.length);
  //printfInts("b", b, b.length);
  //throw Error("11");
  //console.log("pro2");
  NN_Assign(bPower, 0, b, 0, dDigits);
  //printfInts("bPower", bPower, bPower.length);
  //printfInts("b", b, b.length);
  //throw Error("223");
  //console.log("pro3");
  NN_ModMult(bPower, uPowerLen, bPower, 0, b, 0, d, 0, dDigits, rsaCtxParams);
  //console.log("pro4");
  NN_ModMult(bPower, uPowerLen * 2, bPower, uPowerLen, b, 0, d, 0, dDigits, rsaCtxParams);
  //NN_Assign(bPower, uPowerLen, b, 0, dDigits);
  //NN_Assign(bPower, uPowerLen * 2, b, 0, dDigits);
  //printfIntsIndex("bPower0", bPower, 0, uPowerLen);
  //printfIntsIndex("bPower1", bPower, uPowerLen, uPowerLen);
  //printfIntsIndex("bPower2", bPower, uPowerLen * 2, uPowerLen);
  //console.log("pro5");
  NN_ASSIGN_DIGIT(t, 0, 1, dDigits);
  //console.log("pro6");
  cDigits = NN_Digits(c, 0, cDigits);
  //console.log("pro7");
  for (i = cDigits - 1; i >= 0; i--) {
    //console.log("pro8");
    ci = c[i];
    ciBits = 32;
    if (i == (cDigits - 1)) {
      while (0 == DIGIT_2MSB(ci)) {
        //console.log("pro9");
        ci <<= 2;
        ci &= 0xffffffff;
        //ciBits -= 2;
        ciBits = bn_u32_minus(ciBits, 2);
      }
    }
    for (j = 0; j < ciBits; j += 2, ci = (ci << 2) & 0xffffffff) {
      //console.log("pro10");
      /* Compute t = t^4 * b^s mod d, where s = two MSB's of ci. */
      NN_ModMult(t, 0, t, 0, t, 0, d, 0, dDigits, rsaCtxParams);
      //console.log("pro11");
      NN_ModMult(t, 0, t, 0, t, 0, d, 0, dDigits, rsaCtxParams);
      //console.log("pro12");
      s = DIGIT_2MSB(ci);
      //console.log("pro13");
      if ((s) != 0) {
        //console.log("pro14");
        //testI++;
        //console.log("testI = %d s = %d dDigits = %d", testI, s, dDigits);
        /*if (testI >= 412) {
        	
        	printfInts("t", t, 129);
        	printfInts("d", d, 128);
        	printfIntsIndex("bPower0", bPower, 0, 128);
        	printfIntsIndex("bPower1", bPower, uPowerLen, 128);
        	printfIntsIndex("bPower2", bPower, uPowerLen * 2, 128);
        	exit(0);
        }*/
        NN_ModMult(t, 0, t, 0, bPower, (s - 1) * uPowerLen, d, 0, dDigits, rsaCtxParams);
        //console.log("pro15");
      }
    }
  }
  NN_Assign(a, 0, t, 0, dDigits);
  //printfInts("a", a, a.length);
  //printfInts("b", b, b.length);
  //printfInts("c", c, c.length);
  //printfInts("t", t, t.length);
}

function bn_u32_compare(uint1, uint2) {
  uint1 &= 0xffffffff;
  uint2 &= 0xffffffff;

  if ((uint1 & 0x80000000) == 0 && (uint2 & 0x80000000) == 0) {
    return uint1 > uint2 ? 1 : (uint1 == uint2 ? 0 : (-1));
  }
  if ((uint1 & 0x80000000) != 0 && (uint2 & 0x80000000) != 0) {
    uint1 &= 0x7fffffff;
    uint2 &= 0x7fffffff;
    return uint1 > uint2 ? 1 : (uint1 == uint2 ? 0 : (-1));
  }
  if ((uint1 & 0x80000000) != 0) {
    return 1;
  } else {
    return -1;
  }
}

function bn_u32_add(add1, add2) {
  var i = 0;
  var tmp = 0;
  var result = 0;

  for (i = 0; i < 4; i++) {
    tmp = ((add1 >>> (i * 8)) & 0xff) + ((add2 >>> (i * 8)) & 0xff) + tmp;
    result |= ((tmp & 0xff) << (i * 8));
    tmp = tmp >>> 8;
  }

  return result & 0xffffffff;
}

function bn_u32_minus(minuend, subtractor) {
  var a = (minuend & 0xffffffff) >>> 0;
  var b = (subtractor & 0xffffffff) >>> 0;

  return (a - b) & 0xffffffff;
}

function NN_ModMult(a, aindex, b, bindex, c, cindex, d, dindex, digits, rsaCtxParams) {
  var t = new Array(2 * parseInt((rsaCtxParams.keybits + 31) / 32));

  init_u32array(t, t.length);

  //console.log("pp0");
  NN_Mult(t, 0, b, bindex, c, cindex, digits, rsaCtxParams);
  //printfIntsIndex("t", t, 0, 128);
  //printfIntsIndex("b", b, bindex, 128);
  //printfIntsIndex("c", c, cindex, 128);
  //console.log("pp1");
  NN_Mod(a, aindex, t, 0, 2 * digits, d, dindex, digits, rsaCtxParams);
}

function NN_Mod(a, aindex, b, bindex, bDigits, c, cindex, cDigits, rsaCtxParams) {
  //NN_DIGIT t[2 * MAX_NN_DIGITS];
  var t = new Array(2 * parseInt((rsaCtxParams.keybits + 31) / 32));

  init_u32array(t, t.length);

  NN_Div(t, 0, a, aindex, b, bindex, bDigits, c, cindex, cDigits, rsaCtxParams);
}

function NN_DigitBits(a) {
  var i;

  for (i = 0; i < 32; i++, a = ((a >>> 1) & 0xffffffff)) {
    if (a == 0) {
      break;
    }
  }

  return (i);
}

function NN_LShift(a, aindex, b, bindex, c, digits) {
  var temp, carry = 0;
  var tmpbindex = 0;
  var tmpaindex = 0;
  var t;

  if (c < 32 && digits != 0) {
    t = 32 - c;

    do {
      temp = b[tmpbindex + bindex];
      //b++;
      tmpbindex++;

      //*a = (temp << c) | carry;
      a[tmpaindex + aindex] = ((temp << c) | carry) & 0xffffffff;
      //a++;
      tmpaindex++;
      carry = (c != 0 ? (temp >>> t) : 0) & 0xffffffff;
      digits--;
      if (digits == 0) {
        break;
      }
    } while (true);
  }

  return (carry) & 0xffffffff;
}

function NN_RShift(a, aindex, b, bindex, c, digits) {
  var temp = 0,
    carry = 0;
  var tmpbindex = 0;
  var tmpaindex = 0;
  var t = 0;

  if (c < 32 && digits != 0) {
    //if(digits) {
    t = 32 - c;

    do {
      digits--;
      //temp = *(b+digits);
      temp = b[digits + bindex];
      //*(a+digits) = ((temp >> c) | carry);
      a[digits + aindex] = ((temp >>> c) | carry) & 0xffffffff;
      carry = (c != 0 ? (temp << t) : 0) & 0xffffffff;
    } while (digits != 0);
  }

  return ((carry) & 0xffffffff) >>> 0;
}

function TO_HIGH_HALF(x) {
  return ((x << 16) & 0xffffffff) >>> 0;
}

function subdigitmult(a, aindex, b, bindex, c, d, dindex, digits) {
  var borrow = 0,
    thigh = 0,
    tlow = 0;
  var i = 0;
  var arr = new Array(2);

  borrow = 0;

  if (c != 0) {
    for (i = 0; i < digits; i++) {
      //function dmult(a, b, high, highindex, low, lowindex)
      //dmult(c, d[i], &thigh, &tlow);
      arr[0] = thigh;
      arr[1] = tlow;
      dmult(c, d[i + dindex], arr, 0, arr, 1);
      thigh = arr[0];
      tlow = arr[1];
      //a[i] = b[i] - borrow;
      a[i + aindex] = bn_u32_minus(b[i + bindex], borrow);
      //if((a[i]) > (MAX_NN_DIGIT - borrow)) {
      if (bn_u32_compare(a[i + aindex], bn_u32_minus(0xffffffff, borrow)) > 0) {
        borrow = 1;
      } else {
        borrow = 0;
      }
      //a[i] -= tlow;
      a[i + aindex] = bn_u32_minus(a[i + aindex], tlow);
      //if((a[i]) > (MAX_NN_DIGIT - tlow)) {
      if (bn_u32_compare(a[i + aindex], bn_u32_minus(0xffffffff, tlow)) > 0) {
        //borrow++;
        borrow = bn_u32_add(borrow, 1);
      }
      //borrow += thigh;
      borrow = bn_u32_add(borrow, thigh);
    }
  }

  return (borrow) & 0xffffffff;
}

function NN_Cmp(a, aindex, b, bindex, digits) {
  if (digits != 0) {
    do {
      digits--;
      if ((a[digits + aindex] >>> 16) > (b[digits + bindex] >>> 16)) {
        return 1;
      }
      if ((a[digits + aindex] >>> 16) < (b[digits + bindex] >>> 16)) {
        return -1;
      }
      if ((a[digits + aindex] & 0xffff) > (b[digits + bindex] & 0xffff)) {
        return 1;
      }
      if ((a[digits + aindex] & 0xffff) < (b[digits + bindex] & 0xffff)) {
        return -1;
      }
      //if(*(a+digits) > *(b+digits))
      //	return(1);
      //if(*(a+digits) < *(b+digits))
      //	return(-1);
    } while (digits != 0);
  }

  return (0);
}

function NN_Sub(a, aindex, b, bindex, c, cindex, digits) {
  var temp = 0,
    borrow = 0;
  var tmpaindex = 0,
    tmpbindex = 0,
    tmpcindex = 0;

  if (digits != 0)
    do {
      //temp = (*b) - borrow;
      temp = bn_u32_minus(b[tmpbindex + bindex], borrow);
      //b++;
      //b = bn_u32_add(b, 1);
      tmpbindex++;
      //if(temp == MAX_NN_DIGIT) {
      if (bn_u32_compare(temp, 0xffffffff) == 0) {
        //temp = MAX_NN_DIGIT - (*c);
        temp = bn_u32_minus(0xffffffff, c[tmpcindex + cindex]);
        //c++;
        tmpcindex++;
      } else {
        //temp -= (*c);
        temp = bn_u32_minus(temp, c[tmpcindex + cindex]);
        //if((temp) > (MAX_NN_DIGIT - (*c))) {
        if (bn_u32_compare(temp, bn_u32_minus(0xffffffff, c[tmpcindex + cindex])) > 0) {
          borrow = 1;
        } else {
          borrow = 0;
        }
        //c++;
        tmpcindex++;
      }
      //*a = temp;
      a[tmpaindex + aindex] = temp & 0xffffffff;
      //a++;
      tmpaindex++;
      digits--;
      if (digits == 0) {
        break;
      }
    } while (true);

  return (borrow);
}

//var test2 = 0;
//var testI = 0;
function NN_Div(a, aindex, b, bindex, c, cindex, cDigits, d, dindex, dDigits, rsaCtxParams) {
  //NN_DIGIT ai, cc[2*MAX_NN_DIGITS+1], dd[MAX_NN_DIGITS], s;
  //NN_DIGIT t[2], u, v, *ccptr;
  //NN_HALF_DIGIT aHigh, aLow, cHigh, cLow;
  //int i;
  //unsigned int ddDigits, shift;
  var cc = new Array(2 * parseInt((rsaCtxParams.keybits + 31) / 32) + 1);
  var dd = new Array(2 * parseInt((rsaCtxParams.keybits + 31) / 32));
  var t = new Array(2);
  var ddDigits = 0;
  var shift = 0;
  var s, u, v;
  var ai;
  var cHigh, cLow, aHigh, aLow;
  var i = 0;
  //var ccptrindex = 0;

  init_u32array(cc, cc.length);
  init_u32array(dd, dd.length);
  NN_AssignZero(dd, 0, dd.length);

  ddDigits = NN_Digits(d, dindex, dDigits);
  if (ddDigits == 0) {
    return;
  }

  shift = 32 - NN_DigitBits(d[dindex + ddDigits - 1]);
  //console.log("shift = %d", shift);
  NN_AssignZero(cc, 0, ddDigits);
  cc[cDigits] = NN_LShift(cc, 0, c, 0, shift, cDigits);
  //console.log("cc[cDigits] = %d", cc[cDigits]);
  NN_LShift(dd, 0, d, 0, shift, ddDigits);
  s = dd[ddDigits - 1];
  //console.log("s = %d", s);
  //printfInts("cc", cc, cc.length);
  //printfInts("dd", dd, dd.length);
  //throw Error("111");
  NN_AssignZero(a, aindex, cDigits);

  //throw Error("11222");
  //test2 = 0;
  for (i = cDigits - ddDigits; i >= 0; i--) {
    test2++;
    //if (testI >= 412) {
    //	console.log("test2 = %d", test2);
    //}
    if (bn_u32_compare(s, 0xffffffff) == 0) {
      ai = (cc[i + ddDigits]) & 0xffffffff;
    } else {
      s = bn_u32_add(s, 1);
      cHigh = HIGH_HALF(s);
      cLow = LOW_HALF(s);
      t[0] = cc[i + ddDigits - 1];
      t[1] = cc[i + ddDigits];
      //if (testI >= 412 && test2 >= 13) console.log("t10 = %d %d", t[0], t[1]);
      if (cHigh == 0xffff) {
        aHigh = HIGH_HALF(t[1]);
        //if (testI >= 412 && test2 >= 13) console.log("aHigh1=%d", aHigh);
      } else {
        aHigh = parseInt((t[1] >>> 0) / ((cHigh >>> 0) + 1));
        //if (testI >= 412 && test2 >= 13) console.log("aHigh2=%d", aHigh);
      }
      u = ((aHigh >>> 0) * (cLow >>> 0)) & 0xffffffff;
      v = ((aHigh >>> 0) * (cHigh >>> 0)) & 0xffffffff;
      //if (testI >= 412 && test2 >= 13) console.log("u = %d v = %d aHigh = %d cLow = %d cHigh = %d", u, v, aHigh, cLow, cHigh);
      //if (testI >= 412 && test2 >= 13) console.log("t9 = %d %d", t[0], t[1]);
      t[0] = bn_u32_minus(t[0], TO_HIGH_HALF(u));
      //if (testI >= 412 && test2 >= 13) console.log("t91 = %d %d u = %d", t[0], t[1], u);
      if (bn_u32_compare(t[0], bn_u32_minus(0xffffffff, TO_HIGH_HALF(u))) > 0) {
        t[1] = bn_u32_minus(t[1], 1);
      }
      //if (testI >= 412 && test2 >= 13) console.log("t8 = %d %d", t[0], t[1]);
      //if (testI >= 412 && test2 >= 13) console.log("t[0] = %d t[1] = %d", t[0], t[1]);
      t[1] = bn_u32_minus(t[1], HIGH_HALF(u));
      //if (testI >= 412 && test2 >= 13) console.log("t[0] = %d t[1] = %d", t[0], t[1]);
      t[1] = bn_u32_minus(t[1], v);
      //if (testI >= 412 && test2 >= 13) console.log("t[0] = %d t[1] = %d", t[0], t[1]);
      //eeeek;
      //if (testI >= 412 && test2 >= 13) console.log("t7 = %d %d cHigh = %d, cLow = %d bn_u32_compare(t[0], cLow) = %d", t[0], t[1], cHigh, cLow, bn_u32_compare(t[0], cLow));
      while (bn_u32_compare(t[1], cHigh) > 0 || (bn_u32_compare(t[1], cHigh) == 0 && bn_u32_compare(t[0], TO_HIGH_HALF(cLow)) >= 0)) {
        //if (testI >= 412 && test2 >= 13) {
        //	console.log("rd t[0] = %d t[1] = %d cLow = %d cHigh = %d", t[0], t[1], cLow, cHigh);
        //	throw Error("");
        //}
        t[0] = bn_u32_minus(t[0], TO_HIGH_HALF(cLow));
        if (bn_u32_compare(t[0], bn_u32_minus(0xffffffff, TO_HIGH_HALF(cLow))) > 0) {
          t[1] = bn_u32_minus(t[1], 1);
        }
        t[1] = bn_u32_minus(t[1], cHigh);
        aHigh = bn_u32_add(aHigh, 1);
      }
      //if (testI >= 412 && test2 >= 13)console.log("t6 = %d %d cHigh = %d, cLow = %d", t[0], t[1], cHigh, cLow);
      if (bn_u32_compare(cHigh, 0xffff) == 0) {
        aLow = LOW_HALF(t[1]) & 0xffffffff;
        //console.log("aLow1 = %d ", aLow);
      } else {
        //aLow = parseInt((((TO_HIGH_HALF (t[1]) + HIGH_HALF (t[0])) >>> 0) & 0xffffffff) / bn_u32_add(cHigh, 1));
        aLow = (TO_HIGH_HALF(t[1]) >>> 0) + ((HIGH_HALF(t[0]) & 0xffffffff) >>> 0);
        aLow = parseInt(aLow / bn_u32_add(cHigh, 1)) & 0xffffffff;
        aLow &= 0xffffffff;
        //console.log("aLow2 = %d ", aLow);
      }
      u = ((aLow >>> 0) * (cLow >>> 0)) & 0xffffffff;
      v = ((aLow >>> 0) * (cHigh >>> 0)) & 0xffffffff;
      //(*t) -= u;
      //console.log("t5 = %d %d u = %d aLow = %d cLow = %d cHigh = %d", t[0], t[1], u, aLow, cLow, cHigh);
      t[0] = bn_u32_minus(t[0], u);
      //console.log("t4 = %d %d", t[0], t[1]);
      //if ((*t) > (MAX_NN_DIGIT - u)) {
      if (bn_u32_compare(t[0], bn_u32_minus(0xffffffff, u)) > 0) {
        //t[1]--;
        t[1] = bn_u32_minus(t[1], 1);
      }
      //console.log("t3 = %d %d", t[0], t[1]);
      //(*t) -= TO_HIGH_HALF (v);
      t[0] = bn_u32_minus(t[0], TO_HIGH_HALF(v));
      //console.log("t2 = %d %d", t[0], t[1]);
      //if ((*t) > (MAX_NN_DIGIT - TO_HIGH_HALF (v))) {
      if (bn_u32_compare(t[0], bn_u32_minus(0xffffffff, TO_HIGH_HALF(v))) > 0) {
        //t[1]--;
        t[1] = bn_u32_minus(t[1], 1);
      }
      //console.log("t1 = %d %d", t[0], t[1]);
      //*(t+1) -= HIGH_HALF (v);
      t[1] = bn_u32_minus(t[1], HIGH_HALF(v));
      //console.log("t0 = %d %d", t[0], t[1]);

      //console.log("ai1=%d aHigh = %d aLow = %d t[0] = %d t[1] = %d", ai, aHigh, aLow, t[0], t[1]);
      //while ((*(t+1) > 0) || ((*(t+1) == 0) && (*t) >= s)) {
      while (bn_u32_compare(t[1], 0) > 0 || (t[1] == 0 && bn_u32_compare(t[0], s) >= 0)) {
        //(*t) -= s;
        t[0] = bn_u32_minus(t[0], s);
        //if ((*t) > (MAX_NN_DIGIT - s)) {
        if (bn_u32_compare(t[0], bn_u32_minus(0xffffffff, s)) > 0) {
          t[1]--;
        }
        //aLow++;
        aLow = bn_u32_add(aLow, 1);
      }

      //ai = TO_HIGH_HALF (aHigh) + aLow;
      ai = bn_u32_add(TO_HIGH_HALF(aHigh), aLow);
      //console.log("ai0=%d aHigh = %d aLow = %d", ai, aHigh, aLow);
      //s--;
      s = bn_u32_minus(s, 1);
      //console.log("cHigh = %d cLow = %d", cHigh, cLow);
      //console.log("s = %d ai = %d t[0] = %d t[1] = %d cHigh = %d cLow = %d aHigh = %d aLow = %d u = %d v = %d", 
      //	s, ai, t[0], t[1], cHigh, cLow, aHigh, aLow, u, v);
      //cc[i+ddDigits] -= subdigitmult(&cc[i], &cc[i], ai, dd, ddDigits);
      //printfIntsIndex("cc", cc, 0, cc.length);
      //printfIntsIndex("dd", dd, 0, dd.length);
      //console.log("ai = %d ddDigits = %d i = %d", ai, ddDigits, i);
      cc[i + ddDigits] = bn_u32_minus(cc[i + ddDigits], subdigitmult(cc, i, cc, i, ai, dd, 0, ddDigits));
      //console.log("cc[i+ddDigits] = %d", cc[i+ddDigits]);
      //printfIntsIndex("cc", cc, 0, cc.length);
      //printfIntsIndex("dd", dd, 0, dd.length);
      //console.log("ddDigits = %d", ddDigits);
      //testI++
      //console.log("testI = %d", testI);
      //console.log("NN_Cmp(cc, i, dd, 0, ddDigits) = %d", NN_Cmp(cc, i, dd, 0, ddDigits));
      //if (testI > 2) {
      //throw Error("988");
      //}
      //console.log("testI = %d", testI);
      while (cc[i + ddDigits] != 0 || NN_Cmp(cc, i, dd, 0, ddDigits) >= 0) {
        //	console.log("0 cc[i+ddDigits] = %d ai\n", cc[i+ddDigits]);
        ai = bn_u32_add(ai, 1);
        cc[i + ddDigits] = bn_u32_minus(cc[i + ddDigits], NN_Sub(cc, i, cc, i, dd, 0, ddDigits));
        //console.log("1 cc[i+ddDigits] = %d ai\n", cc[i+ddDigits]);
        //console.log("ai");
        //throw Error("9612332");
      }
      a[i + aindex] = ai & 0xffffffff;
      //throw Error("9632");
    }
  }
  //throw Error("987412");

  NN_AssignZero(b, bindex, dDigits);
  NN_RShift(b, bindex, cc, 0, shift, ddDigits);
  //console.log("shift = %d ddDigits = %d", shift, ddDigits);
  //printfIntsIndex("b", b, bindex, ddDigits);
  //throw Error("888");
}

//var testi = 0;
function NN_Mult(a, aindex, b, bindex, c, cindex, digits, rsaCtxParams) {
  var t = new Array(2 * parseInt((rsaCtxParams.keybits + 31) / 32));
  var dhigh = 0xffffffff >>> 0,
    dlow = 0xffffffff >>> 0,
    carry = 0xffffffff >>> 0;
  var bDigits, cDigits, i, j;
  var tmpAr = new Array(2);

  init_u32array(t, t.length);
  init_u32array(tmpAr, tmpAr.length);

  //printfIntsIndex("a", a, aindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //printfIntsIndex("b", b, bindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //printfIntsIndex("c", c, cindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //throw Error("9988");

  tmpAr[0] = 0xffffffff >>> 0;
  tmpAr[1] = 0xffffffff >>> 0;
  for (i = 0; i < t.length; i++) {
    t[i] = 0xffffffff >>> 0;
  }
  NN_AssignZero(t, 0, t.length);

  bDigits = NN_Digits(b, bindex, digits);
  cDigits = NN_Digits(c, cindex, digits);

  for (i = 0; i < bDigits; i++) {
    carry = 0;
    if (b[i + bindex] != 0) {
      for (j = 0; j < cDigits; j++) {
        tmpAr[0] = dhigh;
        tmpAr[1] = dlow;
        //console.log("%d %d", b[i + bindex], c[j + cindex]);
        dmult(b[i + bindex], c[j + cindex], tmpAr, 0, tmpAr, 1);
        dhigh = tmpAr[0];
        dlow = tmpAr[1];
        //*(t+(i+j)) = *(t+(i+j)) + carry;
        //console.log("0t%d=%d dlow = %d dhigh = %d carry = %d", i + j, t[i + j], dlow, dhigh, carry);
        //testi++;
        //if (testi > 1) {
        //	throw Error("ll");
        //}
        t[i + j] += carry;
        t[i + j] &= 0xffffffff;
        //console.log("1t%d=%d dlow = %d dhigh = %d carry = %d", i + j, t[i + j], dlow, dhigh, carry);
        //if((*(t+(i+j))) < carry) {
        //if (t[i + j] < carry) {
        if (bn_u32_compare(t[i + j], carry) < 0) {
          carry = 1;
        } else {
          carry = 0;
        }
        //*(t+(i+j)) += dlow;
        t[i + j] += dlow;
        t[i + j] &= 0xffffffff;
        //console.log("2t%d=%d dlow = %d dhigh = %d carry = %d", i + j, t[i + j], dlow, dhigh, carry);
        //if((*(t+(i+j))) < dlow) {
        //if (t[i + j] < dlow) {
        if (bn_u32_compare(t[i + j], dlow) < 0) {
          //console.log("carry add");
          carry++;
        }
        carry += dhigh;
        carry &= 0xffffffff
      }
      //throw Error("aaa");
    }
    //*(t+(i+cDigits)) += carry;
    t[i + cDigits] += carry;
    t[i + cDigits] &= 0xffffffff;
  }
  //printfIntsIndex("t", t, 0, t.length);
  //throw Error("9986");

  NN_Assign(a, 0, t, 0, 2 * digits);

  //printfIntsIndex("a", a, aindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //printfIntsIndex("b", b, bindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //printfIntsIndex("c", c, cindex, parseInt((rsaCtxParams.keybits + 31) / 32));
  //throw Error("3356");
}

function LOW_HALF(val) {
  return val & 0xffff;
}

function HIGH_HALF(val) {
  return (val >>> 16) & 0xffff;
}

function init_u32array(array, len) {
  var i = 0;

  for (i = 0; i < len; i++) {
    array[i] = 0xffffffff >>> 0;
  }
}

function dmult(a, b, high, highindex, low, lowindex) {
  var al = 0xffffffff >>> 0;
  var ah = 0xffffffff >>> 0;
  var bl = 0xffffffff >>> 0;
  var bh = 0xffffffff >>> 0;
  var m1 = 0xffffffff >>> 0;
  var m2 = 0xffffffff >>> 0;
  var m = 0xffffffff >>> 0;
  var ml = 0xffffffff >>> 0;
  var mh = 0xffffffff >>> 0;
  var carry = 0xffffffff >>> 0;

  carry = 0;

  al = LOW_HALF(a);
  ah = HIGH_HALF(a);
  bl = LOW_HALF(b);
  bh = HIGH_HALF(b);

  low[lowindex] = (al * bl) & 0xffffffff;
  high[highindex] = (ah * bh) & 0xffffffff;

  //console.log("low[lowindex] = %d high[highindex] = %d", low[lowindex], high[highindex]);

  m1 = (al * bh) & 0xffffffff;
  m2 = (ah * bl) & 0xffffffff;
  m = (m1 + m2) & 0xffffffff;

  if (bn_u32_compare(m, m1) < 0) {
    carry = (1 << 16) & 0xffffffff; //(NN_DIGIT_BITS / 2);
  }

  ml = (m & 0xffff) << 16; //(NN_DIGIT_BITS / 2);
  mh = (m >> 16) & 0xffff; //(NN_DIGIT_BITS / 2);

  low[lowindex] += ml;

  if (bn_u32_compare(low[lowindex], ml) < 0) {
    carry = (carry + 1) & 0xffffffff;
  }

  high[highindex] += (carry + mh);
  low[lowindex] &= 0xffffffff;
  high[lowindex] &= 0xffffffff;
}


function NN_AssignZero(a, aindex, digits) {
  var tmpaindex = 0;

  if (digits != 0) {
    do {
      //*a++ = 0;
      //(*a) = 0;
      a[tmpaindex + aindex] = 0;
      //a++;
      tmpaindex++;
      digits--;
      if (digits == 0) {
        break;
      }
    } while (true);
  }
}

function NN_Assign(a, aindex, b, bindex, digits) {
  var tmpaindex = 0;
  var tmpbindex = 0;

  if (digits != 0) {
    /*do {
    	*a++ = *b++;
    }while(--digits);*/
    do {
      a[tmpaindex + aindex] = b[tmpbindex + bindex];
      //a++;
      //b++;
      tmpaindex++;
      tmpbindex++;
      digits--;
      if (digits == 0) {
        break;
      }
    } while (true);
  }
}

function printfInts(title, data, len) {
  printfIntsIndex(title, data, 0, len);
  /*var i = 0;
  
  for (i = 0; i < len; i++) {
  	console.log("%d %s %d", i, title == null ? "":title, data[i]);
  }*/
}

function printfIntsIndex(title, data, index, len) {
  var i = 0;

  for (i = 0; i < len; i++) {
    console.log("%d %s %d", i, title == null ? "" : title, data[i + index]);
  }
}

function NN_Digits(a, aindex, len) {
  var i = 0;

  for (i = len - 1; i >= 0; i--) {
    if (a[i + aindex] != 0) {
      return i + 1;
    }
  }

  return i;
}

function BignumCmp(a, b) {
  var amax = a.length - 1;
  var bmax = b.length - 1;
  var i = (amax > bmax ? amax : bmax);
  var aval = 0;
  var bval = 0;

  while (i) {
    aval = i > amax ? 0 : a[i];
    bval = i > bmax ? 0 : b[i];
    if (((aval >> 16) & 0xffff) < ((bval >> 16) & 0xffff)) {
      return -1;
    }
    if (((aval >> 16) & 0xffff) > ((bval >> 16) & 0xffff)) {
      return 1;
    }
    if ((aval & 0xffff) < (bval & 0xffff)) {
      return -1;
    }
    if ((aval & 0xffff) > (bval & 0xffff)) {
      return 1;
    }
    i--;
  }

  return 0;
}

function NN_Decode(bytesArray, len) {
  var bits = CalArrayBits(bytesArray, len);
  var i = 0;
  var j = 0;
  var outArray = new Array(parseInt((bits + 31) / 32));

  init_u32array(outArray, outArray.length);

  for (i = 0; i < outArray.length; i++) {
    j = bytesArray.length - (i + 1) * 4;
    //console.log("j = " + j);
    if (j >= 0) {
      outArray[i] = ((parseInt(bytesArray[j]) & 0xff) << 24) |
        ((parseInt(bytesArray[j + 1]) & 0xff) << 16) |
        ((parseInt(bytesArray[j + 2]) & 0xff) << 8) |
        ((parseInt(bytesArray[j + 3]) & 0xff) << 0);
    } else {
      outArray[i] = 0;
      if (j + 1 >= 0) {
        outArray[i] |= ((parseInt(bytesArray[j + 1]) & 0xff) << 16);
      }
      if (j + 2 >= 0) {
        outArray[i] |= ((parseInt(bytesArray[j + 2]) & 0xff) << 8);
      }
      if (j + 3 >= 0) {
        outArray[i] |= ((parseInt(bytesArray[j + 3]) & 0xff) << 0);
      }
    }
  }

  return outArray;
}


function CalArrayBits(arrayData, len) {
  var i = 0;
  var j = 0;

  for (i = 0; i < len; i++) {
    if (arrayData[i] != 0) {
      j = -1;
      break;
    }
  }

  if (j >= 0) {
    return 0;
  }

  for (j = 0; j < 8; j++) {
    if ((arrayData[i] & (0x80 >>> j)) != 0) {
      break;
    }
  }
  return 8 - j + (len - i - 1) * 8;
}

function rsa_hex_to_array(hexStrIn) {
  var i = 0;
  var cnt = 0;
  var ele = 0;
  var bytesArray = null;

  cnt = 0;
  for (i = 0; i < hexStrIn.length; i++) {
    ele = hexStrIn.charCodeAt(i);
    if (ele >= 48 && ele < 48 + 10) {
      cnt++;
    }
    if (ele >= 65 && ele < 65 + 6) {
      cnt++;
    }
    if (ele >= 97 && ele < 97 + 6) {
      cnt++;
    }
  }
  bytesArray = new Uint8Array(parseInt((cnt + 1) / 2));
  cnt = 0;
  for (i = 0; i < hexStrIn.length; i++) {
    ele = hexStrIn.charCodeAt(i);
    if (ele >= 48 && ele < 48 + 10) {
      ele -= 48;
      cnt++;
    } else if (ele >= 65 && ele < 65 + 6) {
      ele = ele - 65 + 10;
      cnt++;
    } else if (ele >= 97 && ele < 97 + 6) {
      ele = ele - 97 + 10;
      cnt++;
    } else {
      continue;
    }
    if ((cnt % 2) == 1) {
      bytesArray[parseInt((cnt - 1) / 2)] = (ele << 4) & 0xF0;
    } else {
      bytesArray[parseInt((cnt - 1) / 2)] |= ele;
    }
  }

  return bytesArray;
}

function rsa_hex_to_str(data, len) {
  var sha256_hex_digits = "0123456789abcdef";
  var output = new String();
  var i = 0;

  //console.log("ou1t = " + output);
  for (i = 0; i < len; i++) {
    //  console.log("out = " + output);
    output += sha256_hex_digits.charAt((data[i] >>> 4) & 0x0f);
    output += sha256_hex_digits.charAt((data[i]) & 0x0f);
  }

  return output;
}

module.exports = {
  rsa_set_key: rsa_set_key,
  rsa_pub_cal: rsa_pub_cal,
  rsa_pri_cal: rsa_pri_cal,
  rsa_hex_to_array: rsa_hex_to_array,
  rsa_hex_to_str: rsa_hex_to_str,
  rsa_pkcs1_pad:rsa_pkcs1_pad
}

测试代码:

如下在微信小程序中测试验证

var js_rsa = require('../../crypto/rsa.js');
testRsa() {
    var rsaCtx = null;
    var key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
    var key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
    var keyE = "010001";
    var txt = "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";
    var result, result2;
    var tmpdata = null;
    rsaCtx = js_rsa.rsa_set_key(js_rsa.rsa_hex_to_array(keyN), js_rsa.rsa_hex_to_array(keyE), js_rsa.rsa_hex_to_array(keyD));
    result = js_rsa.rsa_pub_cal(rsaCtx, js_rsa.rsa_hex_to_array(txt));
    console.log("rsa_pub_cal:" + js_rsa.rsa_hex_to_str(result, result.length));
    result2 = js_rsa.rsa_pri_cal(rsaCtx, result);
    console.log("rsa_pri_cal:" + js_rsa.rsa_hex_to_str(result2, result2.length));

   /* 下面的用pkcs1填充然后公玥计算,可以在后台用对应的私玥解密出来 */
    tmpdata = js_rsa.rsa_pkcs1_pad(js_rsa.rsa_hex_to_array("1122334455667788"), 2, rsaCtx.keybits);
    result = js_rsa.rsa_pub_cal(rsaCtx, tmpdata);
    console.log("rsa_pub_cal:" + js_rsa.rsa_hex_to_str(result, result.length));

    result2 = js_rsa.rsa_pri_cal(rsaCtx, result);
    console.log("rsa_pri_cal:" + js_rsa.rsa_hex_to_str(result2, result2.length));
  },

测试结果:

rsa_pub_cal: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
rsa_pri_cal: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
rsa_pub_cal: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
rsa_pri_cal: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

;