fix:key漏洞

This commit is contained in:
waner 2025-07-31 11:57:12 +08:00
parent 1df1e64783
commit 8de764c731
3 changed files with 20 additions and 16 deletions

View File

@ -58,7 +58,7 @@ public class Test4Jemter extends AbstractJavaSamplerClient {
Arguments arguments = new Arguments();
arguments.addArgument("SM2dn", "C=CN,ST=zz,L=zz,O=zzz,CN=zzzzz");
arguments.addArgument("RSAdn", "C=cn,O=CFCA TEST CA,OU=NCS2,OU=Enterprises,CN=041@Z402451000010@ShanDong@00000001");
arguments.addArgument("orgData", "12345678");
arguments.addArgument("orgData", "null");
arguments.addArgument("ip", "172.1.41.139");
arguments.addArgument("ip2", "172.1.41.96");
arguments.addArgument("port", "8889");
@ -135,7 +135,11 @@ public class Test4Jemter extends AbstractJavaSamplerClient {
sr.sampleStart();
SydUtils sydUtils = null;
try {
orgData = oData.getBytes(); //SM2裸签
if ("null".equals(oData)) {
orgData = null;
} else {
orgData = oData.getBytes(); //SM2裸签
}
sydUtils = new SydUtils(ip, ip2, port, timeout);
// orgData = new byte[dataLength];
//执行业务逻辑

View File

@ -9,7 +9,7 @@ import racal.sunyard.main.SydApi4j;
public class SYMEnDeLongData {
private SydApi4j api;
private String key = "";
private String sykey = "";
private String keyValue = "";
private int keyType = 0;
private int inType = 0;
@ -95,11 +95,11 @@ public class SYMEnDeLongData {
public String getKey() {
return key;
return sykey;
}
public SYMEnDeLongData setKey(String key) {
this.key = key;
public SYMEnDeLongData setKey(String sykey) {
this.sykey = sykey;
return this;
}

View File

@ -58,14 +58,14 @@ public class Test4NongxinCW {
// System.out.println("SM2大数据裸签"+ Util.bytes2HexString(nakedSign1));
// boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn);
// System.out.println("SM2数据验签"+nakedVerify1 );
for (int i = 0; i < 10000; i++) {
// for (int i = 0; i < 10000; i++) {
byte[] nakedSign = api.SYD_NakedSign(orgData,SM2dn);
System.out.println("SM2签名"+ Util.encodeBase64(nakedSign));
// byte[] nakedSign1 = api.SYD_NakedSignAll(4,orgData, SM2dn);
byte[] nakedSign1 = api.SYD_NakedSignAll(4,orgData, SM2dn);
// System.out.println("SM2大数据裸签"+ Util.bytes2HexString(nakedSign1));
// boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn);
// System.out.println("SM2数据验签"+nakedVerify1 );
}
// }
}
/**
@ -191,16 +191,16 @@ public class Test4NongxinCW {
@Test
public void detSign(){
orgData = new byte[1024];
for (int i = 0; i < 10000; i++) {
byte[] orgData1 = "12345678".getBytes(StandardCharsets.UTF_8);
// for (int i = 0; i < 10000; i++) {
//detach签名
String detachedSign = api.detachedSign(orgData, SM2dn);
String detachedSign = api.detachedSign(orgData1, SM2dn);
System.out.println("detach签名"+ detachedSign);
//detach验签
boolean ver = api.detachedVerify(orgData, detachedSign);
// System.out.println("detach验签"+ ver);
}
boolean ver = api.detachedVerify(orgData1, detachedSign);
System.out.println("detach验签"+ ver);
// }
}
@ -364,7 +364,7 @@ public class Test4NongxinCW {
"FAYIKwYBBQUHAwIGCCsGAQUFBwMEMAwGCCqBHM9VAYN1BQADSAAwRQIhAL8uWl4K\n" +
"hUEIUnSsM0RlUn4aSkK3R0QFpqdBu7AYCtXcAiB5tIOkP1ycAtp0W3mSHPabAgUq\n" +
"dHXEO3AzKABKxIAH7Q==\n" +
"-----END CERTIFICATE-----";
"-----END";
List<String> masterNodes = new ArrayList<>();
// masterNodes.add("172.16.18.99:8889");
// masterNodes.add("172.16.18.5:8889");