-----BEGIN PUBLIC KEY-----//64chars一行(多行)-----END PUBLIC KEY----------BEGIN RSA PRIVATE KEY-----//64chars一行(多行)-----END RSA PRIVATE KEY-----

/** * 將字符串格式公私鑰格式化為pem格式公私鑰 * @param $secret_key * @param $type * @return string */public static function format_secret_key($secret_key, $type){  //64個英文字符后接換行符"/n",最后再接換行符"/n"  $key = (wordwrap($secret_key, 64, "/n", true))."/n";  //添加pem格式頭和尾  if ($type == 'pub') {    $pem_key = "-----BEGIN PUBLIC KEY-----/n" . $key . "-----END PUBLIC KEY-----/n";  }else if ($type == 'pri') {    $pem_key = "-----BEGIN RSA PRIVATE KEY-----/n" . $key . "-----END RSA PRIVATE KEY-----/n";  }else{    echo('公私鑰類型非法');    exit();  }  return $pem_key;}

/** * RSA加簽 * @param $paramStr * @param $priKey * @return string */public static function sign($paramStr, $priKey){  $sign = '';  //將字符串格式公私鑰轉為pem格式公私鑰  $priKeyPem = SignUtil::format_secret_key($priKey, 'pri');  //轉換為openssl密鑰，必須是沒有經過pkcs8轉換的私鑰  $res = openssl_get_privatekey($priKeyPem);  //調用openssl內置簽名方法，生成簽名$sign  openssl_sign($paramStr, $sign, $res);  //釋放資源  openssl_free_key($res);  //base64編碼簽名  $signBase64 = base64_encode($sign);  //url編碼簽名  $sign = urlencode($signBase64);  return $sign;}

/** * RSA驗簽 * @param $paramStr * @param $sign * @param $pubKey * @return bool */public static function verify($paramStr, $sign, $pubKey) {  //將字符串格式公私鑰轉為pem格式公私鑰  $pubKeyPem = SignUtil::format_secret_key($pubKey, 'pub');  //轉換為openssl密鑰，必須是沒有經過pkcs8轉換的公鑰  $res = openssl_get_publickey($pubKeyPem);  //url解碼簽名  $signUrl = urldecode($sign);  //base64解碼簽名  $signBase64 = base64_decode($signUrl);  //調用openssl內置方法驗簽，返回bool值  $result = (bool)openssl_verify($paramStr, $signBase64, $res);  //釋放資源  openssl_free_key($res);  //返回資源是否成功  return $result;}