RSA MbedTLS验签失败

Funchovy

有大佬能帮忙看下吗
ME0用YTM32信息安全应用参考方案合集的RSA验签算法尝试验签，公钥以及数据用三个不同网站上都能够通过的数据，但是Demo算出来还是失败，代码就改了demo的main.c ，RSA_public_key_4096_der的数据是将公钥pem用demo里的python工程转换的。

/* USER CODE BEGIN Header */
/* you can remove the copyright */

/*
 *  Copyright 2020-2023 Yuntu Microelectronics co.,ltd
 *  All rights reserved.
 *
 *  YUNTU Confidential. This software is owned or controlled by YUNTU and may only be
 *  used strictly in accordance with the applicable license terms. By expressly
 *  accepting such terms or by downloading, installing, activating and/or otherwise
 *  using the software, you are agreeing that you have read, and that you agree to
 *  comply with and are bound by, such license terms. If you do not agree to be
 *  bound by the applicable license terms, then you may not retain, install,
 *  activate or otherwise use the software. The production use license in
 *  Section 2.3 is expressly granted for this software.
 *
 * @file main.c
 * @brief
 *
 */

/* USER CODE END Header */
#include "sdk_project_config.h"
/* Includes ------------------------------------------------------------------*/
/* Private includes ----------------------------------------------------------*/
/* USER CODE BEGIN Includes */
#include "printf.h"
#include "psa/crypto.h"
#include "mbedtls/platform.h"
#include "SHA256_hash.h"
#include "rsa.h"
#include "pk.h"
/* USER CODE END Includes */

/* Private typedef -----------------------------------------------------------*/
/* USER CODE BEGIN PTD */
/* USER CODE END PTD */

/* Private define ------------------------------------------------------------*/
/* USER CODE BEGIN PD */
/* USER CODE END PD */

/* Private macro -------------------------------------------------------------*/
/* USER CODE BEGIN PM */
/* USER CODE END PM */

/* Private variables ---------------------------------------------------------*/
/* USER CODE BEGIN PV */
uint8_t hwshaResult[32] = {0};

static const uint8_t signature_data[512] =
{
0x13,0x70,0x3c,0xc9,0x15,0x70,0x79,0x74,0xde,0xb2,0x2f,0xd1,0x08,0x7b,0xa3,0xbf,
0x5c,0xb0,0xb6,0x32,0x26,0xe7,0x0b,0xaa,0xa2,0xe5,0x93,0x03,0xb5,0xf0,0xcf,0xb1,
0xd1,0xbf,0x9e,0x3a,0xf1,0xcf,0xce,0x7d,0x72,0x41,0x7e,0x2a,0x3f,0xce,0x26,0x01,
0x42,0x78,0xb3,0x9a,0x33,0x09,0x84,0x15,0x5a,0x33,0xce,0x60,0x87,0x3d,0x16,0x98,
0x90,0x0f,0xac,0x6b,0xdd,0x76,0x15,0x32,0x2d,0x0b,0xa6,0x3f,0xdb,0x41,0xba,0xf4,
0x1a,0x49,0xef,0x3a,0x66,0xc7,0xdc,0x37,0xae,0x4c,0x62,0x19,0xa3,0xbe,0x53,0xf3,
0x09,0x9b,0x50,0x1e,0xa7,0xe0,0x29,0xbc,0xfa,0x4b,0x58,0xa4,0xe5,0xba,0x98,0xf5,
0x00,0x30,0xe8,0x23,0xa6,0xb6,0x2f,0x3f,0x1f,0x40,0x47,0x85,0xd6,0xa5,0x97,0x2c,
0x49,0xc6,0xf5,0x16,0xe9,0x1a,0xef,0x9a,0x14,0xa2,0x31,0x8a,0x93,0xf4,0x60,0x11,
0x81,0xd7,0x22,0xc0,0xb2,0x6e,0x83,0xac,0xcc,0x3d,0x7a,0x28,0xf8,0x2e,0x6e,0xe8,
0xb1,0xcd,0x8b,0x04,0xa5,0x25,0x5e,0x71,0x34,0x72,0x70,0xae,0x36,0xd1,0x1a,0x28,
0x87,0x5e,0x03,0x54,0x79,0x4f,0x5a,0x14,0xa8,0xbe,0x36,0xf2,0x57,0x94,0xbc,0x3f,
0xcc,0x6a,0xaa,0x00,0x90,0xc0,0x03,0x0f,0xe9,0xf3,0x1c,0x82,0x0e,0xec,0x27,0xed,
0xa2,0x17,0xc9,0x9b,0x51,0xa6,0x98,0x1f,0xaa,0x9c,0xc6,0x27,0x04,0xbe,0xb2,0x04,
0x8a,0x7e,0x2a,0x3d,0x13,0xd9,0x3d,0x0d,0xbe,0xa2,0xc2,0x2b,0x1c,0xe9,0x49,0x0c,
0xc5,0xc0,0x42,0xba,0x7f,0x3f,0x1c,0xdc,0x74,0xd8,0x1c,0x24,0x4d,0x1d,0x33,0x80,
0x24,0x70,0x9c,0xfd,0x2a,0xc5,0xe6,0xcf,0x57,0x50,0x16,0xa8,0xb5,0xe7,0x42,0x8b,
0x8b,0xcf,0xec,0x6b,0xab,0x24,0xf4,0x54,0xff,0x35,0x0b,0x3b,0x1c,0x2e,0x1a,0xf8,
0x22,0xab,0x5e,0xd2,0x81,0x1f,0x8d,0x46,0x3b,0xeb,0x5a,0xa9,0xb3,0x3f,0x6c,0x6d,
0x73,0x71,0x3d,0x41,0xbf,0x29,0x6d,0x37,0xcc,0xa7,0x81,0x14,0x74,0x6b,0xe5,0x48,
0xfa,0xe9,0x60,0x88,0x0b,0x60,0x86,0xd2,0x05,0xff,0x9e,0x98,0x69,0x2d,0x84,0xf8,
0x13,0xe6,0x7e,0x7d,0x17,0xbe,0xa9,0xf6,0x49,0x2e,0xb7,0xd9,0xaf,0xb2,0x9a,0xad,
0x28,0xf8,0x66,0x8e,0xf1,0x5a,0xb7,0x32,0x70,0xef,0x94,0x4f,0x96,0x26,0x09,0xec,
0xac,0x1c,0x76,0xd8,0x8d,0xcd,0xb8,0x88,0x60,0xd2,0x9a,0x74,0xa9,0x3b,0x39,0xba,
0x4d,0x27,0x58,0x80,0xe3,0x4d,0x8d,0x10,0xdf,0x21,0x6f,0x01,0x91,0x68,0x8a,0x53,
0x80,0x43,0x0b,0xaa,0x3b,0x44,0xe7,0x1c,0x1d,0xac,0xaf,0x6e,0x72,0x4c,0x82,0x01,
0xa7,0x1d,0xd0,0xf3,0xc2,0x26,0xdd,0x68,0xb9,0xcc,0x89,0xae,0xba,0x7b,0x65,0x7a,
0x68,0x34,0x50,0x4d,0xf4,0x91,0xe3,0xfd,0x95,0xdc,0x29,0xc8,0x58,0x42,0x0c,0xdc,
0x8a,0xe6,0xf6,0x0b,0x9f,0xe9,0xa9,0x38,0x67,0xcc,0xc5,0x6d,0x57,0x4e,0x88,0x9c,
0x66,0x6d,0x47,0x96,0x34,0xb7,0x3c,0x7d,0xb7,0x60,0x77,0xd0,0x46,0xc4,0x10,0x91,
0x6a,0x20,0xc2,0xcb,0x22,0x71,0x21,0xb9,0xdb,0xf4,0x5e,0x05,0xa9,0x49,0xac,0x23,
0x7d,0x4a,0xf6,0xd9,0xdc,0xec,0x07,0xe7,0x39,0xfd,0xde,0x2a,0x27,0xbb,0x7f,0xb8
};

/* The message that need to be signed*/
uint8_t message[32] = {};
uint8_t hashResult[32] = {0x6b,0x86,0xb2,0x73,0xff,0x34,0xfc,0xe1,
                          0x9d,0x6b,0x80,0x4e,0xff,0x5a,0x3f,0x57,
                          0x47,0xad,0xa4,0xea,0xa2,0x2f,0x1d,0x49,
                          0xc0,0x1e,0x52,0xdd,0xb7,0x87,0x5b,0x4b};
uint8_t RSA_public_key_4096_der[526] = 
{
    0x30, 0x82, 0x02, 0x0A, 0x02, 0x82, 0x02, 0x01, 0x00, 0xD3, 0xEF, 0x8F, 0x1F, 0xFA, 0x2C, 0x80,
    0x74, 0xC8, 0x7E, 0xCB, 0xEF, 0x06, 0x19, 0xB2, 0x08, 0x75, 0xF8, 0xA4, 0xD7, 0x47, 0x7A, 0x97,
    0x19, 0xAC, 0xEE, 0x6D, 0xCB, 0x5D, 0x91, 0x67, 0xBF, 0x67, 0x0B, 0xC3, 0xE6, 0x61, 0xFA, 0x00,
    0x8B, 0x07, 0x5A, 0xDD, 0x6A, 0x98, 0x9A, 0xBF, 0xB7, 0xA7, 0x6D, 0xDD, 0xC0, 0xF6, 0x16, 0x2A,
    0x00, 0xBD, 0x36, 0xE7, 0x67, 0x18, 0x98, 0x7E, 0xB3, 0x75, 0x37, 0xE9, 0xFC, 0x13, 0x1F, 0x25,
    0x67, 0xE0, 0x1F, 0xBB, 0x29, 0x4F, 0x44, 0xF1, 0x86, 0x40, 0xC3, 0xD9, 0x16, 0x20, 0xB6, 0x68,
    0x31, 0x8E, 0x40, 0xAA, 0xAC, 0x27, 0x02, 0xDC, 0x63, 0x81, 0xC4, 0x2E, 0x2E, 0xDF, 0x88, 0x18,
    0xEE, 0x80, 0x06, 0x52, 0xFD, 0x95, 0x55, 0x23, 0xAD, 0x72, 0x25, 0xD5, 0x68, 0xAD, 0xA6, 0x1A,
    0x1F, 0xBF, 0xD1, 0xBE, 0x5D, 0x51, 0xBD, 0xB2, 0x4A, 0xB7, 0xD4, 0x86, 0x35, 0x6C, 0x23, 0xE4,
    0x04, 0x7B, 0xA9, 0x6E, 0x02, 0x58, 0x55, 0x35, 0xF8, 0x55, 0x5A, 0xBE, 0x6D, 0x79, 0x7F, 0x9A,
    0xA5, 0xCA, 0x86, 0x6B, 0xCA, 0xF7, 0x98, 0x04, 0x28, 0x92, 0x72, 0xFA, 0xDD, 0x6F, 0xA8, 0x32,
    0x75, 0xB8, 0xFC, 0x0A, 0x37, 0x59, 0xF7, 0x87, 0x7E, 0x65, 0x64, 0x77, 0x16, 0x67, 0xA2, 0x95,
    0x99, 0x53, 0xD9, 0xDB, 0x1B, 0x4B, 0x74, 0x4B, 0x20, 0xC9, 0x2A, 0x7F, 0xFE, 0x4F, 0xC8, 0x37,
    0x43, 0x62, 0xF8, 0x12, 0xE8, 0x63, 0x8D, 0xB5, 0xC0, 0x53, 0x3C, 0xBD, 0xDF, 0xCA, 0xC4, 0x51,
    0x85, 0x95, 0xF3, 0x9A, 0x77, 0x74, 0xBA, 0x24, 0x49, 0x02, 0x47, 0x3E, 0xA8, 0xD0, 0x80, 0xA3,
    0xB5, 0xB6, 0x52, 0x5E, 0x6A, 0xC1, 0xA3, 0x67, 0xF2, 0x27, 0xF9, 0xF2, 0x1E, 0x0C, 0x76, 0xF3,
    0x18, 0x06, 0xCE, 0x40, 0x53, 0x94, 0x51, 0xD8, 0x34, 0x8F, 0x1D, 0xE7, 0x97, 0x48, 0x75, 0xA2,
    0xDC, 0x55, 0x8A, 0x3F, 0xE0, 0x51, 0xAA, 0x93, 0xBB, 0x57, 0x1C, 0x85, 0x5B, 0x91, 0x4E, 0xFC,
    0x4B, 0xC3, 0xCB, 0x62, 0x0B, 0xFD, 0x3C, 0xF2, 0x0D, 0xB6, 0xD4, 0xE9, 0xC1, 0xA0, 0xA4, 0xFB,
    0x72, 0xB2, 0x09, 0xF7, 0xB5, 0xF0, 0xE0, 0x44, 0x70, 0xBD, 0xDD, 0x5B, 0x52, 0x06, 0x15, 0x76,
    0xBF, 0x7B, 0x87, 0xD4, 0x50, 0x02, 0x41, 0x1D, 0x9F, 0x66, 0x80, 0xE2, 0x8F, 0x5E, 0x7D, 0x10,
    0xD0, 0x27, 0x2D, 0xF4, 0x0F, 0x22, 0x85, 0xC1, 0xE7, 0xC6, 0xD7, 0x80, 0x56, 0x63, 0xEA, 0x73,
    0x5F, 0x20, 0xE8, 0x0E, 0xE0, 0xDB, 0xAA, 0x05, 0x0F, 0x24, 0xFA, 0x6F, 0x44, 0x07, 0x7A, 0xC7,
    0x27, 0x77, 0x50, 0x83, 0x23, 0xE6, 0x81, 0xEF, 0xFC, 0x69, 0x18, 0x5C, 0xA2, 0x46, 0x05, 0xD1,
    0xFD, 0xA1, 0xA0, 0xCB, 0xED, 0x9E, 0x8D, 0x57, 0x35, 0x85, 0xC2, 0x2B, 0x0E, 0x71, 0x63, 0xE6,
    0xFE, 0x59, 0x0E, 0x50, 0x9C, 0xA2, 0xFA, 0xD9, 0x69, 0xA5, 0xE3, 0xFD, 0xAD, 0x89, 0x2A, 0x3F,
    0x8B, 0x05, 0x99, 0x5D, 0xC0, 0x33, 0x06, 0x8E, 0x69, 0x56, 0x3D, 0x9D, 0x45, 0xD5, 0x7B, 0x34,
    0x57, 0x6C, 0xE7, 0xCB, 0x81, 0xF6, 0x61, 0xF1, 0x68, 0xD2, 0xC6, 0xFF, 0xDA, 0xA3, 0x8D, 0x54,
    0x91, 0xE4, 0x79, 0x26, 0x73, 0x73, 0xE6, 0x2F, 0xB9, 0x2B, 0x63, 0x38, 0x9F, 0x45, 0xF2, 0x7E,
    0x6F, 0x3D, 0x75, 0x40, 0xA8, 0xE8, 0x5A, 0x59, 0x8E, 0x67, 0x72, 0xD5, 0x3B, 0xB5, 0x42, 0xB5,
    0xF7, 0xFF, 0x20, 0x41, 0x5C, 0x18, 0x43, 0x02, 0xA7, 0xC7, 0xFB, 0x09, 0x82, 0xA7, 0x4B, 0x92,
    0x17, 0x47, 0xE6, 0x9A, 0xD4, 0xEF, 0x44, 0x26, 0xE0, 0x8D, 0xB6, 0x94, 0x06, 0x76, 0x30, 0xCE,
    0x0B, 0x21, 0x6D, 0x52, 0x66, 0xC3, 0x7B, 0x82, 0x0D, 0x02, 0x03, 0x01, 0x00, 0x01
};

/* USER CODE END PV */

/* Private function declare --------------------------------------------------*/
/* USER CODE BEGIN PFDC */
extern void mbedtls_config_init();
/* USER CODE END PFDC */
static void Board_Init(void);

/* Private user code ---------------------------------------------------------*/
/* USER CODE BEGIN 0 */
void StepReadFlash_And_HardWare_CalculateSHA(void)
{
    uint8_t* flashAddr = (uint8_t*)0x80000;  // Flash起始地址
    uint32_t chunkSize = 8192;                  // 每次读取8K (8192字节)
    uint32_t totalSize = 524288;                // 总共读取512K (524288字节)

    // 分步计算SHA-256
    uint32_t bytesRead = 0;

    // 第一块: 使用MSG_START标志
    HCU_DRV_GenerateSHA(flashAddr, chunkSize, totalSize, HCU_SHA_256, MSG_START, NULL);
    bytesRead += chunkSize;
    
    // 中间块: 使用MSG_MIDDLE标志
    while (bytesRead + chunkSize < totalSize) {
        uint8_t* currentAddr = flashAddr + bytesRead;          
        
        HCU_DRV_GenerateSHA(currentAddr, chunkSize, 0, HCU_SHA_256, MSG_MIDDLE, NULL);
        bytesRead += chunkSize;
    }

    // 最后一块: 使用MSG_END标志并获取结果
    uint8_t *lastAddr = flashAddr + bytesRead;
    uint32_t lastChunkSize = totalSize - bytesRead;
    HCU_DRV_GenerateSHA(lastAddr, lastChunkSize, 0, HCU_SHA_256, MSG_END, hwshaResult);
}
/* USER CODE END 0 */


/**
 * @brief  The application entry point.
 * @retval int
 */
int main(void)
{
    /* USER CODE BEGIN 1 */
    // uint8_t hashResult[32] = {0};
    psa_status_t status;
    mbedtls_pk_context pk_ctx;  // 公钥上下文（用于提取公钥）
    mbedtls_rsa_context *RSA_Context; // RSA 上下文（用于签名验证）

    /* USER CODE END 1 */ 
    Board_Init();
    /* USER CODE BEGIN 2 */

    // 1. 初始化mbedtls的配置并填充明文数据
    mbedtls_config_init();
    mbedtls_pk_init(&pk_ctx);

#if READ_FLASH_TEST_APPLICATION
    // //初始化mbedtls sha56
    // PINS_DRV_SetPins(GPIOE, (1 << 23));
    // #if hash_calculate_MODE
    //     // 1. 读取Flash并使用硬件计算SHA256作为明文
    //     StepReadFlash_And_HardWare_CalculateSHA();
    //     PINS_DRV_ClearPins(GPIOE, (1 << 23));
    //     //将硬件计算的hash值填到本工程的message数组
    //     for(uint8_t i = 0; i < 32; i++){
    //         message[i] = hwshaResult[i];
    //     }

    //     // 2. 计算明文的hash（SHA256）值
    //     HCU_DRV_GenerateSHA(message, 
    //                         sizeof(message), 
    //                         sizeof(message), 
    //                         HCU_SHA_256, 
    //                         MSG_ALL, 
    // //                         hashResult);
    // #else
    //     PINS_DRV_SetPins(GPIOE, (1 << 23));
    //     // 1. 读取Flash并使用软件计算SHA256作为明文
    //     StepReadFlash_And_SoftWare_CalculateSHA();
    //     PINS_DRV_ClearPins(GPIOE, (1 << 23));
    //     //将软件计算的hash值填到本工程的message数组
    //     for(uint8_t i = 0; i < 32; i++){
    //         message[i] = swshaResult[i];
    //     }

    //     // 2. 计算明文的hash（SHA256）值
    //     Message_And_SoftWare_CalculateSHA(message, sizeof(message), hashResult);
    // #endif
#endif


    // 3. 解析数据
    PRINTF("Parsing RSA DER...\n\r");
    int parse_ret = mbedtls_pk_parse_public_key(
        &pk_ctx,                  
        RSA_public_key_4096_der,      
        sizeof(RSA_public_key_4096_der)   
    );

    if (parse_ret != 0) {
        PRINTF("公钥解析失败\n");
        status = parse_ret;
        mbedtls_pk_free(&pk_ctx); 
        return status;
    }

    RSA_Context = mbedtls_pk_rsa(pk_ctx);

    // 4. 设置填充方式和哈希算法
    PRINTF("Setting RSA padding...\n\r");
    mbedtls_rsa_set_padding(RSA_Context, 
                            MBEDTLS_RSA_PKCS_V15, 
                            MBEDTLS_MD_SHA256);
    if(parse_ret != 0)
    {
        PRINTF("设置 RSA 填充方式失败\n");
        status = parse_ret;
        mbedtls_pk_free(&pk_ctx);
        mbedtls_rsa_free(RSA_Context);
        return status;
    }

    // 5. 完成 RSA 公钥结构
    PRINTF("Completing RSA public key structure...\n\r");
    mbedtls_rsa_complete(RSA_Context);
    if(parse_ret != 0)
    {
        PRINTF("完成 RSA 公钥结构失败\n");
        status = parse_ret;
        mbedtls_pk_free(&pk_ctx);
        mbedtls_rsa_free(RSA_Context);
        return status;
    }

    // 6. 验证签名
    PRINTF("Verifying RSA signature...\n\r");
    parse_ret = mbedtls_rsa_pkcs1_verify(RSA_Context,
                                        MBEDTLS_MD_SHA256,
                                        32,
                                        hashResult,
                                        signature_data);
    if(parse_ret != 0)
    {
        PRINTF("RSA 签名验证失败\n");
    }
    else
    {
        PRINTF("RSA 签名验证成功\n");
    }
    mbedtls_pk_free(&pk_ctx);
    mbedtls_rsa_free(RSA_Context);
    /* USER CODE END 2 */

    /* Infinite loop */
    /* USER CODE BEGIN WHILE */
    while (1)
    {
        /* USER CODE END WHILE */
        /* USER CODE BEGIN 3 */
    }
    /* USER CODE END 3 */
}

static void Board_Init(void)
{
    CLOCK_SYS_Init(g_clockManConfigsArr,CLOCK_MANAGER_CONFIG_CNT,g_clockManCallbacksArr,CLOCK_MANAGER_CALLBACK_CNT);
    CLOCK_SYS_UpdateConfiguration(CLOCK_MANAGER_ACTIVE_INDEX,CLOCK_MANAGER_POLICY_AGREEMENT);
    PINS_DRV_Init(NUM_OF_CONFIGURED_PINS0,g_pin_mux_InitConfigArr0);
    UTILITY_PRINT_Init();
    HCU_DRV_Init(&hcu_config0,&hcu_config0_State);
    FLASH_DRV_Init(0,&flash_config0,&flash_config0_State);
}

/* USER CODE BEGIN 4 */
/* USER CODE END 4 */

公钥：
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
哈希值：
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
签名：
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

https://www.codertools.net/tools/rsa.php?lang=zh

https://www.tingyutools.com/tools/rsa-sign

https://emn178.github.io/online-tools/rsa/verify/

Funchovy

此外发现demo脚本里的pem转hexarray，生成出来的公钥数组只有526字节，但是改用openssl pem 转hexarray生成的550字节的公钥数组也不行。

uint8_t RSA_public_key_4096_der[550] =
    {
        0x30, 0x82, 0x02, 0x22, 0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01,
        0x01, 0x05, 0x00, 0x03, 0x82, 0x02, 0x0F, 0x00, 0x30, 0x82, 0x02, 0x0A, 0x02, 0x82, 0x02, 0x01,
        0x00, 0xD3, 0xEF, 0x8F, 0x1F, 0xFA, 0x2C, 0x80, 0x74, 0xC8, 0x7E, 0xCB, 0xEF, 0x06, 0x19, 0xB2,
        0x08, 0x75, 0xF8, 0xA4, 0xD7, 0x47, 0x7A, 0x97, 0x19, 0xAC, 0xEE, 0x6D, 0xCB, 0x5D, 0x91, 0x67,
        0xBF, 0x67, 0x0B, 0xC3, 0xE6, 0x61, 0xFA, 0x00, 0x8B, 0x07, 0x5A, 0xDD, 0x6A, 0x98, 0x9A, 0xBF,
        0xB7, 0xA7, 0x6D, 0xDD, 0xC0, 0xF6, 0x16, 0x2A, 0x00, 0xBD, 0x36, 0xE7, 0x67, 0x18, 0x98, 0x7E,
        0xB3, 0x75, 0x37, 0xE9, 0xFC, 0x13, 0x1F, 0x25, 0x67, 0xE0, 0x1F, 0xBB, 0x29, 0x4F, 0x44, 0xF1,
        0x86, 0x40, 0xC3, 0xD9, 0x16, 0x20, 0xB6, 0x68, 0x31, 0x8E, 0x40, 0xAA, 0xAC, 0x27, 0x02, 0xDC,
        0x63, 0x81, 0xC4, 0x2E, 0x2E, 0xDF, 0x88, 0x18, 0xEE, 0x80, 0x06, 0x52, 0xFD, 0x95, 0x55, 0x23,
        0xAD, 0x72, 0x25, 0xD5, 0x68, 0xAD, 0xA6, 0x1A, 0x1F, 0xBF, 0xD1, 0xBE, 0x5D, 0x51, 0xBD, 0xB2,
        0x4A, 0xB7, 0xD4, 0x86, 0x35, 0x6C, 0x23, 0xE4, 0x04, 0x7B, 0xA9, 0x6E, 0x02, 0x58, 0x55, 0x35,
        0xF8, 0x55, 0x5A, 0xBE, 0x6D, 0x79, 0x7F, 0x9A, 0xA5, 0xCA, 0x86, 0x6B, 0xCA, 0xF7, 0x98, 0x04,
        0x28, 0x92, 0x72, 0xFA, 0xDD, 0x6F, 0xA8, 0x32, 0x75, 0xB8, 0xFC, 0x0A, 0x37, 0x59, 0xF7, 0x87,
        0x7E, 0x65, 0x64, 0x77, 0x16, 0x67, 0xA2, 0x95, 0x99, 0x53, 0xD9, 0xDB, 0x1B, 0x4B, 0x74, 0x4B,
        0x20, 0xC9, 0x2A, 0x7F, 0xFE, 0x4F, 0xC8, 0x37, 0x43, 0x62, 0xF8, 0x12, 0xE8, 0x63, 0x8D, 0xB5,
        0xC0, 0x53, 0x3C, 0xBD, 0xDF, 0xCA, 0xC4, 0x51, 0x85, 0x95, 0xF3, 0x9A, 0x77, 0x74, 0xBA, 0x24,
        0x49, 0x02, 0x47, 0x3E, 0xA8, 0xD0, 0x80, 0xA3, 0xB5, 0xB6, 0x52, 0x5E, 0x6A, 0xC1, 0xA3, 0x67,
        0xF2, 0x27, 0xF9, 0xF2, 0x1E, 0x0C, 0x76, 0xF3, 0x18, 0x06, 0xCE, 0x40, 0x53, 0x94, 0x51, 0xD8,
        0x34, 0x8F, 0x1D, 0xE7, 0x97, 0x48, 0x75, 0xA2, 0xDC, 0x55, 0x8A, 0x3F, 0xE0, 0x51, 0xAA, 0x93,
        0xBB, 0x57, 0x1C, 0x85, 0x5B, 0x91, 0x4E, 0xFC, 0x4B, 0xC3, 0xCB, 0x62, 0x0B, 0xFD, 0x3C, 0xF2,
        0x0D, 0xB6, 0xD4, 0xE9, 0xC1, 0xA0, 0xA4, 0xFB, 0x72, 0xB2, 0x09, 0xF7, 0xB5, 0xF0, 0xE0, 0x44,
        0x70, 0xBD, 0xDD, 0x5B, 0x52, 0x06, 0x15, 0x76, 0xBF, 0x7B, 0x87, 0xD4, 0x50, 0x02, 0x41, 0x1D,
        0x9F, 0x66, 0x80, 0xE2, 0x8F, 0x5E, 0x7D, 0x10, 0xD0, 0x27, 0x2D, 0xF4, 0x0F, 0x22, 0x85, 0xC1,
        0xE7, 0xC6, 0xD7, 0x80, 0x56, 0x63, 0xEA, 0x73, 0x5F, 0x20, 0xE8, 0x0E, 0xE0, 0xDB, 0xAA, 0x05,
        0x0F, 0x24, 0xFA, 0x6F, 0x44, 0x07, 0x7A, 0xC7, 0x27, 0x77, 0x50, 0x83, 0x23, 0xE6, 0x81, 0xEF,
        0xFC, 0x69, 0x18, 0x5C, 0xA2, 0x46, 0x05, 0xD1, 0xFD, 0xA1, 0xA0, 0xCB, 0xED, 0x9E, 0x8D, 0x57,
        0x35, 0x85, 0xC2, 0x2B, 0x0E, 0x71, 0x63, 0xE6, 0xFE, 0x59, 0x0E, 0x50, 0x9C, 0xA2, 0xFA, 0xD9,
        0x69, 0xA5, 0xE3, 0xFD, 0xAD, 0x89, 0x2A, 0x3F, 0x8B, 0x05, 0x99, 0x5D, 0xC0, 0x33, 0x06, 0x8E,
        0x69, 0x56, 0x3D, 0x9D, 0x45, 0xD5, 0x7B, 0x34, 0x57, 0x6C, 0xE7, 0xCB, 0x81, 0xF6, 0x61, 0xF1,
        0x68, 0xD2, 0xC6, 0xFF, 0xDA, 0xA3, 0x8D, 0x54, 0x91, 0xE4, 0x79, 0x26, 0x73, 0x73, 0xE6, 0x2F,
        0xB9, 0x2B, 0x63, 0x38, 0x9F, 0x45, 0xF2, 0x7E, 0x6F, 0x3D, 0x75, 0x40, 0xA8, 0xE8, 0x5A, 0x59,
        0x8E, 0x67, 0x72, 0xD5, 0x3B, 0xB5, 0x42, 0xB5, 0xF7, 0xFF, 0x20, 0x41, 0x5C, 0x18, 0x43, 0x02,
        0xA7, 0xC7, 0xFB, 0x09, 0x82, 0xA7, 0x4B, 0x92, 0x17, 0x47, 0xE6, 0x9A, 0xD4, 0xEF, 0x44, 0x26,
        0xE0, 0x8D, 0xB6, 0x94, 0x06, 0x76, 0x30, 0xCE, 0x0B, 0x21, 0x6D, 0x52, 0x66, 0xC3, 0x7B, 0x82,
        0x0D, 0x02, 0x03, 0x01, 0x00, 0x01};

gaoSheng

您的帖子上面的有两处要改：
1、要用550字节公钥(你后面已经改了)
2、这个hashResult 应该是填经过sha256计算的值（你现在填的是消息）
这也是您能通过那些校验的原因(网站上面要填的消息)

SHA256("6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b")
= e0bc614e4fd035a488619799853b075143deea596c477b8dc077e309c0fe42e9

https://www.lzltool.com/data-sha256
所以此处应改成

uint8_t hashResult[32] = {0xe0,0xbc,0x61,0x4e,0x4f,0xd0,0x35,0xa4,
                          0x88,0x61,0x97,0x99,0x85,0x3b,0x07,0x51,
                          0x43,0xde,0xea,0x59,0x6c,0x47,0x7b,0x8d,
                          0xc0,0x77,0xe3,0x09,0xc0,0xfe,0x42,0xe9};

这是我经过验证后的工程487967b1-db09-48f3-ad79-d1f86661164a-MbedTls_with_RSA_Demo_1.zip

YunTu Forum

RSA MbedTLS验签失败

Online Users