1# 明文导入密钥(C/C++) 2 3 4以明文导入ECC密钥为例。具体的场景介绍及支持的算法规格,请参考[密钥导入的支持的算法](huks-key-import-overview.md#支持的算法)。 5 6## 在CMake脚本中链接相关动态库 7```txt 8 target_link_libraries(entry PUBLIC libhuks_ndk.z.so) 9``` 10 11## 开发步骤 12 131. 指定密钥别名keyAlias。 14 密钥别名的最大长度为128字节。 15 162. 封装密钥属性集和密钥材料。通过[OH_Huks_InitParamSet](../../reference/apis-universal-keystore-kit/_huks_param_set_api.md#oh_huks_initparamset)、[OH_Huks_AddParams](../../reference/apis-universal-keystore-kit/_huks_param_set_api.md#oh_huks_addparams)、[OH_Huks_BuildParamSet](../../reference/apis-universal-keystore-kit/_huks_param_set_api.md#oh_huks_buildparamset)构造密钥属性集paramSet。 17 - 密钥属性集中必须包含[OH_Huks_KeyAlg](../../reference/apis-universal-keystore-kit/_huks_type_api.md#oh_huks_keyalg)、[OH_Huks_KeySize](../../reference/apis-universal-keystore-kit/_huks_type_api.md#oh_huks_keysize)、[OH_Huks_KeyPurpose](../../reference/apis-universal-keystore-kit/_huks_type_api.md#oh_huks_keypurpose)属性。 18 - 密钥材料须符合[HUKS密钥材料格式](huks-concepts.md#密钥材料格式)。 19 203. 调用[OH_Huks_ImportKeyItem](../../reference/apis-universal-keystore-kit/_huks_key_api.md#oh_huks_importkeyitem),传入密钥别名和密钥属性集,导入密钥。 21 22```c++ 23/* 以下以明文导入ECC密钥为例 */ 24#include "huks/native_huks_api.h" 25#include "huks/native_huks_param.h" 26#include <string.h> 27OH_Huks_Result InitParamSet(struct OH_Huks_ParamSet **paramSet, const struct OH_Huks_Param *params, 28 uint32_t paramCount) { 29 OH_Huks_Result ret = OH_Huks_InitParamSet(paramSet); 30 if (ret.errorCode != OH_HUKS_SUCCESS) { 31 return ret; 32 } 33 ret = OH_Huks_AddParams(*paramSet, params, paramCount); 34 if (ret.errorCode != OH_HUKS_SUCCESS) { 35 OH_Huks_FreeParamSet(paramSet); 36 return ret; 37 } 38 ret = OH_Huks_BuildParamSet(paramSet); 39 if (ret.errorCode != OH_HUKS_SUCCESS) { 40 OH_Huks_FreeParamSet(paramSet); 41 return ret; 42 } 43 return ret; 44} 45struct OH_Huks_Param g_testImportKeyParam[] = {{.tag = OH_HUKS_TAG_ALGORITHM, .uint32Param = OH_HUKS_ALG_ECC}, 46 {.tag = OH_HUKS_TAG_PURPOSE, .uint32Param = OH_HUKS_KEY_PURPOSE_AGREE}, 47 {.tag = OH_HUKS_TAG_KEY_SIZE, .uint32Param = OH_HUKS_ECC_KEY_SIZE_256}, 48 {.tag = OH_HUKS_TAG_DIGEST, .uint32Param = OH_HUKS_DIGEST_NONE}}; 49 50static napi_value ImportKey(napi_env env, napi_callback_info info) { 51 const char *alias = "test_import"; 52 struct OH_Huks_Blob aliasBlob = {.size = (uint32_t)strlen(alias), .data = (uint8_t *)alias}; 53 /* DER格式的公钥,用于后续导入密钥 */ 54 uint8_t pubKey[OH_HUKS_ECC_KEY_SIZE_256] = { 55 0x30, 0x2A, 0x30, 0x05, 0x06, 0x03, 0x2B, 0x65, 0x6E, 0x03, 0x21, 0x00, 0xD2, 0x36, 0x9E, 0xCF, 56 0xF0, 0x61, 0x5B, 0x73, 0xCE, 0x4F, 0xF0, 0x40, 0x2B, 0x89, 0x18, 0x3E, 0x06, 0x33, 0x60, 0xC6 57 }; 58 struct OH_Huks_Blob publicKey = {OH_HUKS_ECC_KEY_SIZE_256, pubKey}; 59 struct OH_Huks_ParamSet *testImportKeyParamSet = nullptr; 60 struct OH_Huks_Result ohResult; 61 do { 62 ohResult = InitParamSet(&testImportKeyParamSet, g_testImportKeyParam, 63 sizeof(g_testImportKeyParam) / sizeof(OH_Huks_Param)); 64 if (ohResult.errorCode != OH_HUKS_SUCCESS) { 65 break; 66 } 67 if (ohResult.errorCode != OH_HUKS_SUCCESS) { 68 break; 69 } 70 /* 4. Import Key */ 71 char newKey[] = "test_import"; 72 struct OH_Huks_Blob newKeyAlias = {.size = (uint32_t)strlen(newKey), .data = (uint8_t *)newKey}; 73 ohResult = OH_Huks_ImportKeyItem(&newKeyAlias, testImportKeyParamSet, &publicKey); 74 } while (0); 75 OH_Huks_FreeParamSet(&testImportKeyParamSet); 76 napi_value ret; 77 napi_create_int32(env, ohResult.errorCode, &ret); 78 return ret; 79} 80``` 81