序列化公钥时“无法反序列化密钥数据”

Question

我正在尝试使用“加密”模块加载公钥，看起来我只是复制了他们的代码（posthere），只做了一些小改动：

from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import hashes, serialization

def encrypt(message, publicKeyPath):
  with open(publicKeyPath, 'rb') as keyFile:
    privateKey = serialization.load_pem_private_key(
      keyFile.read(),
      password=None,
      backend=default_backend()
    )

  print(privateKey)

message = 'This message will be encrypted'

publicKeyPath = '/(path to key)/My First Key_public.pem'

encryptedMessage = encrypt(message, publicKeyPath)

但是，我不断收到错误“无法反序列化关键数据”。以下是完整的回溯：

Traceback (most recent call last):
  File "/Users/max.s.haberman/Documents/Code/Experiments/Encryption/encryption2.py", line 23, in <module>
    encryptedMessage = encrypt(message, publicKeyPath)
  File "/Users/max.s.haberman/Documents/Code/Experiments/Encryption/encryption2.py", line 9, in encrypt
    backend=default_backend()
  File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/cryptography/hazmat/primitives/serialization/base.py", line 16, in load_pem_private_key
    return backend.load_pem_private_key(data, password)
  File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/cryptography/hazmat/backends/openssl/backend.py", line 1186, in load_pem_private_key
    password,
  File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/cryptography/hazmat/backends/openssl/backend.py", line 1411, in _load_key
    self._handle_key_loading_error()
  File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/cryptography/hazmat/backends/openssl/backend.py", line 1465, in _handle_key_loading_error
    raise ValueError("Could not deserialize key data.")
ValueError: Could not deserialize key data.

以下是我正在使用的公钥，它在其他地方运行良好：

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaqpgfRRZa0H8A7v3ebJ
z+lM+j0Jdw2xftUoIDmGWkrQ0vJXnkCwP/zcALI/mgAlMtr4KDSrE0n7/+1u1uB+
DuhdjuGhu5EAAdA+N1yMOCRNfYRJFpAtQLO2qu6h6wU1HmVLIK87kyTAoVcn+HIX
4uMiQbNG7PH2Cv+VaQvA91I/tTcSkY/ZrGTYcFHa0k+sSGxqQDW7C7mu5RKssxAa
QCSnAUOjV+j1lUMvWYr8qs5yI4wRsFH6sP6m2/Ksrj1i3+DSOWJOy/WQs1e1CBcA
cVfyM+dflllneNkF6rnB0n2wIE4TeRatzy6AlSjQ7FohSkAfOMW6GwszVhEFSAu2
4QIDAQAB
-----END PUBLIC KEY-----

我错过什么了吗？我还有别的事要做吗？看起来其他StackOverflow用户也有这个问题，但我不认为他们的情况适用于我，因为我的密钥不包括spaces，一个有效的公钥已经被created等。任何帮助都是非常感谢的。提前谢谢

Answer 1

链接代码指的是专用密钥。但是对于加密，您需要公共密钥（解密需要私有密钥）：

publicKey = serialization.load_pem_public_key(
    keyFile.read(),
    backend=default_backend()
)
    

贴出的钥匙似乎没问题。它是PKCS8格式的PEM编码公钥

可以在here中找到（仍然缺少）加密的示例