rsa-aes-crypto 1.0.1

package/bin/index.js

@@ -0,0 +1,142 @@
+#!/usr/bin/env node
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+
+const publicKeyPath = path.join(__dirname, 'public.pem');
+const privateKeyPath = path.join(__dirname, 'private.pem');
+
+/** 生成 RSA 公钥/私钥 */
+function generateKeys() {
+	const { publicKey, privateKey } = crypto.generateKeyPairSync('rsa', {
+		modulusLength: 2048,
+		publicKeyEncoding: { type: 'pkcs1', format: 'pem' },
+		privateKeyEncoding: { type: 'pkcs1', format: 'pem' },
+	});
+	fs.writeFileSync(publicKeyPath, publicKey);
+	fs.writeFileSync(privateKeyPath, privateKey);
+	console.log('✅ RSA 公钥和私钥生成完成');
+}
+
+/** 加密文件（混合加密） */
+function encryptFile(inputFile, outputFile) {
+	const publicKey = fs.readFileSync(publicKeyPath, 'utf8');
+
+	// 随机生成 AES key 和 IV
+	const aesKey = crypto.randomBytes(32); // AES-256
+	const iv = crypto.randomBytes(16);
+
+	// 用 AES 流加密文件
+	const cipher = crypto.createCipheriv('aes-256-cbc', aesKey, iv);
+	const input = fs.createReadStream(inputFile);
+	const output = fs.createWriteStream(outputFile);
+
+	// 用 RSA 加密 AES key + IV
+	const keyIvBuffer = Buffer.concat([aesKey, iv]); // 32 + 16 = 48 bytes
+	const encryptedKeyIv = crypto.publicEncrypt(publicKey, keyIvBuffer);
+
+	// 写入 RSA 加密的 key 长度 + 加密 key + AES 数据
+	const keyLengthBuffer = Buffer.alloc(4);
+	keyLengthBuffer.writeUInt32BE(encryptedKeyIv.length, 0);
+	output.write(keyLengthBuffer);
+	output.write(encryptedKeyIv);
+
+	input.pipe(cipher).pipe(output);
+
+	output.on('finish', () => console.log(`✅ 文件加密完成：${outputFile}`));
+}
+
+/** 解密文件（混合加密） */
+function decryptFile(inputFile, outputFile) {
+	const privateKey = fs.readFileSync(privateKeyPath, 'utf8');
+	const input = fs.createReadStream(inputFile);
+
+	let headerRead = false;
+	let encryptedKeyIvLength = 0;
+	let encryptedKeyIv = Buffer.alloc(0);
+	let remainingBuffers = [];
+
+	input.on('readable', () => {
+		let chunk;
+		while ((chunk = input.read()) !== null) {
+			if (!headerRead) {
+				remainingBuffers.push(chunk);
+				const bufferConcat = Buffer.concat(remainingBuffers);
+				if (bufferConcat.length >= 4) {
+					encryptedKeyIvLength = bufferConcat.readUInt32BE(0);
+					if (bufferConcat.length >= 4 + encryptedKeyIvLength) {
+						encryptedKeyIv = bufferConcat.slice(
+							4,
+							4 + encryptedKeyIvLength,
+						);
+						const aesDataStart = 4 + encryptedKeyIvLength;
+						const aesData = bufferConcat.slice(aesDataStart);
+
+						// 解密 AES key + IV
+						const keyIvBuffer = crypto.privateDecrypt(
+							privateKey,
+							encryptedKeyIv,
+						);
+						const aesKey = keyIvBuffer.slice(0, 32);
+						const iv = keyIvBuffer.slice(32, 48);
+
+						// AES 解密流
+						const decipher = crypto.createDecipheriv(
+							'aes-256-cbc',
+							aesKey,
+							iv,
+						);
+						const output = fs.createWriteStream(outputFile);
+
+						// 把已经读到的 AES 数据先解密
+						const readable = crypto.Readable.from(aesData);
+						readable.pipe(decipher).pipe(output);
+
+						// 之后剩余的 input 数据直接解密
+						input.pipe(decipher);
+
+						output.on('finish', () =>
+							console.log(`✅ 文件解密完成：${outputFile}`),
+						);
+
+						headerRead = true;
+						remainingBuffers = null;
+						break;
+					}
+				}
+			}
+		}
+	});
+}
+
+// CLI
+const args = process.argv.slice(2);
+if (args[0] === 'genkey') {
+	generateKeys();
+} else if (args[0] === 'encrypt') {
+	const [_, inputFile, outputFile] = args;
+	if (!inputFile || !outputFile) {
+		console.log(
+			'用法: node rsa_aes_file_crypto.js encrypt <输入文件> <输出文件>',
+		);
+	} else {
+		encryptFile(inputFile, outputFile);
+	}
+} else if (args[0] === 'decrypt') {
+	const [_, inputFile, outputFile] = args;
+	if (!inputFile || !outputFile) {
+		console.log(
+			'用法: node rsa_aes_file_crypto.js decrypt <输入文件> <输出文件>',
+		);
+	} else {
+		decryptFile(inputFile, outputFile);
+	}
+} else {
+	console.log(`
+用法:
+  node rsa_aes_file_crypto.js genkey                  生成公钥/私钥
+  node rsa_aes_file_crypto.js encrypt <in> <out>    加密文件
+  node rsa_aes_file_crypto.js decrypt <in> <out>    解密文件
+`);
+}

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "rsa-aes-crypto",
+  "version": "1.0.1",
+  "description": "全局命令行工具，基于 RSA + AES 的文件加解密",
+  "bin": {
+    "rsa-aes-crypto": "bin/rsa-aes-crypto.js"
+  },
+  "author": "zifenggao",
+  "license": "MIT",
+  "dependencies": {}
+}