使用pynacl用一个文件加密并用第二个文件解密

Question

我在下面用 Python 2.7 编写了一些代码，并在 mac os x 上使用了 pynacl，运行ning。它目前的工作方式如下所示，它将加密密码，然后再解密。我想知道最后几行解密是否可以放在单独的 python 文件中？单独的 python 文件是一个每天运行的 cronjob，需要运行的密码，这就是为什么我需要将解密部分放在文件 #2 上的原因。请让我知道任何建议。

我尝试将文件 #1 导入到文件 #2，甚至将文件 #1 中的所需变量保存到文件中，但是 "SealedBox" 无法保存到文件中，出现错误 "TypeError: argument 1 must be convertible to a buffer, not SealedBox"

#!/usr/bin/env python2


import nacl.utils
from nacl.public import PrivateKey, SealedBox
import getpass

# Generate Bob's private key, as we've done in the Box example
skbob = PrivateKey.generate()
pkbob = skbob.public_key

# Alice wishes to send a encrypted message to Bob,
# but prefers the message to be untraceable
sealed_box = SealedBox(pkbob)

# This is Alice's message
message = getpass.getpass("LDAP Password is:")

# Encrypt the message, it will carry the ephemeral key public part
# to let Bob decrypt it
encrypted = sealed_box.encrypt(message)

# Store the data with binary mode:
# with open('file.bin', 'wb') as f:
#   f.write(encrypted)

unseal_box = SealedBox(skbob)

# with open('file2.bin', 'wb') as f:
#   f.write(unseal_box)

# decrypt the received message, this is where File #2 would start
plaintext = unseal_box.decrypt(encrypted)
print(plaintext.decode('utf-8'))

Answer 1

你可以使用泡菜：

加密脚本

from nacl.public import PrivateKey, SealedBox
import getpass
import pickle

# Generate Bob's private key, as we've done in the Box example
skbob = PrivateKey.generate()
pkbob = skbob.public_key

# Alice wishes to send a encrypted message to Bob,
# but prefers the message to be untraceable
sealed_box = SealedBox(pkbob)

# This is Alice's message
message = getpass.getpass("LDAP Password is:")

# Encrypt the message, it will carry the ephemeral key public part
# to let Bob decrypt it
encrypted = sealed_box.encrypt(message.encode())

# Store the data with binary mode:
with open('file.bin', 'wb') as f:
    pickle.dump(encrypted, f)
with open('file2.bin', 'wb') as f:
    pickle.dump(skbob, f)

解密脚本

from nacl.public import SealedBox
import pickle

with open('file.bin', 'rb') as f:
    encrypted = pickle.load(f)
with open('file2.bin', 'rb') as f:
    skbob = pickle.load(f)

unseal_box = SealedBox(skbob)
# decrypt the received message, this is where File #2 would start
plaintext = unseal_box.decrypt(encrypted)
print(plaintext.decode('utf-8'))

使用pynacl用一个文件加密并用第二个文件解密

Using pynacl to encrypt with one file and decrypt with a second file

python

encryption

public-key-encryption

pynacl