40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
|
import os
|
|||
|
|
import sys
|
|||
|
|
from cryptography.hazmat.primitives import hashes
|
|||
|
|
from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
|
|||
|
|
from cryptography.hazmat.primitives import constant_time
|
|||
|
|
from cryptography.hazmat.backends import default_backend
|
|||
|
|
|
|||
|
|
def generate_key(strength, key_file_path):
|
|||
|
|
# 验证加密强度参数
|
|||
|
|
if strength not in ['AES-128', 'AES-256', 'AES-512']:
|
|||
|
|
print("错误：加密强度必须是 AES-128、AES-256 或 AES-512")
|
|||
|
|
sys.exit(1)
|
|||
|
|
|
|||
|
|
# 设置密钥长度
|
|||
|
|
if strength == 'AES-128':
|
|||
|
|
key_length = 16 # 16 字节 = 128 位
|
|||
|
|
elif strength == 'AES-256':
|
|||
|
|
key_length = 32 # 32 字节 = 256 位
|
|||
|
|
elif strength == 'AES-512':
|
|||
|
|
key_length = 64 # 64 字节 = 512 位（非标准 AES 密钥长度）
|
|||
|
|
|
|||
|
|
# 生成随机密钥
|
|||
|
|
key = os.urandom(key_length)
|
|||
|
|
|
|||
|
|
# 将密钥写入指定的文件路径
|
|||
|
|
with open(key_file_path, 'wb') as key_file:
|
|||
|
|
key_file.write(key)
|
|||
|
|
|
|||
|
|
print(f'加密密钥已生成并保存到 {key_file_path}，密钥强度：{strength}')
|
|||
|
|
|
|||
|
|
if __name__ == '__main__':
|
|||
|
|
if len(sys.argv) != 3:
|
|||
|
|
print("用法：python generate_key.py AES-128|AES-256|AES-512 /path/to/your/encryption.key")
|
|||
|
|
sys.exit(1)
|
|||
|
|
|
|||
|
|
strength = sys.argv[1]
|
|||
|
|
key_file_path = sys.argv[2]
|
|||
|
|
|
|||
|
|
generate_key(strength, key_file_path)
|