c# - 将 key 导入到 Azure Key Vault (C#)

Question

我在使用 SDK 时将 EC key 导入到 Azure Key Vault 时遇到问题。

代码:

var ecKey = Nethereum.Signer.EthECKey.GenerateKey();
var privateKey = ecKey.GetPrivateKeyAsBytes().ToHex();

var privateKeyBytes = Encoding.UTF8.GetBytes(privateKey);
var privateKeyInt =
        new Org.BouncyCastle.Math.BigInteger(+1, privateKeyBytes);
var parameters = SecNamedCurves.GetByName("secp256k1");
var ecPoint = parameters.G.Multiply(privateKeyInt).Normalize();
var privateKeyX = ecPoint.Normalize().XCoord.ToBigInteger()
        .ToByteArrayUnsigned();
var privateKeyY = ecPoint.Normalize().YCoord.ToBigInteger()
        .ToByteArrayUnsigned();

var jwk = new JsonWebKey(new [] { KeyOperation.Sign, KeyOperation.Verify, });
jwk.CurveName = KeyCurveName.P256K;
jwk.KeyType = KeyType.Ec;
jwk.D = privateKeyBytes;

jwk.X = privateKeyX;
jwk.Y = privateKeyY;

await keyClient.ImportKeyAsync(keyName, jwk, cancellationToken);`

来自 Azure 的错误，这对于准确了解问题所在没有太大帮助:

Azure.RequestFailedException: EC key is not valid - cannot instantiate crypto service.Status: 400 (Bad Request)ErrorCode: BadParameter

注意:在此示例中，我生成了一个新 key ，但通常它是我们现有的私钥。

你们知道这里出了什么问题吗？

Answer 1

已通过 Topaco's answer 解决.

我做错的是我对私钥进行编码，然后转换为字节数组。

正确代码:

var ecKey = Nethereum.Signer.EthECKey.GenerateKey();
var privateKey = ecKey.GetPrivateKeyAsBytes();
var parameters = SecNamedCurves.GetByName("secp256k1");
var privateKeyInt =
    new Org.BouncyCastle.Math.BigInteger(+1, privateKey);
var ecPoint = parameters.G.Multiply(privateKeyInt).Normalize();
var privateKeyX = ecPoint.Normalize().XCoord.ToBigInteger()
    .ToByteArrayUnsigned();
var privateKeyY = ecPoint.Normalize().YCoord.ToBigInteger()
    .ToByteArrayUnsigned();

var jwk = new JsonWebKey(new [] { KeyOperation.Sign, KeyOperation.Verify, })
{
    CurveName = KeyCurveName.P256K,
    KeyType = KeyType.Ec,
    D = privateKey,
    X = privateKeyX,
    Y = privateKeyY,
};

await keyClient.ImportKeyAsync(keyName, jwk, cancellationToken);