PHP 怎么PHP 环签名

wen PHP项目 2026-07-28 260

本文目录导读：

PHP 怎么PHP 环签名

环签名基本原理
PHP实现环形签名示例
关键特点
注意事项

我来详细介绍如何在PHP中实现环签名（Ring Signature）。

环签名基本原理

环签名是一种数字签名方案，它允许一个签名者代表一个群体签名，而验证者只能验证签名是由群体中的某个成员生成,但无法确定具体是谁。

PHP实现环形签名示例

基于RSA的环签名实现

<?php
class RingSignature {
    private $publicKeys = [];
    private $privateKey = null;
    /**
     * 添加公钥到环中
     */
    public function addPublicKey($publicKey) {
        $this->publicKeys[] = $publicKey;
    }
    /**
     * 设置签名者的私钥
     */
    public function setPrivateKey($privateKey) {
        $this->privateKey = $privateKey;
    }
    /**
     * 生成环签名
     */
    public function sign($message) {
        if (empty($this->publicKeys) || $this->privateKey === null) {
            throw new Exception("需要设置公钥和私钥");
        }
        $n = count($this->publicKeys);
        $signatures = [];
        $randomValues = [];
        // 生成随机值
        for ($i = 0; $i < $n; $i++) {
            $randomValues[$i] = bin2hex(random_bytes(32));
        }
        // 计算签名者的位置
        $signerIndex = $this->findSignerIndex();
        // 生成环签名
        for ($i = 0; $i < $n; $i++) {
            if ($i == $signerIndex) {
                // 使用私钥签名
                openssl_sign($randomValues[$i], $signature, $this->privateKey);
                $signatures[$i] = base64_encode($signature);
            } else {
                // 使用公钥加密
                openssl_public_encrypt($randomValues[$i], $encrypted, $this->publicKeys[$i]);
                $signatures[$i] = base64_encode($encrypted);
            }
        }
        return json_encode([
            'message' => $message,
            'signatures' => $signatures,
            'public_keys' => array_map(function($key) {
                return $this->keyToPem($key);
            }, $this->publicKeys)
        ]);
    }
    /**
     * 验证环签名
     */
    public function verify($signedData) {
        $data = json_decode($signedData, true);
        if (!$data || !isset($data['signatures']) || !isset($data['public_keys'])) {
            return false;
        }
        $signatures = $data['signatures'];
        $publicKeys = $data['public_keys'];
        $message = $data['message'];
        $n = count($signatures);
        $validCount = 0;
        // 验证每个签名
        for ($i = 0; $i < $n; $i++) {
            $signature = base64_decode($signatures[$i]);
            $publicKey = openssl_get_publickey($publicKeys[$i]);
            // 尝试验证签名
            $result = openssl_verify($message, $signature, $publicKey);
            if ($result) {
                $validCount++;
            }
        }
        // 如果至少一个签名有效，则环签名有效
        return $validCount >= 1;
    }
    /**
     * 查找签名者在环中的索引
     */
    private function findSignerIndex() {
        $privateKeyDetails = openssl_pkey_get_details($this->privateKey);
        foreach ($this->publicKeys as $index => $publicKey) {
            $publicKeyDetails = openssl_pkey_get_details($publicKey);
            if ($privateKeyDetails['rsa']['n'] === $publicKeyDetails['rsa']['n']) {
                return $index;
            }
        }
        throw new Exception("私钥不在环中");
    }
    /**
     * 将密钥转换为PEM格式
     */
    private function keyToPem($key) {
        return openssl_pkey_get_details($key) ? openssl_pkey_get_details($key)['key'] : '';
    }
    /**
     * 生成RSA密钥对
     */
    public static function generateKeyPair() {
        $config = [
            "digest_alg" => "sha512",
            "private_key_bits" => 2048,
            "private_key_type" => OPENSSL_KEYTYPE_RSA,
        ];
        $res = openssl_pkey_new($config);
        openssl_pkey_export($res, $privateKey);
        return [
            'private' => $privateKey,
            'public' => openssl_pkey_get_details($res)['key']
        ];
    }
}
// 使用示例
try {
    // 创建环形签名实例
    $ringSign = new RingSignature();
    // 生成多个密钥对
    $keys = [];
    for ($i = 0; $i < 5; $i++) {
        $keys[$i] = RingSignature::generateKeyPair();
    }
    // 添加公钥到环中
    foreach ($keys as $key) {
        $ringSign->addPublicKey(openssl_get_publickey($key['public']));
    }
    // 设置签名者（使用第三个用户的私钥）
    $ringSign->setPrivateKey(openssl_get_privatekey($keys[2]['private']));
    // 生成环签名
    $message = "这是一条需要匿名的消息";
    $signedData = $ringSign->sign($message);
    echo "环签名生成成功！\n";
    echo "签名数据：\n" . $signedData . "\n\n";
    // 验证环签名
    $isValid = $ringSign->verify($signedData);
    echo "验证结果：" . ($isValid ? "有效" : "无效") . "\n";
} catch (Exception $e) {
    echo "错误：" . $e->getMessage() . "\n";
}

更简单的ECC环签名实现

<?php
class SimpleRingSignature {
    private $members = [];
    /**
     * 添加环成员
     */
    public function addMember($memberId, $publicKey) {
        $this->members[$memberId] = $publicKey;
    }
    /**
     * 生成环签名（简化版）
     */
    public function sign($message, $signerId, $privateKey) {
        if (!isset($this->members[$signerId])) {
            throw new Exception("签名者不在环中");
        }
        $memberIds = array_keys($this->members);
        $signatures = [];
        // 模拟环签名过程
        foreach ($memberIds as $id) {
            if ($id == $signerId) {
                // 实际签名者使用私钥
                $signatures[$id] = hash_hmac('sha256', $message . $id, $privateKey);
            } else {
                // 非签名者使用公钥进行模拟
                $signatures[$id] = hash('sha256', $message . $id . $this->members[$id]);
            }
        }
        return [
            'message' => $message,
            'ring' => $this->members,
            'signatures' => $signatures,
            'hash' => hash('sha256', json_encode($signatures))
        ];
    }
    /**
     * 验证环签名
     */
    public function verify($signedData) {
        $validCount = 0;
        foreach ($signedData['signatures'] as $memberId => $signature) {
            // 检查签名是否来自环成员
            if (isset($this->members[$memberId])) {
                $validCount++;
            }
        }
        // 至少一个有效签名
        return $validCount >= 1;
    }
}
// 使用示例
$ringSign = new SimpleRingSignature();
// 添加环成员
$ringSign->addMember('user1', 'public_key_1');
$ringSign->addMember('user2', 'public_key_2');
$ringSign->addMember('user3', 'public_key_3');
// 签名
$signature = $ringSign->sign('机密消息', 'user2', 'private_key_2');
echo "环签名生成成功\n";
// 验证
$result = $ringSign->verify($signature);
echo "签名验证：" . ($result ? "通过" : "失败") . "\n";