关于SM2算法中设置密钥的问题

[htlsmilework]

您好！

我参考 https://dongle.go-pkg.com/zh/crypto/sm2.html 文档的示例，在这段代码中遇到了一个问题：

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	kp := keypair.NewSm2KeyPair()
	kp.PublicKey = []byte(`-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoEcz1UBgi0DQgAEVJKqUmu59VTLhqCiVBmKqRjL5MXy
RHKwFAI+qG2Hqy5Wf5cLRlIf7aSMKqwGvYpP6gVOqQpvBdDQhDqr8rqrYA==
-----END PUBLIC KEY-----`)
	kp.PrivateKey = []byte(`-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqBHM9VAYItBG0wawIBAQQgKvp8GZUkqT8UH/Z5
u8mjNM0JIvqmFolR6LczGEZmSvmhRANCAARUkqpSa7n1VMuGoKJUGYqpGMvkxfJE
crAUAj6obYerLlZ/lwtGUh/tpIwqrAa9ik/qBU6pCm8F0NCEOqvyuqtg
-----END PRIVATE KEY-----`)
	encrypter := dongle.Encrypt.FromString("hello world").BySm2(kp)
	if encrypter.Error != nil {
		log.Fatalf("加密错误: %v\n", encrypter.Error)
	}
	rawString := encrypter.ToRawString()
	decrypter := dongle.Decrypt.FromRawString(rawString).BySm2(kp)
	if decrypter.Error != nil {
		log.Fatalf("解密错误: %v\n", decrypter.Error)
	}
	val := decrypter.ToString() // hello world
	log.Println(val)
}

golang 版本：1.25
dongle 版本：v1.2.3
我原本期望能得到：

hello world

但实际上我得到了：

2026/05/11 15:13:18 加密错误: crypto/sm2: failed to encrypt data: invalid public key: asn1: structure error: point not on curve

我尝试过从其他地方生成SM2密钥对，也是会报错：

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	kp := keypair.NewSm2KeyPair()
	kp.PublicKey = []byte(`-----BEGIN PUBLIC KEY-----
MDQ2YjBhYzU4OTQ3M2YyYmQyODc3NTE5NGI2OWIzODhiN2ViMDI3OGRjZDA2Zjcy
NDZmY2I3OTk2YjdjZDM4ZDkwMjVmMjBjZmQyZGM5ZWNkOTQzMTdjOGYzNDI1ZjYx
YzZlZDZmZDMxYWZjYjM0YmNiYTNhOGVhM2YzYTQ1NTc4OA==
-----END PUBLIC KEY-----`)
	kp.PrivateKey = []byte(`-----BEGIN PRIVATE KEY-----
NmVmNWIyMmUwYjY0OTgxZjVjOWVkZDZkYjY3MGJkODFmYTMwNWZiOGRiN2FhNDI1
NjVkMDliZmY1OWVkZDVlMg==
-----END PRIVATE KEY-----`)
	encrypter := dongle.Encrypt.FromString("hello world").BySm2(kp)
	if encrypter.Error != nil {
		log.Printf("加密错误: %v\n", encrypter.Error)
		return
	}
	rawString := encrypter.ToRawString()
	decrypter := dongle.Decrypt.FromRawString(rawString).BySm2(kp)
	if decrypter.Error != nil {
		log.Printf("解密错误: %v\n", decrypter.Error)
		return
	}
	val := decrypter.ToString() // hello world
	log.Println(val)
}

运行结果：

2026/05/11 15:16:28 加密错误: crypto/sm2: failed to encrypt data: invalid public key: asn1: syntax error: invalid SubjectPublicKeyInfo

只有尝试本地生成密钥，不做任何操作，才能获得正确结果：

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	kp := keypair.NewSm2KeyPair()
	err := kp.GenKeyPair()
	if err != nil {
		log.Fatal(err)
	}
	encrypter := dongle.Encrypt.FromString("hello world").BySm2(kp)
	if encrypter.Error != nil {
		log.Printf("加密错误: %v\n", encrypter.Error)
		return
	}
	rawString := encrypter.ToRawString()
	decrypter := dongle.Decrypt.FromRawString(rawString).BySm2(kp)
	if decrypter.Error != nil {
		log.Printf("解密错误: %v\n", decrypter.Error)
		return
	}
	val := decrypter.ToString() // hello world
	log.Println(val)
}

运行结果：

2026/05/11 15:18:25 hello world

谢谢！

[htlsmilework]

Ed25519算法似乎也有设置密钥的问题

(1) 这里使用的密钥对应该是直接复制的RSA密钥对，存在问题，会直接触发panic

https://dongle.go-pkg.com/zh/signature/ed25519.html#%E4%BB%8E%E5%B7%B2%E6%9C%89-pem-%E6%A0%BC%E5%BC%8F%E5%AF%86%E9%92%A5%E8%AE%BE%E7%BD%AE%E5%AF%86%E9%92%A5%E5%AF%B9

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	kp := keypair.NewEd25519KeyPair()
	kp.PublicKey = []byte(`-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqzZNa9VrcewyU6wDoV7Y9kAHq
X1VK0B3Rb6GNmQe4zLEfce7cVTaLrc4VGTKl35tADG1cRHqtaG4S/WttpiGZBhxJ
y4MpOXb6eIPiVLsn2lL+rJo5XdbSr3gyjxEOQQ97ihtw4lDd5wMo4bIOuw1LtMez
HC1outlM6x+/BB0BSQIDAQAB
-----END PUBLIC KEY-----`)
	kp.PrivateKey = []byte(`-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----`)
	signer := dongle.Sign.FromString("hello world").ByEd25519(kp)
	if signer.Error != nil {
		log.Fatalf("签名错误: %v\n", signer.Error)
	}
	rawString := signer.ToRawString()
	verifier := dongle.Verify.FromString("hello world").WithRawSign([]byte(rawString)).ByEd25519(kp)
	if verifier.Error != nil {
		log.Fatalf("验证错误: %v\n", verifier.Error)
	}
	val := verifier.ToBool() // true
	log.Println(val)
}

输出结果：

panic: interface conversion: interface {} is *rsa.PrivateKey, not ed25519.PrivateKey

goroutine 1 [running]:
github.com/dromara/dongle/crypto/keypair.(*Ed25519KeyPair).ParsePrivateKey(0xc0000b0000)
	C:/Users/***/go/pkg/mod/github.com/dromara/dongle@v1.2.3/crypto/keypair/ed25519.go:128 +0x56f

(2) 我尝试使用 https://www.codertools.net/tools/ed25519.php?lang=zh 生成Base64格式的密钥对，得到

// private
3zEp6ydcC0yh+FLiHnfGaypgz7FUEcpOuHyyLcvBD7U=

// public
i8Fq/M/s8wP92FKs9Zm6wTiepQG82WZGibtpbGon2TA=

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	var err error
	kp := keypair.NewEd25519KeyPair()
	err = kp.SetPublicKey([]byte(`i8Fq/M/s8wP92FKs9Zm6wTiepQG82WZGibtpbGon2TA=`))
	if err != nil {
		log.Fatal(err)
	}
	err = kp.SetPrivateKey([]byte(`3zEp6ydcC0yh+FLiHnfGaypgz7FUEcpOuHyyLcvBD7U=`))
	if err != nil {
		log.Fatal(err)
	}
	signer := dongle.Sign.FromString("hello world").ByEd25519(kp)
	if signer.Error != nil {
		log.Fatalf("签名错误: %v\n", signer.Error)
	}
	rawString := signer.ToRawString()
	verifier := dongle.Verify.FromString("hello world").WithRawSign([]byte(rawString)).ByEd25519(kp)
	if verifier.Error != nil {
		log.Fatalf("验证错误: %v\n", verifier.Error)
	}
	val := verifier.ToBool() // true
	log.Println(val)
}

输出结果：

2026/05/12 11:50:53 签名错误: crypto/ed25519: failed to sign data:  invalid private key: asn1: structure error: tags don't match (16 vs {class:3 tag:49 length:41 isCompound:false}) {optional:false explicit:false application:false private:false defaultValue:<nil> tag:<nil> stringType:0 timeType:0 set:false omitEmpty:false} pkcs8 @3

(3) 我尝试使用 https://tools.top/key-generator.html 生成的 Ed25519 PEM格式

// PEM格式私钥
-----BEGIN PRIVATE KEY-----
/9TzigBBHxzVYfTHfNIEVi6tzixiKfGYnoIR3MdKsIw=
-----END PRIVATE KEY-----

// PEM格式公钥
-----BEGIN PUBLIC KEY-----
xePhVnBNR2n2vuaefoDWHGJUXREg4uEVkeqsPlKJ35E=
-----END PUBLIC KEY-----

package main

import (
	"log"

	"github.com/dromara/dongle"
	"github.com/dromara/dongle/crypto/keypair"
)

func main() {
	kp := keypair.NewEd25519KeyPair()
	kp.PublicKey = []byte(`-----BEGIN PUBLIC KEY-----
xePhVnBNR2n2vuaefoDWHGJUXREg4uEVkeqsPlKJ35E=
-----END PUBLIC KEY-----`)
	kp.PrivateKey = []byte(`-----BEGIN PRIVATE KEY-----
/9TzigBBHxzVYfTHfNIEVi6tzixiKfGYnoIR3MdKsIw=
-----END PRIVATE KEY-----`)
	signer := dongle.Sign.FromString("hello world").ByEd25519(kp)
	if signer.Error != nil {
		log.Fatalf("签名错误: %v\n", signer.Error)
	}
	rawString := signer.ToRawString()
	verifier := dongle.Verify.FromString("hello world").WithRawSign([]byte(rawString)).ByEd25519(kp)
	if verifier.Error != nil {
		log.Fatalf("验证错误: %v\n", verifier.Error)
	}
	val := verifier.ToBool() // true
	log.Println(val)
}

输出结果：

2026/05/12 11:54:42 签名错误: crypto/ed25519: failed to sign data:  invalid private key: asn1: structure error: tags don't match (16 vs {class:3 tag:178046208 length:65 isCompound:true}) {optional:false explicit:false application:false private:false defaultValue:<nil> tag:<nil> stringType:0 timeType:0 set:false omitEmpty:false} pkcs8 @6

[gouguoyin]

感谢反馈，我排查下

[htlsmilework]

我看了一下源码，有一些疑问，kp.PublicKey 和 kp.PrivateKey 是以PEM格式保存的

将 PEM 格式密钥压缩成 DER 格式使用的是 kp.CompressPublicKey 和 CompressPrivateKey，这两个方法都是直接操作字符串，简单去掉头尾 -----BEGIN -----END 换行符、空白符，为什么不是使用下面的做法：

p1, _ := pem.Decode(kp.PublicKey)
if p1 != nil {
	publicKeyDer := base64.StdEncoding.EncodeToString(p1.Bytes)
}

请问是有什么设计上的考量吗？直接操作字符串会不会漏掉PEM结构里可选的 Block.Headers，我注意到 ParsePublicKey 方法里使用的是 pem.Decode