有没有办法在超级账本结构中获取用户私钥和公钥以进行数据加密

Question

I recently started learning hyperledger fabric, I'm working on a simple private blockchain for managing digital data, this data would be encrypted with user public key and can only be decrypted with the user private key, so my question is, is there a way to get user private and public key in hyperledger fabric for data encryption purposes

Answer 1

yes, fabric uses public-key infrastructure. Every transaction in the fabric is signed by the user's private key. And at chaincode level, you can get the public key of the user from its E-certs.

More about Identity from fabric docs https://hyperledger-fabric.readthedocs.io/en/release-2.0/identity/identity.html

CID golang package to get E-cert at chaincode level https://github.com/hyperledger/fabric-chaincode-go/tree/master/pkg/cid

Answer 2

Although MSP ECDSA keys are used to sign, you can use them to encrypt via ECDH. Basically you can derive the same shared secret from public key A and private key B as from public key B and private key A, so that you use that shared secret as a symmetric AES key to encrypt.

An example with openssl : https://jameshfisher.com/2017/04/14/openssl-ecc/ . You don't need to create the key pairs as you already have them. You can implement it in javascript with elliptic and crypto libraries.

You manage your own private and public keys (in your client's wallet after enrolling), but you have to arrange your reliable way to distribute the other's public key. You can easily verify that public key if it is embedded in a valid certificate, but the way to distribute it is in your hand.