WebSocket 프로토콜의 보안 및 암호화된 전송 구현

const fs = require('fs'); const https = require('https'); const WebSocket = require('ws'); const server = https.createServer({ cert: fs.readFileSync('path/to/cert.pem'), key: fs.readFileSync('path/to/key.pem') }); const wss = new WebSocket.Server({ server }); wss.on('connection', function (ws) { ws.on('message', function (message) { console.log('Received:', message); }); ws.send('Hello, client!'); }); server.listen(8080, function () { console.log('Server is listening on port 8080'); });

const crypto = require('crypto'); // 获得加密密钥与初始向量 const key = 'your_secret_key'; const iv = crypto.randomBytes(16); // 加密函数 function encrypt(text) { const cipher = crypto.createCipheriv('aes-256-cbc', key, iv); let encrypted = cipher.update(text, 'utf8', 'hex'); encrypted += cipher.final('hex'); return encrypted; } // 解密函数 function decrypt(encrypted) { const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv); let decrypted = decipher.update(encrypted, 'hex', 'utf8'); decrypted += decipher.final('utf8'); return decrypted; } // 示例 const plainText = 'Hello, WebSocket!'; const encryptedText = encrypt(plainText); const decryptedText = decrypt(encryptedText); console.log('Plain text:', plainText); console.log('Encrypted text:', encryptedText); console.log('Decrypted text:', decryptedText);

const crypto = require('crypto'); // 使用HMAC签名函数 function signMessage(message, secret) { const hmac = crypto.createHmac('sha256', secret); hmac.update(message); return hmac.digest('hex'); } // 签名验证函数 function verifyMessage(message, signature, secret) { const hmac = crypto.createHmac('sha256', secret); hmac.update(message); return hmac.digest('hex') === signature; } // 示例 const message = 'Hello, WebSocket!'; const secret = 'your_secret_key'; const signature = signMessage(message, secret); const isValid = verifyMessage(message, signature, secret); console.log('Message:', message); console.log('Signature:', signature); console.log('Is valid:', isValid);