python授权加密的几种常见方案

import rsa
# 生成 2048 位密钥
(public_key, private_key) = rsa.newkeys(2048)
# 保存私钥（供授权中心使用）
with open("private.pem", "wb") as priv_file:
    priv_file.write(private_key.save_pkcs1())
# 保存公钥（供客户端使用）
with open("public.pem", "wb") as pub_file:
    pub_file.write(public_key.save_pkcs1())
print("RSA 密钥对已生成：private.pem（私钥） 和 public.pem（公钥）")

import rsa
import json
import base64
import os
from datetime import datetime
# 读取私钥
with open("private.pem", "rb") as priv_file:
    private_key = rsa.PrivateKey.load_pkcs1(priv_file.read())
# 获取目标设备的 CPU ID
# def get_machine_id():
    # try:
        # if os.name == 'nt':
            # machine_id = os.popen("wmic cpu get ProcessorId").read().split()[1]
            # print('授权设备的唯一标识:'+machine_id)
        # else:
            # return os.popen("cat /etc/machine-id").read().strip()
    # except:
        # return "UNKNOWN"
# 生成授权文件
def generate_license(user, expire_date, machine_id):
    license_data = {
        "user": user,
        "expire": expire_date,
        "machine_id": machine_id
    }
    print(license_data)
    # 签名授权数据
    data_str = f"{user}|{expire_date}|{machine_id}".encode()
    signature = rsa.sign(data_str, private_key, 'SHA-256')
    # 添加签名并保存 JSON
    license_data["signature"] = base64.b64encode(signature).decode()
    with open("license.json", "w") as license_file:
        json.dump(license_data, license_file, indent=4)
    print("✅ 授权文件 license.json 生成成功！")
# 示例：为某个客户生成授权
generate_license(user="client1", expire_date="2025-12-31", machine_id="机器码")

{
    "user": "client1",
    "expire": "2025-12-31",
    "machine_id": "BFE***ED",
    "signature": "R62******8/w=="
}

import os
import time
import threading
import json
import tkinter as tk
from tkinter import messagebox, ttk
from datetime import datetime
import boto3
import configparser
from elasticsearch import Elasticsearch
from urllib3.exceptions import InsecureRequestWarning
import warnings
import base64
import logging  # 添加 logging 模块
import rsa
import hashlib
from botocore.exceptions import ClientError, EndpointConnectionError
warnings.filterwarnings("ignore", category=InsecureRequestWarning)
# ==================== 配置日志 ====================
logging.basicConfig(
    level=logging.INFO,
    format='%(asctime)s - %(levelname)s - %(message)s',
    filename=f'logs/file_search_{datetime.now().strftime("%Y%m%d_%H%M%S")}.log',
    filemode='w'
)
logger = logging.getLogger(__name__)
# ==================== 授权管理 ====================
LICENSE_FILE = "license.json"
PUBLIC_KEY_FILE = "public.pem"
def get_machine_id():
    """ 获取当前设备的唯一标识（CPU ID）"""
    try:
        if os.name == 'nt':
            machine_id = os.popen("wmic cpu get ProcessorId").read().split()[1]
            print('获取当前设备的唯一标识:'+machine_id)
            return machine_id
        else:
            return os.popen("cat /etc/machine-id").read().strip()
    except:
        return "UNKNOWN"
def load_rsa_public_key():
    """ 加载 RSA 公钥 """
    try:
        with open(PUBLIC_KEY_FILE, "rb") as f:
            return rsa.PublicKey.load_pkcs1(f.read())
    except Exception as e:
        logger.error(f"无法加载公钥: {e}")
        messagebox.showerror("授权错误", "授权系统异常，无法加载公钥")
        exit(1)
def verify_license():
    """ 验证授权码 """
    if not os.path.exists(LICENSE_FILE):
        messagebox.showerror("授权错误", "未找到授权文件，请联系管理员")
        exit(1)
    try:
        with open(LICENSE_FILE, "r") as f:
            license_data = json.load(f)
        user = license_data.get("user")
        expire = license_data.get("expire")
        machine_id = license_data.get("machine_id")
        signature = base64.b64decode(license_data.get("signature"))
        if not all([user, expire, machine_id, signature]):
            messagebox.showerror("授权错误", "授权文件损坏")
            exit(1)
        # 校验过期时间
        if datetime.strptime(expire, "%Y-%m-%d") < datetime.now():
            messagebox.showerror("授权错误", "授权已过期，请联系管理员续费")
            exit(1)
        # 校验机器码
        if machine_id != get_machine_id():
            print(machine_id)
            print(get_machine_id())
            messagebox.showerror("授权错误", "设备不匹配，授权无效")
            exit(1)
        # 验证签名
        public_key = load_rsa_public_key()
        data_str = f"{user}|{expire}|{machine_id}".encode()
        try:
            rsa.verify(data_str, signature, public_key)
        except rsa.VerificationError:
            messagebox.showerror("授权错误", "授权码无效或被篡改")
            exit(1)
        logger.info("授权验证成功")
    except Exception as e:
        logger.error(f"授权验证失败: {e}")
        messagebox.showerror("授权错误", "授权文件无效")
        exit(1)