如何在Swift iOS中使用具有自定义私钥的SHA256withRSA对字节数组进行签名

import Security

func generateKeyPair() throws -> (SecKey, SecKey) {
    let parameters: [String: Any] = [
        kSecAttrKeyType as String: kSecAttrKeyTypeRSA,
        kSecAttrKeySizeInBits as String: 2048
    ]
    
    var publicKey, privateKey: SecKey?
    let status = SecKeyGeneratePair(parameters as CFDictionary, &publicKey, &privateKey)
    guard status == errSecSuccess else {
        throw NSError(domain: NSOSStatusErrorDomain, code: Int(status), userInfo: nil)
    }
    
    return (publicKey!, privateKey!)
}

let (publicKey, privateKey) = try generateKeyPair()

func privateKeyToData(privateKey: SecKey) throws -> Data {
    let query: [String: Any] = [
        kSecValueRef as String: privateKey,
        kSecAttrKeyClass as String: kSecAttrKeyClassPrivate,
        kSecReturnData as String: true
    ]
    
    var data: AnyObject?
    let status = SecItemCopyMatching(query as CFDictionary, &data)
    guard status == errSecSuccess else {
        throw NSError(domain: NSOSStatusErrorDomain, code: Int(status), userInfo: nil)
    }
    
    return data as! Data
}

let privateKeyData = try privateKeyToData(privateKey: privateKey)

import CommonCrypto

func signData(data: Data, privateKeyData: Data) throws -> Data {
    var error: Unmanaged<CFError>?
    
    guard let privateKey = try? SecKeyCreateWithData(privateKeyData as CFData, [
        kSecAttrKeyType: kSecAttrKeyTypeRSA,
        kSecAttrKeyClass: kSecAttrKeyClassPrivate
    ] as CFDictionary, &error) else {
        throw error!.takeRetainedValue() as Error
    }
    
    let digest = UnsafeMutablePointer<UInt8>.allocate(capacity: Int(CC_SHA256_DIGEST_LENGTH))
    CC_SHA256((data as NSData).bytes, CC_LONG(data.count), digest)
    
    let signature = UnsafeMutablePointer<UInt8>.allocate(capacity: SecKeyGetBlockSize(privateKey))
    var signatureLength = SecKeyGetBlockSize(privateKey)
    
    let status = SecKeyRawSign(privateKey, .PKCS1SHA256, digest, CC_LONG(CC_SHA256_DIGEST_LENGTH), signature, &signatureLength)
    
    guard status == errSecSuccess else {
        throw NSError(domain: NSOSStatusErrorDomain, code: Int(status), userInfo: nil)
    }
    
    return Data(bytes: signature, count: signatureLength)
}

let dataToSign = "Hello, World!".data(using: .utf8)!
let signature = try signData(data: dataToSign, privateKeyData: privateKeyData)

func verifySignature(data: Data, signature: Data, publicKey: SecKey) throws -> Bool {
    let digest = UnsafeMutablePointer<UInt8>.allocate(capacity: Int(CC_SHA256_DIGEST_LENGTH))
    CC_SHA256((data as NSData).bytes, CC_LONG(data.count), digest)
    
    let status = SecKeyRawVerify(publicKey, .PKCS1SHA256, digest, CC_LONG(CC_SHA256_DIGEST_LENGTH), (signature as NSData).bytes, signature.count)
    
    if status == errSecSuccess {
        return true
    } else {
        return false
    }
}

let isSignatureValid = try verifySignature(data: dataToSign, signature: signature, publicKey: publicKey)