public class ECDSALibrary
public static void Test()
// 密钥名称
string keyName = " Anjou's ECDSA Key " ;
// 公钥,私钥
byte [] publicKeyBytes, privateKeyBytes;
CngKey cngKey;
// 打开密钥
if (CngKey.Exists(keyName))
cngKey = CngKey.Open(keyName);
// cngKey.Delete();
// 生成密钥
CngKeyCreationParameters creationParameters = new CngKeyCreationParameters();
// 允许以明文的形式导出私钥
creationParameters.ExportPolicy = CngExportPolicies.AllowPlaintextExport;
// 使用 ECDsaP256,ECDsaP384,ECDsaP521 签名长度分别是 64 Bytes, 96 Bytes, 132 Bytes。
cngKey = CngKey.Create(CngAlgorithm.ECDsaP256, keyName, creationParameters);
// 导出公钥
publicKeyBytes = cngKey.Export(CngKeyBlobFormat.EccPublicBlob);
// 导出私钥
privateKeyBytes = cngKey.Export(CngKeyBlobFormat.EccPrivateBlob);
// 签名数据
byte [] data = Encoding.Unicode.GetBytes( " 这里是要签名的字符串。 " );
// 签名
byte [] signature = SignData(data, keyName);
// 验证签名
bool verified = VerifyData(data,signature,publicKeyBytes);
/// <summary>
/// 使用私钥签名
/// </summary>
public static byte [] SignData( byte [] data, string keyName)
// 打开密钥
CngKey cngKey = CngKey.Open(keyName);
// 签名
ECDsaCng ecdsa = new ECDsaCng(cngKey);
byte [] signature = ecdsa.SignData(data);
ecdsa.Clear();
cngKey.Dispose();
return signature;
/// <summary>
/// 使用公钥验证签名
/// </summary>
public static bool VerifyData( byte [] data, byte [] signature, byte [] publicKey)
bool verified = false ;
// 导入公钥
CngKey cngKey = CngKey.Import(publicKey, CngKeyBlobFormat.EccPublicBlob);
// 验证签名
ECDsaCng ecdsa = new ECDsaCng(cngKey);
verified = ecdsa.VerifyData(data, signature);
ecdsa.Clear();
cngKey.Dispose();
return verified;