敏感文档管理：客户信息 / 商业秘密在数字化系统中的加密存储方案

// 使用AES加密算法的示例代码
public class AesEncryptionService
{
    private readonly byte[] _key;
    
    public AesEncryptionService(byte[] key)
    {
        _key = key;
    }
    
    public byte[] Encrypt(byte[] data)
    {
        using var aes = Aes.Create();
        aes.Key = _key;
        aes.GenerateIV();
        
        using var encryptor = aes.CreateEncryptor();
        using var memoryStream = new MemoryStream();
        using var cryptoStream = new CryptoStream(memoryStream, encryptor, CryptoStreamMode.Write);
        
        cryptoStream.Write(data, 0, data.Length);
        cryptoStream.FlushFinalBlock();
        
        var iv = aes.IV;
        var encryptedData = memoryStream.ToArray();
        
        // 将IV和加密数据组合返回
        var result = new byte[iv.Length + encryptedData.Length];
        Buffer.BlockCopy(iv, 0, result, 0, iv.Length);
        Buffer.BlockCopy(encryptedData, 0, result, iv.Length, encryptedData.Length);
        
        return result;
    }
    
    // 解密方法类似，此处省略
}

// 前端加密示例 - 在数据传输前进行加密
async function encryptSensitiveData(data, publicKey) {
  try {
    // 生成随机的对称密钥
    const symmetricKey = await window.crypto.subtle.generateKey(
      {
        name: "AES-GCM",
        length: 256,
      },
      true,
      ["encrypt", "decrypt"]
    );
    
    // 使用对称密钥加密数据
    const encryptedData = await window.crypto.subtle.encrypt(
      {
        name: "AES-GCM",
        iv: window.crypto.getRandomValues(new Uint8Array(12)),
      },
      symmetricKey,
      new TextEncoder().encode(data)
    );
    
    // 使用非对称加密算法加密对称密钥
    const encryptedKey = await window.crypto.subtle.encrypt(
      {
        name: "RSA-OAEP",
      },
      publicKey,
      await window.crypto.subtle.exportKey("raw", symmetricKey)
    );
    
    return {
      encryptedData,
      encryptedKey
    };
  } catch (error) {
    console.error("加密失败:", error);
    throw error;
  }
}