Java实现RSA工具类(加密、解密、签名、验签)

一、简介

  RSA是1977年由罗纳德·李维斯特(Ron Rivest)、阿迪·萨莫尔(Adi Shamir)和伦纳德·阿德曼(Leonard Adleman)一起提出的。RSA就是他们三人姓氏开头字母拼在一起组成的。
  RSA公开密钥密码体制是一种使用不同的加密密钥与解密密钥,“由已知加密密钥推导出解密密钥在计算上是不可行的”密码体制。

二、RSA

2.1 算法原理

  RSA公开密钥密码体制的原理是:根据数论,寻求两个大素数比较简单,而将它们的乘积进行因式分解却极其困难,因此可以将乘积公开作为加密密钥。

2.2RSA与RSA2区别

  RSA和RSA2分不清楚?你就记住一点:RSA2 密钥的长度至少为 2048;RSA密钥长度不限制,默认长度1024,推荐长度2048。(密钥长度必须是64的倍数,在512到65536位之间)

签名算法名称标准签名验证算法名称说明
RSASHA1WithRSA密钥长度不限制,默认长度1024,推荐长度2048
RSA2SHA256WithRSARSA2 密钥的长度至少为 2048

  标准算法签名名称可能还有使用到其他的,比如MD5WithRSA,本文都是采用的SHA1WithRSASHA256WithRSA

2.2 公钥加密、私钥解密、私钥签名、公钥验签

如下图所示双向对称加密双方都是有三个密钥的,比如:

组织/密钥支付宝公钥支付宝私钥商家公钥商家私钥
支付宝平台拥有拥有拥有(商家上传)-
商家拥有(支付宝平台下载)-拥有拥有

为了让大家分清楚这四者的区别,我们用支付宝支付进行举例,但是一定要知道两个前提:

  • 密钥是有两对,支付宝公钥和私钥,商家公钥和私钥
  • 公钥双方都会有(包括对方的),私钥只有自己拥有自己的,不会支付宝有商家私钥或者商家有支付宝私钥

当商户向支付宝发送订单请求时:
商户是用支付宝的公钥进行数据加密,用商户的私钥进行签名
支付宝接收数据后
支付宝可以用支付宝私钥进行数据的解密,用商户的公钥进行验签

当支付宝异步通知商户支付结果时:
支付宝是用商户的公钥进行数据加密,用支付宝私钥进行签名
商户接收数据后
商户就用商户的私钥进行解密,用支付宝公钥进行验签

结合上面的图表,这样大家就应该理解了吧。实际支付宝支付都有SDK,不用你进行实质的加密加签,只要你不把密钥传错就行了,这里也是举这个例子让大家了解RSA这种加密机制的安全性。

三、RsaUtil工具类

工具类里包含RSA及RSA2密钥生成,公钥加密、私钥解密、私钥签名、公钥验签等,可以仔细阅读我的注释,以示区别。

RsaUtil.java

package com.alian.csdn.utils;

import javax.crypto.Cipher;
import java.security.*;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.Base64;
import java.util.HashMap;
import java.util.Map;

/**
 * @program: CSDN
 * @description: RSA工具类
 * @author: Alian
 * @create: 2021-06-08 09:30:14
 **/
public class RsaUtil {

    //签名算法名称
    private static final String RSA_KEY_ALGORITHM = "RSA";

    //标准签名算法名称
    private static final String RSA_SIGNATURE_ALGORITHM = "SHA1withRSA";
    private static final String RSA2_SIGNATURE_ALGORITHM = "SHA256withRSA";

    //RSA密钥长度,默认密钥长度是1024,密钥长度必须是64的倍数,在512到65536位之间,不管是RSA还是RSA2长度推荐使用2048
    private static final int KEY_SIZE = 2048;

    /**
     * 生成密钥对
     *
     * @return 返回包含公私钥的map
     */
    public static Map<String, String> generateKey() {
        KeyPairGenerator keygen;
        try {
            keygen = KeyPairGenerator.getInstance(RSA_KEY_ALGORITHM);
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("RSA初始化密钥出现错误,算法异常");
        }
        SecureRandom secrand = new SecureRandom();
        //初始化随机产生器
        secrand.setSeed("Alian".getBytes());
        //初始化密钥生成器
        keygen.initialize(KEY_SIZE, secrand);
        KeyPair keyPair = keygen.genKeyPair();
        //获取公钥并转成base64编码
        byte[] pub_key = keyPair.getPublic().getEncoded();
        String publicKeyStr = Base64.getEncoder().encodeToString(pub_key);
        //获取私钥并转成base64编码
        byte[] pri_key = keyPair.getPrivate().getEncoded();
        String privateKeyStr = Base64.getEncoder().encodeToString(pri_key);
        //创建一个Map返回结果
        Map<String, String> keyPairMap = new HashMap<>();
        keyPairMap.put("publicKeyStr", publicKeyStr);
        keyPairMap.put("privateKeyStr", privateKeyStr);
        return keyPairMap;
    }

    /**
     * 公钥加密(用于数据加密)
     *
     * @param data         加密前的字符串
     * @param publicKeyStr base64编码后的公钥
     * @return base64编码后的字符串
     * @throws Exception
     */
    public static String encryptByPublicKey(String data, String publicKeyStr) throws Exception {
        //Java原生base64解码
        byte[] pubKey = Base64.getDecoder().decode(publicKeyStr);
        //创建X509编码密钥规范
        X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(pubKey);
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //根据X509编码密钥规范产生公钥对象
        PublicKey publicKey = keyFactory.generatePublic(x509KeySpec);
        //根据转换的名称获取密码对象Cipher(转换的名称:算法/工作模式/填充模式)
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        //用公钥初始化此Cipher对象(加密模式)
        cipher.init(Cipher.ENCRYPT_MODE, publicKey);
        //对数据加密
        byte[] encrypt = cipher.doFinal(data.getBytes());
        //返回base64编码后的字符串
        return Base64.getEncoder().encodeToString(encrypt);
    }

    /**
     * 私钥解密(用于数据解密)
     *
     * @param data          解密前的字符串
     * @param privateKeyStr 私钥
     * @return 解密后的字符串
     * @throws Exception
     */
    public static String decryptByPrivateKey(String data, String privateKeyStr) throws Exception {
        //Java原生base64解码
        byte[] priKey = Base64.getDecoder().decode(privateKeyStr);
        //创建PKCS8编码密钥规范
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(priKey);
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //根据PKCS8编码密钥规范产生私钥对象
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8KeySpec);
        //根据转换的名称获取密码对象Cipher(转换的名称:算法/工作模式/填充模式)
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        //用私钥初始化此Cipher对象(解密模式)
        cipher.init(Cipher.DECRYPT_MODE, privateKey);
        //对数据解密
        byte[] decrypt = cipher.doFinal(Base64.getDecoder().decode(data));
        //返回字符串
        return new String(decrypt);
    }

    /**
     * 私钥加密(用于数据签名)
     *
     * @param data          加密前的字符串
     * @param privateKeyStr base64编码后的私钥
     * @return base64编码后后的字符串
     * @throws Exception
     */
    public static String encryptByPrivateKey(String data, String privateKeyStr) throws Exception {
        //Java原生base64解码
        byte[] priKey = Base64.getDecoder().decode(privateKeyStr);
        //创建PKCS8编码密钥规范
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(priKey);
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //根据PKCS8编码密钥规范产生私钥对象
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8KeySpec);
        //根据转换的名称获取密码对象Cipher(转换的名称:算法/工作模式/填充模式)
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        //用私钥初始化此Cipher对象(加密模式)
        cipher.init(Cipher.ENCRYPT_MODE, privateKey);
        //对数据加密
        byte[] encrypt = cipher.doFinal(data.getBytes());
        //返回base64编码后的字符串
        return Base64.getEncoder().encodeToString(encrypt);
    }

    /**
     * 公钥解密(用于数据验签)
     *
     * @param data         解密前的字符串
     * @param publicKeyStr base64编码后的公钥
     * @return 解密后的字符串
     * @throws Exception
     */
    public static String decryptByPublicKey(String data, String publicKeyStr) throws Exception {
        //Java原生base64解码
        byte[] pubKey = Base64.getDecoder().decode(publicKeyStr);
        //创建X509编码密钥规范
        X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(pubKey);
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //根据X509编码密钥规范产生公钥对象
        PublicKey publicKey = keyFactory.generatePublic(x509KeySpec);
        //根据转换的名称获取密码对象Cipher(转换的名称:算法/工作模式/填充模式)
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        //用公钥初始化此Cipher对象(解密模式)
        cipher.init(Cipher.DECRYPT_MODE, publicKey);
        //对数据解密
        byte[] decrypt = cipher.doFinal(Base64.getDecoder().decode(data));
        //返回字符串
        return new String(decrypt);
    }

    /**
     * RSA签名
     *
     * @param data     待签名数据
     * @param priKey   私钥
     * @param signType RSA或RSA2
     * @return 签名
     * @throws Exception
     */
    public static String sign(byte[] data, byte[] priKey, String signType) throws Exception {
        //创建PKCS8编码密钥规范
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(priKey);
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //根据PKCS8编码密钥规范产生私钥对象
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8KeySpec);
        //标准签名算法名称(RSA还是RSA2)
        String algorithm = RSA_KEY_ALGORITHM.equals(signType) ? RSA_SIGNATURE_ALGORITHM : RSA2_SIGNATURE_ALGORITHM;
        //用指定算法产生签名对象Signature
        Signature signature = Signature.getInstance(algorithm);
        //用私钥初始化签名对象Signature
        signature.initSign(privateKey);
        //将待签名的数据传送给签名对象(须在初始化之后)
        signature.update(data);
        //返回签名结果字节数组
        byte[] sign = signature.sign();
        //返回Base64编码后的字符串
        return Base64.getEncoder().encodeToString(sign);
    }

    /**
     * RSA校验数字签名
     *
     * @param data     待校验数据
     * @param sign     数字签名
     * @param pubKey   公钥
     * @param signType RSA或RSA2
     * @return boolean 校验成功返回true,失败返回false
     */
    public static boolean verify(byte[] data, byte[] sign, byte[] pubKey, String signType) throws Exception {
        //返回转换指定算法的KeyFactory对象
        KeyFactory keyFactory = KeyFactory.getInstance(RSA_KEY_ALGORITHM);
        //创建X509编码密钥规范
        X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(pubKey);
        //根据X509编码密钥规范产生公钥对象
        PublicKey publicKey = keyFactory.generatePublic(x509KeySpec);
        //标准签名算法名称(RSA还是RSA2)
        String algorithm = RSA_KEY_ALGORITHM.equals(signType) ? RSA_SIGNATURE_ALGORITHM : RSA2_SIGNATURE_ALGORITHM;
        //用指定算法产生签名对象Signature
        Signature signature = Signature.getInstance(algorithm);
        //用公钥初始化签名对象,用于验证签名
        signature.initVerify(publicKey);
        //更新签名内容
        signature.update(data);
        //得到验证结果
        return signature.verify(sign);
    }
}

四、实践

4.1 数据的加密和解密

自动生成公钥和私钥,然后对数据进行加密和解密。

/**
     * RSA数据加密和解密
     *
     * @throws Exception
     */
    @Test
    public void encryptAndDecrypt() throws Exception {
        Map<String, String> keyMap = RsaUtil.generateKey();
        String publicKeyStr = keyMap.get("publicKeyStr");
        String privateKeyStr = keyMap.get("privateKeyStr");
        System.out.println("-----------------生成的公钥和私钥------------------------------");
        System.out.println("获取到的公钥:" + publicKeyStr);
        System.out.println("获取到的私钥:" + privateKeyStr);
        // 待加密数据
        String data = "tranSeq=1920542585&amount=100&payType=wechat";
        // 公钥加密
        System.out.println("-----------------加密和解密------------------------------");
        System.out.println("待加密的数据:" + data);
        String encrypt = RsaUtil.encryptByPublicKey(data, publicKeyStr);
        System.out.println("加密后数据:" + encrypt);
        // 私钥解密
        String decrypt = RsaUtil.decryptByPrivateKey(encrypt, privateKeyStr);
        System.out.println("解密后数据:" + decrypt);
    }

运行结果:

-----------------生成的公钥和私钥------------------------------
获取到的公钥:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohMRTo1UbmSXBl9gl4+BdQP7j5xB4PuDaM2UoIyX7t0X7djexOhzQ2z/ZZQRHLxw9y0a0MVSmGDQDUj6+yQKcgKgeZjsTajNsa0ceNhH64y4bDj8O9EWHqEwIAiDur3o9K0WFoXgIXeXS0G4puYNauu4hFEDM8FQE/BZ8C7OX2NLdCqqX6JIhfmq8pOlloLaDllS58XLtR8oIfQnBiwTIaxqYALUf/4Sh8DzN4mviIvnO7fcGFBTTw0aNTroRysbzRJldrlU77LtHgZAj019srcIEdZJmeA5nUweqyC+RWaDxDdh/WF9HNCfeLLtffTj7j4wQlRFvQylrejTVCaA4wIDAQAB
获取到的私钥:MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCiExFOjVRuZJcGX2CXj4F1A/uPnEHg+4NozZSgjJfu3Rft2N7E6HNDbP9llBEcvHD3LRrQxVKYYNANSPr7JApyAqB5mOxNqM2xrRx42EfrjLhsOPw70RYeoTAgCIO6vej0rRYWheAhd5dLQbim5g1q67iEUQMzwVAT8FnwLs5fY0t0KqpfokiF+aryk6WWgtoOWVLnxcu1Hygh9CcGLBMhrGpgAtR//hKHwPM3ia+Ii+c7t9wYUFNPDRo1OuhHKxvNEmV2uVTvsu0eBkCPTX2ytwgR1kmZ4DmdTB6rIL5FZoPEN2H9YX0c0J94su199OPuPjBCVEW9DKWt6NNUJoDjAgMBAAECggEAJARgwDggHzgzZ7MiYAwAFOUBrnRnH3xFQ7EL6nHUAb0YaD7dopyVoNJEH2q8MsqdwBBB+Usgg8Rf99PUEqN7vsJerycQvGFa9LUnsqM9uFbZVROE2jYo2D2x2CyMOZ+ieV1Nn0u49zcAZDUCt/Q/3xbrNlxafdHj3cp38iw0qHWn5JD4R3cBuZTvvlgrkPYXPHPYXJQ6y5bDDonb5FaDfdZRNuEdY73i2VT//DeivgZ+F4fj2uuxdTxW8dYmgXBrjjHAni6c06H7LCg8LTdam8jojVhLFvTnmwZALi0F2AMjZA4CL3bloHKjJwO6qwbKZdJ+WIeFsPsVZeoeQPQ24QKBgQD79ALiCDuwHZitEG4b1CPm2WzA3BMA0yiU+RBdFiPFbUqq8b1fMOcGwJhHw6gfV75t1BY2tso0++on9WPM6j6VPIGrbVhfGRmnCCBQ1HM26hRBAUYVhqi6VAdxrJbatzAkqjT5fMLbPRWDxWI+nhWNSHVulqEVP7AhZybQqZsG9wKBgQCkrX2L3erCBWfJ3cn14G9CMNy8gXU2LfD5TD1kTPDAp+e0pviIsxWGIbikZnVft7TdEb9l6V8W7QOnrqFQPluZOKeHNBIW6jx8L9pmUWU2fKOLiuNxeBy79xz24gqydfAkVhmkPYZJJ19cN2CvLXgrC13zv7SgfDkJ2TkK+qe+dQKBgCWz0wad8sic9S7YqZFygljWKmcFx7Y04vq/9onneTze6PCBsjPfboLdKSx8A9mE2NM4jIZtff7Fv7lxCBku6GSOpFzRxQqeB++t0KAn2oHaL2O23BT2jKMtVdvV1tEt3n9uFPVMjSAfmOuaCuSR5Wm58RC2a65xVFr7Q5yv9KnrAoGAImtorE1L/hWnJdhHmC660njoCjZ8y0A698BprIcwYvQ1R9sGY3wa6ZguwZ3wtnrtQK+u85wdlesgMnIboWwHNTVUPrwxc7ytu788xNoKb6MJg+cZtuPGDbuOwENqvPZNpSqh3WRGpw+lrN6eRL8aONT9ZC8Tj9+nBFn0xEizuukCgYA4sBJOJvdwxLXGkf87WWXjgpaVudLwfWquOy67hoM2Mn9Ilf3Wbl99rFJLq+QcHv9jllIza56E9ooVLYnMiVDzZNRceewYhCIExRppY7/sn/qeJHsymGU2S749zxNbwii6N1XmWncrr9kshP2sB3Cn5eUlr5YE8mQ++WJLD8Rhnw==
-----------------加密和解密------------------------------
待加密的数据:tranSeq=1920542585&amount=100&payType=wechat
加密后数据:RoXB0OyE8uHZS0tlO6yND8iv1m1MibLbyzVRWUM0vNBjm/mnMqO9hZxaCGlNBKhPoK3KA+V4cWpmRj8q+38Y5lQDudAJAJ6FlHJP3GJyTuJu4CoWv+sw5tGMb7cIdQFcREAitKrvxw5VXPIF4ex7XdvqcJQ2vVM1zbNKHXeYmg1GmIvMYnBWz0Z/sBIAocTM6eijlGwDqTUMOKX+fjIJWOEX1uLd4fdQ/bvK2nTJk0uK2y2id+rhbiLW9o7u+3CIUI3FroIaCMtpCa8G3qiFz8epZuFGLP+NhdBz4TjEheJBiEFZ+IkUttFFwhzww30Mb5EhN+JGhIxvS+bGKF0ukw==
解密后数据:tranSeq=1920542585&amount=100&payType=wechat

4.2 数据的签名和验签

自动生成公钥和私钥,然后对数据进行签名和验签。

/**
     * RSA数据签名和验签
     *
     * @throws Exception
     */
    @Test
    public void signAndVerify() throws Exception {
        Map<String, String> keyMap = RsaUtil.generateKey();
        String publicKeyStr = keyMap.get("publicKeyStr");
        String privateKeyStr = keyMap.get("privateKeyStr");
        System.out.println("-----------------生成的公钥和私钥------------------------------");
        System.out.println("获取到的公钥:" + publicKeyStr);
        System.out.println("获取到的私钥:" + privateKeyStr);
        // 数字签名
        String data = "tranSeq=1920542585&amount=100&payType=wechat";
        System.out.println("待签名的数据:" + data);
        String sign = RsaUtil.sign(data.getBytes(), Base64.getDecoder().decode(privateKeyStr), "RSA");
        System.out.println("数字签名结果:" + sign);
        boolean verify = RsaUtil.verify(data.getBytes(), Base64.getDecoder().decode(sign), Base64.getDecoder().decode(publicKeyStr), "RSA");
        System.out.println("数字签名验证结果:" + verify);
    }

运行结果:

-----------------生成的公钥和私钥------------------------------
获取到的公钥:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohMRTo1UbmSXBl9gl4+BdQP7j5xB4PuDaM2UoIyX7t0X7djexOhzQ2z/ZZQRHLxw9y0a0MVSmGDQDUj6+yQKcgKgeZjsTajNsa0ceNhH64y4bDj8O9EWHqEwIAiDur3o9K0WFoXgIXeXS0G4puYNauu4hFEDM8FQE/BZ8C7OX2NLdCqqX6JIhfmq8pOlloLaDllS58XLtR8oIfQnBiwTIaxqYALUf/4Sh8DzN4mviIvnO7fcGFBTTw0aNTroRysbzRJldrlU77LtHgZAj019srcIEdZJmeA5nUweqyC+RWaDxDdh/WF9HNCfeLLtffTj7j4wQlRFvQylrejTVCaA4wIDAQAB
获取到的私钥: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
待签名的数据:tranSeq=1920542585&amount=100&payType=wechat
数字签名结果:Nz3i87LUGbn32vsxreuSENkSAxcQGLMYnxzGr+Yb2maTuXVcG0JIhYV7p3/oYgooD3hcvdBjt9jjUNZo1pTSM10mFBvoHLCCrbKln+Ia9EqgwIyOV2xF/qdNrvwBD1iuogUXfVjJ6+jf07uJOUUub+hIlbhdLAN+Rol4Xa7TU2nopPlG5sQuM5HmmIov6jQ+RgWk8nIi/IMbskOIGaHrFR1/N4MVm4tpwOAbpg1LGw6Xv2lPtlHd7clKWrmlPVI+QnTddw7sJffo2Hfalx0roHuBk2kuPWsNP1/8Q6UsMay5fkB0Nh43Lw3Dqahsyi+8PEbEIldJ2pWhEQX2p6u3bQ==
数字签名验证结果:true

结语

  以上就是今天要讲的内容,本文仅仅简单介绍了RSA,简单编写了一个RsaUtil工具类,包含了RSA和RSA2两种模式。实现了密钥生成、公钥加密、私钥解密、私钥签名、公钥验签,有兴趣的同学可以先去了解一下RSA具体的算法原理,希望对您有所帮助,欢迎大家评论交流。

以下是一个简单的Java RSA工具类的示例代码: ```java import java.security.Key; import java.security.KeyFactory; import java.security.KeyPair; import java.security.KeyPairGenerator; import java.security.PrivateKey; import java.security.PublicKey; import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.X509EncodedKeySpec; import javax.crypto.Cipher; import org.apache.commons.codec.binary.Base64; public class RSAUtils { private static final String RSA_ALGORITHM = "RSA"; public static KeyPair generateKeyPair() throws Exception { KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance(RSA_ALGORITHM); keyPairGenerator.initialize(2048); return keyPairGenerator.genKeyPair(); } public static String encrypt(String plainText, PublicKey publicKey) throws Exception { Cipher cipher = Cipher.getInstance(RSA_ALGORITHM); cipher.init(Cipher.ENCRYPT_MODE, publicKey); byte[] encryptedBytes = cipher.doFinal(plainText.getBytes()); return Base64.encodeBase64String(encryptedBytes); } public static String decrypt(String encryptedText, PrivateKey privateKey) throws Exception { Cipher cipher = Cipher.getInstance(RSA_ALGORITHM); cipher.init(Cipher.DECRYPT_MODE, privateKey); byte[] encryptedBytes = Base64.decodeBase64(encryptedText); byte[] decryptedBytes = cipher.doFinal(encryptedBytes); return new String(decryptedBytes); } public static PublicKey getPublicKey(byte[] publicKeyBytes) throws Exception { X509EncodedKeySpec keySpec = new X509EncodedKeySpec(publicKeyBytes); KeyFactory keyFactory = KeyFactory.getInstance(RSA_ALGORITHM); return keyFactory.generatePublic(keySpec); } public static PrivateKey getPrivateKey(byte[] privateKeyBytes) throws Exception { PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKeyBytes); KeyFactory keyFactory = KeyFactory.getInstance(RSA_ALGORITHM); return keyFactory.generatePrivate(keySpec); } } ``` 使用示例: ```java public class Main { public static void main(String[] args) { try { // 生成密钥对 KeyPair keyPair = RSAUtils.generateKeyPair(); PublicKey publicKey = keyPair.getPublic(); PrivateKey privateKey = keyPair.getPrivate(); // 加密 String plainText = "Hello, RSA!"; String encryptedText = RSAUtils.encrypt(plainText, publicKey); System.out.println("Encrypted Text: " + encryptedText); // 解密 String decryptedText = RSAUtils.decrypt(encryptedText, privateKey); System.out.println("Decrypted Text: " + decryptedText); } catch (Exception e) { e.printStackTrace(); } } } ``` 请注意,这只是一个简单的示例,用于演示RSA加密解密过程。在实际应用中,您需要更加严格的错误处理和安全性措施。
评论 4
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值