用bc做国密sm2加解密、SM3withSM2签名验签等

已于 2022-05-16 08:25:38 修改
阅读量4.3w 收藏 79
点赞数 14
文章标签： 国密 SM3withSM2
于 2019-01-09 04:00:38 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/pridas/article/details/86118774
版权 
import org.apache.commons.codec.binary.Base64;
import org.bouncycastle.asn1.*;
import org.bouncycastle.asn1.gm.GMNamedCurves;
import org.bouncycastle.asn1.x500.X500Name;
import org.bouncycastle.asn1.x500.X500NameBuilder;
import org.bouncycastle.asn1.x500.style.BCStyle;
import org.bouncycastle.asn1.x9.X9ECParameters;
import org.bouncycastle.crypto.InvalidCipherTextException;
import org.bouncycastle.crypto.digests.SM3Digest;
import org.bouncycastle.crypto.engines.SM2Engine;
import org.bouncycastle.crypto.params.ECDomainParameters;
import org.bouncycastle.crypto.params.ECPrivateKeyParameters;
import org.bouncycastle.crypto.params.ECPublicKeyParameters;
import org.bouncycastle.crypto.params.ParametersWithRandom;
import org.bouncycastle.jcajce.provider.asymmetric.ec.BCECPrivateKey;
import org.bouncycastle.jcajce.provider.asymmetric.ec.BCECPublicKey;
import org.bouncycastle.jcajce.spec.SM2ParameterSpec;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.jce.spec.ECParameterSpec;
import org.bouncycastle.jce.spec.ECPrivateKeySpec;
import org.bouncycastle.jce.spec.ECPublicKeySpec;
import org.bouncycastle.math.ec.ECPoint;
import org.bouncycastle.operator.ContentSigner;
import org.bouncycastle.operator.jcajce.JcaContentSignerBuilder;
import org.bouncycastle.pkcs.PKCS10CertificationRequest;
import org.bouncycastle.pkcs.jcajce.JcaPKCS10CertificationRequestBuilder;
import org.bouncycastle.util.encoders.Hex;

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.io.*;
import java.math.BigInteger;
import java.security.*;
import java.security.cert.CertPathBuilderException;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.util.Arrays;

/**
 * need jars:
 * bcpkix-jdk15on-160.jar
 * bcprov-jdk15on-160.jar
 *
 * ref:
 * https://tools.ietf.org/html/draft-shen-sm2-ecdsa-02
 * http://gmssl.org/docs/oid.html
 * http://www.jonllen.com/jonllen/work/164.aspx
 *
 * 用BC的注意点：
 * 这个版本的BC对SM3withSM2的结果为asn1格式的r和s，如果需要直接拼接的r||s需要自己转换。下面rsAsn1ToPlainByteArray、rsPlainByteArrayToAsn1就在干这事。
 * 1.60、1.61版本的BC对SM2的结果为C1||C2||C3，据说为旧标准，新标准为C1||C3||C2，用新标准的需要自己转换。下面（被注释掉的）changeC1C2C3ToC1C3C2、changeC1C3C2ToC1C2C3就在干这事。1.62版本开始加上了C1C3C2，初始化时“ SM2Engine sm2Engine = new SM2Engine(SM2Engine.Mode.C1C3C2);”即可。
 * 
 * 按要求国密算法仅允许使用加密机，本demo国密算法仅供学习使用，请不要用于生产用途。
 */
public class GmUtil {

    private static X9ECParameters x9ECParameters = GMNamedCurves.getByName("sm2p256v1");
    private static ECDomainParameters ecDomainParameters = new ECDomainParameters(x9ECParameters.getCurve(), x9ECParameters.getG(), x9ECParameters.getN());
    private static ECParameterSpec ecParameterSpec = new ECParameterSpec(x9ECParameters.getCurve(), x9ECParameters.getG(), x9ECParameters.getN());

    static {
		if (Security.getProvider("BC") == null) {
			Security.addProvider(new BouncyCastleProvider());
		} else {
			Security.removeProvider("BC"); //解决eclipse调试时tomcat自动重新加载时，BC存在不明原因异常的问题。
			Security.addProvider(new BouncyCastleProvider());
		}
    }

    /**
     *
     * @param msg
     * @param userId
     * @param privateKey
     * @return r||s，直接拼接byte数组的rs
     */
    public static byte[] signSm3WithSm2(byte[] msg, byte[] userId, PrivateKey privateKey){
        return rsAsn1ToPlainByteArray(signSm3WithSm2Asn1Rs(msg, userId, privateKey));
    }

    /**
     *
     * @param msg
     * @param userId
     * @param privateKey
     * @return rs in <b>asn1 format</b>
     */
    public static byte[] signSm3WithSm2Asn1Rs(byte[] msg, byte[] userId, PrivateKey privateKey){
        try {
            SM2ParameterSpec parameterSpec = new SM2ParameterSpec(userId);
            Signature signer = Signature.getInstance("SM3withSM2", "BC");
            signer.setParameter(parameterSpec);
            signer.initSign(privateKey, new SecureRandom());
            signer.update(msg, 0, msg.length);
            byte[] sig = signer.sign();
            return sig;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    /**
     *
     * @param msg
     * @param userId
     * @param rs r||s，直接拼接byte数组的rs
     * @param publicKey
     * @return
     */
    public static boolean verifySm3WithSm2(byte[] msg, byte[] userId, byte[] rs, PublicKey publicKey){
    	if(rs == null || msg == null || userId == null) return false;
        if(rs.length != RS_LEN * 2) return false;
        return verifySm3WithSm2Asn1Rs(msg, userId, rsPlainByteArrayToAsn1(rs), publicKey);
    }

    /**
     *
     * @param msg
     * @param userId
     * @param rs in <b>asn1 format</b>
     * @param publicKey
     * @return
     */
    public static boolean verifySm3WithSm2Asn1Rs(byte[] msg, byte[] userId, byte[] rs, PublicKey publicKey){
        try {
            SM2ParameterSpec parameterSpec = new SM2ParameterSpec(userId);
            Signature verifier = Signature.getInstance("SM3withSM2", "BC");
            verifier.setParameter(parameterSpec);
            verifier.initVerify(publicKey);
            verifier.update(msg, 0, msg.length);
            return verifier.verify(rs);
        } catch (Exception e) {
//            throw new RuntimeException(e);
			return false;
        }
    }

    /**
     * bc加解密使用旧标c1||c2||c3，此方法在加密后调用，将结果转化为c1||c3||c2
     * @param c1c2c3
     * @return
     */
    private static byte[] changeC1C2C3ToC1C3C2(byte[] c1c2c3) {
        final int c1Len = (x9ECParameters.getCurve().getFieldSize() + 7) / 8 * 2 + 1; //sm2p256v1的这个固定65。可看GMNamedCurves、ECCurve代码。
        final int c3Len = 32; //new SM3Digest().getDigestSize();
        byte[] result = new byte[c1c2c3.length];
        System.arraycopy(c1c2c3, 0, result, 0, c1Len); //c1
        System.arraycopy(c1c2c3, c1c2c3.length - c3Len, result, c1Len, c3Len); //c3
        System.arraycopy(c1c2c3, c1Len, result, c1Len + c3Len, c1c2c3.length - c1Len - c3Len); //c2
        return result;
    }


    /**
     * bc加解密使用旧标c1||c3||c2，此方法在解密前调用，将密文转化为c1||c2||c3再去解密
     * @param c1c3c2
     * @return
     */
    private static byte[] changeC1C3C2ToC1C2C3(byte[] c1c3c2) {
        final int c1Len = (x9ECParameters.getCurve().getFieldSize() + 7) / 8 * 2 + 1; //sm2p256v1的这个固定65。可看GMNamedCurves、ECCurve代码。
        final int c3Len = 32; //new SM3Digest().getDigestSize();
        byte[] result = new byte[c1c3c2.length];
        System.arraycopy(c1c3c2, 0, result, 0, c1Len); //c1: 0->65
        System.arraycopy(c1c3c2, c1Len + c3Len, result, c1Len, c1c3c2.length - c1Len - c3Len); //c2
        System.arraycopy(c1c3c2, c1Len, result, c1c3c2.length - c3Len, c3Len); //c3
        return result;
    }

    /**
     * c1||c3||c2
     * @param data
     * @param key
     * @return
     */
    public static byte[] sm2Decrypt(byte[] data, PrivateKey key){
        try {
        	return sm2DecryptOld(changeC1C3C2ToC1C2C3(data), key);
        } catch (Exception e) {
//          throw new RuntimeException(e);
			return null;
      }
    }

    /**
     * c1||c3||c2
     * @param data
     * @param key
     * @return
     */

    public static byte[] sm2Encrypt(byte[] data, PublicKey key){
        return changeC1C2C3ToC1C3C2(sm2EncryptOld(data, key));
    }

    /**
     * c1||c2||c3
     * @param data
     * @param key
     * @return
     */
    public static byte[] sm2EncryptOld(byte[] data, PublicKey key){
        BCECPublicKey localECPublicKey = (BCECPublicKey) key;
        ECPublicKeyParameters ecPublicKeyParameters = new ECPublicKeyParameters(localECPublicKey.getQ(), ecDomainParameters);
        SM2Engine sm2Engine = new SM2Engine();
        sm2Engine.init(true, new ParametersWithRandom(ecPublicKeyParameters, new SecureRandom()));
        try {
            return sm2Engine.processBlock(data, 0, data.length);
        } catch (InvalidCipherTextException e) {
            throw new RuntimeException(e);
        }
    }

    /**
     * c1||c2||c3
     * @param data
     * @param key
     * @return
     */
    public static byte[] sm2DecryptOld(byte[] data, PrivateKey key){
        BCECPrivateKey localECPrivateKey = (BCECPrivateKey) key;
        ECPrivateKeyParameters ecPrivateKeyParameters = new ECPrivateKeyParameters(localECPrivateKey.getD(), ecDomainParameters);
        SM2Engine sm2Engine = new SM2Engine();
        sm2Engine.init(false, ecPrivateKeyParameters);
        try {
            return sm2Engine.processBlock(data, 0, data.length);
        } catch (Exception e) {
//            throw new RuntimeException(e);
			return null;
        }
    }
    
    public static byte[] sm4EncryptECB(byte[] keyBytes, byte[] plain, String algo){
        if(keyBytes.length != 16) throw new RuntimeException("err key length");
        if(algo.toLowerCase().endsWith("noppading") && plain.length % 16 != 0) throw new RuntimeException("err data length");

        try {
            Key key = new SecretKeySpec(keyBytes, "SM4");
            Cipher out = Cipher.getInstance(algo, "BC");
            out.init(Cipher.ENCRYPT_MODE, key);
            return out.doFinal(plain);
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

//    public static byte[] sm4Decrypt(byte[] keyBytes, byte[] cipher){
//    	return sm4Decrypt(keyBytes, cipher, NO_PADDING);
//    }

    public static byte[] sm4DecryptECB(byte[] keyBytes, byte[] cipher, String algo){
        if(keyBytes.length != 16) throw new RuntimeException("err key length");
        if(algo.toLowerCase().endsWith("noppading") && cipher.length % 16 != 0) throw new RuntimeException("err data length");

        try {
            Key key = new SecretKeySpec(keyBytes, "SM4");
            Cipher in = Cipher.getInstance(algo, "BC");
            in.init(Cipher.DECRYPT_MODE, key);
            return in.doFinal(cipher);

        } catch (Exception e) {
//            throw new RuntimeException(e);
			return null;
        }

    }

    /**
     * @param bytes
     * @return
     */
    public static byte[] sm3(byte[] bytes) {
        SM3Digest sm3 = new SM3Digest();
        sm3.update(bytes, 0, bytes.length);
        byte[] result = new byte[sm3.getDigestSize()];
        sm3.doFinal(result, 0);
        return result;
    }

    private final static int RS_LEN = 32;

    private static byte[] bigIntToFixexLengthBytes(BigInteger rOrS){
        // for sm2p256v1, n is 00fffffffeffffffffffffffffffffffff7203df6b21c6052b53bbf40939d54123,
        // r and s are the result of mod n, so they should be less than n and have length<=32
        byte[] rs = rOrS.toByteArray();
        if(rs.length == RS_LEN) return rs;
        else if(rs.length == RS_LEN + 1 && rs[0] == 0) return Arrays.copyOfRange(rs, 1, RS_LEN + 1);
        else if(rs.length < RS_LEN) {
            byte[] result = new byte[RS_LEN];
            Arrays.fill(result, (byte)0);
            System.arraycopy(rs, 0, result, RS_LEN - rs.length, rs.length);
            return result;
        } else {
            throw new RuntimeException("err rs: " + Hex.toHexString(rs));
        }
    }

    /**
     * BC的SM3withSM2签名得到的结果的rs是asn1格式的，这个方法转化成直接拼接r||s
     * @param rsDer rs in asn1 format
     * @return sign result in plain byte array
     */
    private static byte[] rsAsn1ToPlainByteArray(byte[] rsDer){
        ASN1Sequence seq = ASN1Sequence.getInstance(rsDer);
        byte[] r = bigIntToFixexLengthBytes(ASN1Integer.getInstance(seq.getObjectAt(0)).getValue());
        byte[] s = bigIntToFixexLengthBytes(ASN1Integer.getInstance(seq.getObjectAt(1)).getValue());
        byte[] result = new byte[RS_LEN * 2];
        System.arraycopy(r, 0, result, 0, r.length);
        System.arraycopy(s, 0, result, RS_LEN, s.length);
        return result;
    }

    /**
     * BC的SM3withSM2验签需要的rs是asn1格式的，这个方法将直接拼接r||s的字节数组转化成asn1格式
     * @param sign in plain byte array
     * @return rs result in asn1 format
     */
    private static byte[] rsPlainByteArrayToAsn1(byte[] sign){
        if(sign.length != RS_LEN * 2) throw new RuntimeException("err rs. ");
        BigInteger r = new BigInteger(1, Arrays.copyOfRange(sign, 0, RS_LEN));
        BigInteger s = new BigInteger(1, Arrays.copyOfRange(sign, RS_LEN, RS_LEN * 2));
        ASN1EncodableVector v = new ASN1EncodableVector();
        v.add(new ASN1Integer(r));
        v.add(new ASN1Integer(s));
        try {
            return new DERSequence(v).getEncoded("DER");
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
    }

    public static KeyPair generateKeyPair(){
        try {
            KeyPairGenerator kpGen = KeyPairGenerator.getInstance("EC", "BC");
            kpGen.initialize(ecParameterSpec, new SecureRandom());
            KeyPair kp = kpGen.generateKeyPair();
            return kp;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static BCECPrivateKey getPrivatekeyFromD(BigInteger d){
        ECPrivateKeySpec ecPrivateKeySpec = new ECPrivateKeySpec(d, ecParameterSpec);
        return new BCECPrivateKey("EC", ecPrivateKeySpec, BouncyCastleProvider.CONFIGURATION);
    }

    public static BCECPublicKey getPublickeyFromXY(BigInteger x, BigInteger y){
        ECPublicKeySpec ecPublicKeySpec = new ECPublicKeySpec(x9ECParameters.getCurve().createPoint(x, y), ecParameterSpec);
        return new BCECPublicKey("EC", ecPublicKeySpec, BouncyCastleProvider.CONFIGURATION);
    }

    public static BCECPublicKey getPublickeyFromPrivatekey(BCECPrivateKey privateKey){
        ECPoint p = x9ECParameters.getG().multiply(privateKey.getD()).normalize();
        return getPublickeyFromXY(p.getXCoord().toBigInteger(), p.getYCoord().toBigInteger());
    }

    //不造为毛服务平台下载的没有头和尾，只有中间段的base64数据，加个方法方便直接读这串数据。
    public static PublicKey getPublickeyFromX509File(InputStream in){
        try {
            CertificateFactory cf = CertificateFactory.getInstance("X.509", "BC");
            X509Certificate x509 = (X509Certificate) cf.generateCertificate(in);
            return x509.getPublicKey();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static PublicKey getPublickeyFromX509File(File file){
        try {
            return getPublickeyFromX509File(new FileInputStream(file));
        } catch (FileNotFoundException e) {
            throw new RuntimeException(e);
        }
    }
    
    public static class Sm2Cert {
    	private PrivateKey privateKey;
    	private PublicKey publicKey;
    	private String certId;
		public PrivateKey getPrivateKey() {
			return privateKey;
		}
		public void setPrivateKey(PrivateKey privateKey) {
			this.privateKey = privateKey;
		}
		public PublicKey getPublicKey() {
			return publicKey;
		}
		public void setPublicKey(PublicKey publicKey) {
			this.publicKey = publicKey;
		}
		public String getCertId() {
			return certId;
		}
		public void setCertId(String certId) {
			this.certId = certId;
		}
    }

    private static byte[] toByteArray(int i) {
        byte[] byteArray = new byte[4];
        byteArray[0] = (byte) (i >>> 24);
        byteArray[1] = (byte) ((i & 0xFFFFFF) >>> 16);
        byteArray[2] = (byte) ((i & 0xFFFF) >>> 8);
        byteArray[3] = (byte) (i & 0xFF);
        return byteArray;
    }

    /**
     * 字节数组拼接
     *
     * @param params
     * @return
     */
    private static byte[] join(byte[]... params) {
        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        byte[] res = null;
        try {
            for (int i = 0; i < params.length; i++) {
                baos.write(params[i]);
            }
            res = baos.toByteArray();
        } catch (IOException e) {
            e.printStackTrace();
        }
        return res;
    }

    /**
     * 密钥派生函数
     *
     * @param Z
     * @param klen
     *            生成klen字节数长度的密钥
     * @return
     */
    private static byte[] KDF(byte[] Z, int klen) {
        int ct = 1;
        int end = (int) Math.ceil(klen * 1.0 / 32);
        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        try {
            for (int i = 1; i < end; i++) {
                baos.write(GmUtil.sm3(join(Z, toByteArray(ct))));
                ct++;
            }
            byte[] last = GmUtil.sm3(join(Z, toByteArray(ct)));
            if (klen % 32 == 0) {
                baos.write(last);
            } else
                baos.write(last, 0, klen % 32);
            return baos.toByteArray();
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
	
//    public static byte[] sm4Decrypt(byte[] keyBytes, byte[] cipher, byte[] iv){
//    	return sm4Decrypt(keyBytes, cipher, iv, NO_PADDING);
//    }
	
    public static byte[] sm4DecryptCBC(byte[] keyBytes, byte[] cipher, byte[] iv, String algo){
        try {
            Key key = new SecretKeySpec(keyBytes, "SM4");
            Cipher in = Cipher.getInstance(algo, "BC");
			if(iv == null) iv = zeroIv(algo);
            in.init(Cipher.DECRYPT_MODE, key, getIV(iv));
            return in.doFinal(cipher);

        } catch (Exception e) {
//            throw new RuntimeException(e);
			return null;
        }
    }
    
    public static byte[] sm4EncryptCBC(byte[] keyBytes, byte[] data, byte[] iv, String algo){
        try {
            Key key = new SecretKeySpec(keyBytes, "SM4");
            Cipher in = Cipher.getInstance(algo, "BC"); //
			if(iv == null) iv = zeroIv(algo);
            in.init(Cipher.ENCRYPT_MODE, key, getIV(iv));
            return in.doFinal(data);
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static final String SM4_ECB_NOPADDING = "SM4/ECB/NoPadding";
    public static final String SM4_CBC_NOPADDING = "SM4/CBC/NoPadding";
    public static final String SM4_CBC_PKCS7PADDING = "SM4/CBC/PKCS7Padding";   
    public static final String SM4_ECB_PKCS5PADDING = "SM4/ECB/PKCS5Padding";   
    
    /**
     * cfca官网CSP沙箱导出的sm2文件
     * @param pem 二进制原文
     * @param pwd 密码
     * @return
     */
    public static Sm2Cert readSm2File(byte[] pem, String pwd){
    	
    	Sm2Cert sm2Cert = new Sm2Cert();
    	try {
	    	ASN1Sequence asn1Sequence = (ASN1Sequence) ASN1Primitive.fromByteArray(pem);
//	    	ASN1Integer asn1Integer = (ASN1Integer) asn1Sequence.getObjectAt(0); //version=1
	    	ASN1Sequence priSeq = (ASN1Sequence) asn1Sequence.getObjectAt(1);//private key
	    	ASN1Sequence pubSeq = (ASN1Sequence) asn1Sequence.getObjectAt(2);//public key and x509 cert
	    	
//	    	ASN1ObjectIdentifier sm2DataOid = (ASN1ObjectIdentifier) priSeq.getObjectAt(0);
//	    	ASN1ObjectIdentifier sm4AlgOid = (ASN1ObjectIdentifier) priSeq.getObjectAt(1);
	    	ASN1OctetString priKeyAsn1 = (ASN1OctetString) priSeq.getObjectAt(2);
	    	byte[] key = KDF(pwd.getBytes(), 32);
	    	byte[] priKeyD = sm4DecryptCBC(Arrays.copyOfRange(key, 16, 32),
	    			priKeyAsn1.getOctets(),
	                Arrays.copyOfRange(key, 0, 16), SM4_CBC_PKCS7PADDING);
	    	sm2Cert.privateKey = getPrivatekeyFromD(new BigInteger(1, priKeyD)); 
//	    	System.out.println(Hex.toHexString(priKeyD));
	    			
//	    	ASN1ObjectIdentifier sm2DataOidPub = (ASN1ObjectIdentifier) pubSeq.getObjectAt(0);
	    	ASN1OctetString pubKeyX509 = (ASN1OctetString) pubSeq.getObjectAt(1);
	    	CertificateFactory cf = CertificateFactory.getInstance("X.509", "BC");
	    	X509Certificate x509 = (X509Certificate) cf.generateCertificate(new ByteArrayInputStream(pubKeyX509.getOctets()));
            System.out.println(Base64.encodeBase64String(x509.getEncoded()));
            sm2Cert.publicKey = x509.getPublicKey();
	    	sm2Cert.certId = x509.getSerialNumber().toString();
	    	return sm2Cert;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    /**
     *
     * @param cert
     * @return
     */
    public static Sm2Cert readSm2X509Cert(byte[] cert){
    	Sm2Cert sm2Cert = new Sm2Cert();
        try {
            CertificateFactory cf = CertificateFactory.getInstance("X.509", "BC");
            X509Certificate x509 = (X509Certificate) cf.generateCertificate(new ByteArrayInputStream(cert));
            sm2Cert.publicKey = x509.getPublicKey();
	    	sm2Cert.certId = x509.getSerialNumber().toString();
	    	return sm2Cert;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static IvParameterSpec getIV(byte[] iv){
        return new IvParameterSpec(iv);
    }

    public static byte[] zeroIv(final String algo) {

        try {
            Cipher cipher = Cipher.getInstance(algo);
            int blockSize = cipher.getBlockSize();
            byte[] iv = new byte[blockSize];
            Arrays.fill(iv, (byte)0);
            return iv;
        } catch (Exception e) {
        	throw new RuntimeException(e);
        }
    }
	
	/**
	 * 后补0到位数为unitLength的整数倍
	 * @param value 
	 * @return 
	 */
	public static byte[] rightPadZero(byte[] value, final int unitLength){
		if (value.length % unitLength == 0)
			return value;
		int len = (value.length/unitLength + 1) * unitLength;
		return Arrays.copyOf(value, len);
	}

    public static byte[] generateCsr(PrivateKey privateKey, PublicKey publicKey){
        try{
            X500NameBuilder localX500NameBuilder = new X500NameBuilder(BCStyle.INSTANCE);
            localX500NameBuilder.addRDN(BCStyle.CN, "test");
            localX500NameBuilder.addRDN(BCStyle.C, "test");
            localX500NameBuilder.addRDN(BCStyle.O, "test");
            localX500NameBuilder.addRDN(BCStyle.OU, "test");
            localX500NameBuilder.addRDN(BCStyle.OU, "test");
            X500Name localX500Name = localX500NameBuilder.build();
            JcaPKCS10CertificationRequestBuilder p10Builder = new JcaPKCS10CertificationRequestBuilder(localX500Name, publicKey);
            JcaContentSignerBuilder csBuilder = new JcaContentSignerBuilder("SM3WITHSM2");
            ContentSigner signer = csBuilder.build(privateKey);
            PKCS10CertificationRequest csr = p10Builder.build(signer);
            return csr.getEncoded();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static void main(String[] args) throws IOException, NoSuchAlgorithmException, NoSuchProviderException, InvalidAlgorithmParameterException, CertPathBuilderException, InvalidKeyException, SignatureException, CertificateException {

//        // 随便看看 ---------------------
//        System.out.println("GMNamedCurves: ");
//        for(Enumeration e = GMNamedCurves.getNames(); e.hasMoreElements();) {
//            System.out.println(e.nextElement());
//        }
//        System.out.println("sm2p256v1 n:"+x9ECParameters.getN());
//        System.out.println("sm2p256v1 nHex:"+Hex.toHexString(x9ECParameters.getN().toByteArray()));


        // 生成公私钥对 ---------------------
        KeyPair kp = generateKeyPair();

        System.out.println(Hex.toHexString(kp.getPrivate().getEncoded()));
        System.out.println(Hex.toHexString(kp.getPublic().getEncoded()));

        System.out.println(kp.getPrivate().getAlgorithm());
        System.out.println(kp.getPublic().getAlgorithm());

        System.out.println(kp.getPrivate().getFormat());
        System.out.println(kp.getPublic().getFormat());

        System.out.println("private key d: " + ((BCECPrivateKey)kp.getPrivate()).getD());
        System.out.println("public key q:" + ((BCECPublicKey)kp.getPublic()).getQ()); //{x, y, zs...}

        byte[] msg = "message digest".getBytes();
        byte[] userId = "userId".getBytes();
        byte[] sig = signSm3WithSm2(msg, userId, kp.getPrivate());
        System.out.println(Hex.toHexString(sig));
        System.out.println(verifySm3WithSm2(msg, userId, sig, kp.getPublic()));

        System.out.println(
                "csr:\r\n-----BEGIN CERTIFICATE REQUEST-----\r\n" +
                        new String(Base64.encodeBase64Chunked(generateCsr(kp.getPrivate(), kp.getPublic())), "ascii") +
                        "\r\n-----END CERTIFICATE REQUEST-----");

//        // 由d生成私钥 ---------------------
//        BigInteger d = new BigInteger("097b5230ef27c7df0fa768289d13ad4e8a96266f0fcb8de40d5942af4293a54a", 16);
//        BCECPrivateKey bcecPrivateKey = getPrivatekeyFromD(d);
        System.out.println(bcecPrivateKey.getParameters());
        System.out.println(Hex.toHexString(bcecPrivateKey.getEncoded()));
        System.out.println(bcecPrivateKey.getAlgorithm());
        System.out.println(bcecPrivateKey.getFormat());
        System.out.println(bcecPrivateKey.getD());
        System.out.println(bcecPrivateKey instanceof java.security.interfaces.ECPrivateKey);
        System.out.println(bcecPrivateKey instanceof ECPrivateKey);
        System.out.println(bcecPrivateKey.getParameters());


        公钥X坐标PublicKeyXHex: 59cf9940ea0809a97b1cbffbb3e9d96d0fe842c1335418280bfc51dd4e08a5d4
        公钥Y坐标PublicKeyYHex: 9a7f77c578644050e09a9adc4245d1e6eba97554bc8ffd4fe15a78f37f891ff8
//        PublicKey publicKey = getPublickeyFromX509File(new File("/Users/xxx/xxx/certs/xxx.cer"));
//        System.out.println(publicKey);
        PublicKey publicKey1 = getPublickeyFromXY(new BigInteger("59cf9940ea0809a97b1cbffbb3e9d96d0fe842c1335418280bfc51dd4e08a5d4", 16), new BigInteger("9a7f77c578644050e09a9adc4245d1e6eba97554bc8ffd4fe15a78f37f891ff8", 16));
        System.out.println(publicKey1);
        System.out.println(publicKey.equals(publicKey1));
        System.out.println(publicKey.getEncoded().equals(publicKey1.getEncoded()));

//        byte[] x509bs = Base64.decodeBase64("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");
//        ByteArrayInputStream bais = new ByteArrayInputStream(x509bs);
//        PublicKey publicKey = getPublickeyFromX509File(bais);
//        System.out.println(publicKey);

//        // sm2 encrypt and decrypt test ---------------------
//        KeyPair kp = generateKeyPair();
//        PublicKey publicKey2 = kp.getPublic();
//        PrivateKey privateKey2 = kp.getPrivate();
//        byte[]bs = sm2Encrypt("s".getBytes(), publicKey2);
//        System.out.println(Hex.toHexString(bs));
//        bs = sm2Decrypt(bs, privateKey2);
//        System.out.println(new String(bs));



//        // sm4 encrypt and decrypt test ---------------------
//        //0123456789abcdeffedcba9876543210 + 0123456789abcdeffedcba9876543210 -> 681edf34d206965e86b3e94f536e4246
//        byte[] plain = Hex.decode("0123456789abcdeffedcba98765432100123456789abcdeffedcba98765432100123456789abcdeffedcba9876543210");
//        byte[] key = Hex.decode("0123456789abcdeffedcba9876543210");
//        byte[] cipher = Hex.decode("595298c7c6fd271f0402f804c33d3f66");
//        byte[] bs = sm4Encrypt(key, plain);
//        System.out.println(Hex.toHexString(bs));;
//        bs = sm4Decrypt(key, bs);
//        System.out.println(Hex.toHexString(bs));
      
        String sm2 = "MIIDHQIBATBHBgoqgRzPVQYBBAIBBgcqgRzPVQFoBDDW5/I9kZhObxXE9Vh1CzHdZhIhxn+3byBU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\nVfY6";
    	byte[] bs = Base64.decodeBase64(sm2);
    	String pwd = "cfca1234";
    	GmUtil.Sm2Cert sm2Cert = GmUtil.readSm2File(bs, pwd);
    	System.out.println(sm2Cert.getPublicKey());
    	System.out.println(Hex.toHexString(((BCECPrivateKey)sm2Cert.getPrivateKey()).getD().toByteArray()));
    	System.out.println(sm2Cert.getPrivateKey());
    	System.out.println(sm2Cert.getCertId());

        byte[] x509bs = Base64.decodeBase64("MIICxDCCAmegAwIBAgIFEElCQzEwDAYIKoEcz1UBg3UFADBcMQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRswGQYDVQQDDBJDRkNBIFRFU1QgU00yIE9DQTEwHhcNMjIwNTE1MTA1NjI5WhcNMjcwNTE1MTA1NjI5WjB7MQswCQYDVQQGEwJjbjEQMA4GA1UECgwHT0NBMVNNMjEOMAwGA1UECwwFQ1VQT1AxFDASBgNVBAsMC0VudGVycHJpc2VzMTQwMgYDVQQDDCswNDFAODMxMDAwMDAwMDA4MzA0MEAwMDAxMDAwMDpTSUdOQDAwMDAwMDk4MFkwEwYHKoZIzj0CAQYIKoEcz1UBgi0DQgAEwisTwfY00s0/2iq707zyq6gfMnQXPj6MbiWEXZXW0CQpxp/DMdSK1njcfuOLowPogjVblZcqnwi3b5kHWpoUPKOB9DCB8TAfBgNVHSMEGDAWgBRr/hjaj0I6prhtsy6Igzo0osEw4TBIBgNVHSAEQTA/MD0GCGCBHIbvKgEBMDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuY2ZjYS5jb20uY24vdXMvdXMtMTQuaHRtMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly91Y3JsLmNmY2EuY29tLmNuL1NNMi9jcmwzMzk5NS5jcmwwCwYDVR0PBAQDAgPoMB0GA1UdDgQWBBQefNIeiLOrUvrUUlH5dz6vvBFPlDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDAYIKoEcz1UBg3UFAANJADBGAiEAr1QPQ/GXdKTm8rSBjfpXZoqO/YiZxe3njunS/Qryy6cCIQCNamHECzzkfbNhO5sCyLHOkV6lnqnM8vJLqyj15RbMww==");
        GmUtil.Sm2Cert pub = readSm2X509Cert(x509bs);
        System.out.println(pub.getPublicKey());
        System.out.println(pub.getCertId());

    }
}

伊利杀猪
关注
  • 14
    点赞
  • 踩
  • 79
    收藏
    觉得还不错? 一键收藏
  • 43
    评论
KYSharp.SM.rar
12-17
包含源码和使用说明，其中SM2还提供了公钥私钥的生成工具 SM3和SM4仅供参考。 所有源码都在，可以自己编译生成。
国密算法（SM2）在C#里面的简单封装
wangkun998的博客
04-27 3814
SM2 加解密联调时踩坑1、密文数据，有些加密硬件出来密文结构为 C1|C2|C3 ，有些为 C1|C3|C2 , 需要对应密文结构做解密操作2、有些加密硬件，公钥前加04 ，私钥前加00，密文前加04 ，在处理时候，可以根据长度处理，尤其 04 的处理。
C# 实现国密SM4加解密封装
谁念西风独自凉
12-28 2961
1.Portable.BouncyCastle 引入 右键解决方案的引用，选择管理NuGet程序包 在浏览的搜索框中搜索：“Portable.BouncyCastle” 选择第一个，在右侧点击安装即可完成程序包的引入。 2.SM4 2.1.SM4Context public class SM4Context { public int mode; public long[] sk; public bool isPadding..
代码实现工具类：sm2加密、解密、加签、验签
最新发布
系统看你学习很认真，随机送了一个月会员！
05-14 428
以下是一个示例的工具类，使用了Bouncy Castle库来实现SM2加密、解密、签名和验证签名的功能。请确保已经正确引入Bouncy Castle库，以及导入相关的类。请注意，这只是一个简单的示例，实际应用中可能需要更加完善的异常处理和参数校验。包下的相关类实现SM2加密、解密、签名和验证签名的功能。如果还有其他问题，请随时提问。方法用于生成SM2密钥对，方法用于使用公钥加密数据，方法用于使用私钥解密数据，方法用于使用私钥进行签名，方法用于使用公钥验证签名。
sm2
weixin_30449453的博客
01-21 2191
sm2加密： (function (global, undefined) { "use strict"; var SM2CipherMode = { C1C2C3: "0", C1C3C2: "1" }; var CryptoJS = CryptoJS || function (a, b) { va...
sm2多端加密解密，java，js，android，ios实战
王林冲的博客
07-27 3417
sm2多端加密解密，java，js，android，ios实战
JAVA SM2 数字证书生成
q1009020096的博客
12-21 9597
文章目录Before StartBuild with MavenQuickStart生成自签名公私钥对证书签名算法算法提供者设置证书信息标识信息构造（DN）获取扩展密钥用途构造（可选）证书信息构造X.509格式证书对象生成保存证书ASN.1 结构解析工具致谢 Before Start X.509数字证书请参考： RFC5280 Internet X.509 Public Key Infrastru...
使用国密（SM3WithSM2）对jwt进行签名
Hello World ^—^
10-15 3万+
文章目录环境背景介绍国密系列简要介绍实操1、首先去git上把开源项目拉下来2、关于曲线参数修改3、生成证书4、引入pom5、签名验签思路6、编码7、单元测试 环境 jdk8、spring boot 2.3.4、java-jwt 3.11.0、bouncycastle 1.65 背景介绍 在多个系统之间，由于调用链长，使用了jwt token的方式鉴权，然后获取相应的资源，这里用到核心的一点就是jwt的防篡改特性。 以往使用的签名算法大都是HS256（HMAC with SHA-256）、RS256（RSAS
csharp用BouncyCastle进行国密签名&加解密
pridas的博客
10-19 5165
using System; using System.Collections.Generic; using System.Linq; using System.Web; using Org.BouncyCastle.Asn1.X9; using Org.BouncyCastle.Asn1.GM; using Org.BouncyCastle.Crypto.Parameters; using Org.BouncyCastle.Crypto; using Org.BouncyCastle.Security; u
国密算法（SM4）在C#里面的简单封装
wangkun998的博客
05-04 4293
基础需要第三方Nuget包：Portable.BouncyCastle；添加方法：右击项目名称，选择“管理Nuget程序包”，在搜索栏搜索Portable.BouncyCastle，选择安装。
支付宝小程序对接国家医保接口，签名算法SM2（SM3withSM2）、加密算法SM4
weixin_43585799的博客
07-03 3466
本文档适用于两定机构调用接入医保移动支付中心服务，主要表述了电子凭证结算涉及 的接口出入参调用示例。
java 国密算法实现包含SM2 SM3 SM4和数字签名、数字证书的验证
05-05
在实际应用中，这些国密算法和相关功能通常会结合使用，例如，使用SM2生成公私钥对，用SM3计算消息的哈希值，然后用SM2的私钥进行数字签名，最后用SM2的公钥和SM3的哈希值验证签名。同时，数字证书可以用来封装和...
基于国密SM2加解密例子(JAVA版)
05-17
共享基于国密算法SM2加、解密相关代码，有利于各程序员参考代码实现SM2加解密(BC实现)。
基于BC库：国密SM2/SM3/SM4算法简单封装
01-17
在IT行业中，国密（国家商用密码）...总之，基于BC库的国密SM2/SM3/SM4算法封装对于实现中国标准的加密和证书管理至关重要。通过学习和实践，开发者可以提升其在国密算法应用方面的专业技能，满足国内信息安全的需求。
国密算法SM2，SM3，SM4_C#工程源码.rar
05-15
SM2是非对称加密算法 SM3是一种密码杂凑算法 SM4是分组加密算法 示例： 原始数据： 这是国密SM2_SM3_SM4算法示例 加密数据：048BDEE95960A436991765867726A5C8A2359D9AE0A67FCB10F66F3...这是国密SM2_SM3_SM4算法示例
SM2加密解密JAVA版本.zip
12-07
Signature signature = Signature.getInstance("SM3withSM2", "BC"); // ... 初始化签名，设置私钥 signature.sign(messageHash, signedData); // ... 验证，设置公钥 boolean isValid = signature.verify...
sm2,sm4加密（js+java）
热门推荐
qq_41427281的博客
09-26 4万+
一、使用 做项目时，首先采用了sm2数据传输加密，随后又改为sm4，此处使用仅为个人愚见，望与诸君共勉。 sm2,非对称加密，在后端生成两对秘钥，私钥A,公钥A,私钥B,公钥B。前端持有公钥A,私钥B，后端持有公钥B,私钥A，即前端利用js算法和公钥A对数据加密，后端利用java算法和秘钥A解密；后端利用java算法和密匙B加密,前端利用js算法和公式B对数据解密。 sm4,对称加密，在前段随机ECB模式【生成一个秘钥】,CBC模式【生成一个秘钥，和一个初始向量】，登录时采用sm2加密后传递给后台，每个客
通过BouncyCastle包进行Java签名C#验签时要注意asn1编码转换
myGowind的专栏
02-22 2565
在Java中采用BouncyCastle的Jar（bcprov-jdk15on-1.58.jar）对授权数据进行签名。因为项目的历史原因，没用采用更高版本jar包。签名后，把授权数据和签名发给C#的应用进行验签。由于Java端的签名结果是由64字节组成的hex字符串，是直接拼接r||s的字节数组，没用经过asn1编码的。在C#应用端通过NuGet引入BouncyCastle.Crypto的版本为1.9.0.0。该库中的对象SM2Signer自带的验签方法VerifySignature的参数是需要带asn1编
SM国密算法
weixin_39749488的博客
04-26 3181
<dependency> <groupId>org.bouncycastle</groupId> <artifactId>bcprov-jdk15on</artifactId> <version>1.60</version> </dependency> <dependency>
sm3withsm2 签名验签java
09-02
在Java中进行SM3WithSM2签名和验签，可以使用开源项目中提供的工具类SM2Signer来实现。该工具类是调用bc框架的org.bouncycastle.crypto.signers.SM2Signer来实现的。在使用SM2Signer进行签名时，首先需要使用SM3Digest计算摘要，然后使用SM2进行加密。签名的过程可以参考该工具类的源码实现。 为了实现SM3WithSM2签名算法，如果发现所使用的java-jwt库不支持该算法，可以根据官方git的代码进行参考，并自行实现一个类似的签名算法。在验签过程中，可以对base64解码后的签名进行验证，如果验签失败，会抛出异常，因此可以在业务中捕获该异常来判断验签是否成功。<span class="em">1</span><span class="em">2</span><span class="em">3</span> #### 引用[.reference_title] - *1* *2* *3* [使用国密（SM3WithSM2）对jwt进行签名](https://blog.csdn.net/w57685321/article/details/109102706)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 100%"] [ .reference_list ]

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 43
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值