Java解析各种密钥对

最新推荐文章于 2022-11-07 11:23:11 发布

182422883

最新推荐文章于 2022-11-07 11:23:11 发布

阅读量926

点赞数

分类专栏：安全和签名

本文链接：https://blog.csdn.net/qq_17585545/article/details/114714291

版权

安全和签名专栏收录该内容

10 篇文章 0 订阅

订阅专栏

package com.yussion.sign3;

import java.io.FileReader;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Security;
import java.security.cert.X509Certificate;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.KeySpec;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.cms.CMSObjectIdentifiers;
import org.bouncycastle.asn1.pkcs.ContentInfo;
import org.bouncycastle.asn1.pkcs.PrivateKeyInfo;
import org.bouncycastle.asn1.x9.ECNamedCurveTable;
import org.bouncycastle.asn1.x9.X9ECParameters;
import org.bouncycastle.cert.X509CertificateHolder;
import org.bouncycastle.cert.jcajce.JcaX509CertificateConverter;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.openssl.PEMDecryptorProvider;
import org.bouncycastle.openssl.PEMEncryptedKeyPair;
import org.bouncycastle.openssl.PEMKeyPair;
import org.bouncycastle.openssl.PEMParser;
import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;
import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;

/**
* 密钥对: ---JCE本身是支持DER编码密钥对的解析的，可以参见PKCS8EncodedKeySpec和X509EncodedKeySpec
* ---DER编码是ASN.1编码规则中的一个子集，最终呈现一堆有规律的二进制内容
* ---PKCS#8定义了私钥信息语法和加密私钥语法，而X509定义证书规范，通常都会用DER和PEM进行编码存储，而在JAVA中则使用的DER
*
* @author Administrator
*
*/
public class Utils {
   // 1. DER编码
   // 生成私钥对象,传入参数是DER编码的私钥内容
   public static PrivateKey generatePrivateKey(byte[] key) throws NoSuchAlgorithmException, InvalidKeySpecException {
       KeySpec keySpec = new PKCS8EncodedKeySpec(key);
       KeyFactory keyFactory = KeyFactory.getInstance("RSA");
       return keyFactory.generatePrivate(keySpec);
   }

   // 生成公钥对象的，传入参数是DER编码公钥内容
   public PublicKey geneneratePublicKey(byte[] key) throws Exception {
       KeySpec keySpec = new X509EncodedKeySpec(key);
       KeyFactory keyFactory = KeyFactory.getInstance("RSA");
       return keyFactory.generatePublic(keySpec);
   }

   // 2. PEM编码
   // PEM编码也是密钥对较常用的编码方式，openssl则是以PEM编码为主，相对DER对人可读性更强，以BASE64编码呈现，外围包上类似-----BEGIN
   // RSA PRIVATE KEY-----
   // JCE没有对PEM直接支持的方式，但是可以通过第三方包例如bouncycastle解析，当然如果想要自己理解pem编码结构，也可以自己写代码解析
   // 使用bouncycastle解析PEM编码
   public static void parasePem() throws Exception {
       Security.addProvider(new BouncyCastleProvider());

String PRIVATE_KEY_PATH = "D:/cert/rootca_pri.pem";
PEMParser pemParser = new PEMParser(new FileReader(PRIVATE_KEY_PATH));

PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder().build("".toCharArray());
JcaPEMKeyConverter converter = new JcaPEMKeyConverter().setProvider("BC");

Object o;
KeyPair keyPair = null;
X509CertificateHolder holder = null;
PrivateKey pkey = null;
while ((o = pemParser.readObject()) != null) {
   if (o instanceof PEMKeyPair){
       keyPair = converter.getKeyPair((PEMKeyPair)o);
   } else if (o instanceof PEMEncryptedKeyPair){
       PEMEncryptedKeyPair pem = (PEMEncryptedKeyPair)o; //server.key
       keyPair = converter.getKeyPair((pem).decryptKeyPair(decProv));
   }else if (o instanceof X509CertificateHolder){ //rootca.pem
       holder = (X509CertificateHolder)o;
       X509Certificate cert = new JcaX509CertificateConverter().setProvider("BC").getCertificate(holder);
       pkey = generatePrivateKey(cert.getEncoded());
   }else if(o instanceof ContentInfo) { //pkcs 7 data
       ContentInfo d = (ContentInfo)o;
if (!d.getContentType().equals(CMSObjectIdentifiers.envelopedData)){

}
   }else if(o instanceof ASN1ObjectIdentifier) {
       ASN1ObjectIdentifier ecOID = (ASN1ObjectIdentifier)o;
X9ECParameters ecSpec = ECNamedCurveTable.getByOID(ecOID);
   }else if(o instanceof PEMKeyPair) {
       PEMKeyPair pem = (PEMKeyPair)o; //ca.key
       pkey = generatePrivateKey(pem.getPrivateKeyInfo().getEncoded());
   }else if(o instanceof PrivateKeyInfo) {
       PrivateKeyInfo pem = (PrivateKeyInfo)o; //rootca_pri.pem
       pkey = generatePrivateKey(pem.getEncoded());
   }
}

       pemParser.close();

       PublicKey pubk = keyPair.getPublic();
       System.out.println(pubk);
       PrivateKey prik = keyPair.getPrivate();
       System.out.println(prik);

       KeySpec keySpec = new X509EncodedKeySpec(pubk.getEncoded());
       KeyFactory keyFactory = KeyFactory.getInstance("RSA");
       System.out.println(keyFactory.generatePublic(keySpec));

       KeySpec keySpec2 = new PKCS8EncodedKeySpec(prik.getEncoded());
       System.out.println(keyFactory.generatePrivate(keySpec2));
   }

   public static void main(String[] args) throws Exception {
       parasePem();
   }
}

rootca_pri.pem:

182422883

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
Java解析各种密钥对

package com.yussion.sign3;import java.io.FileReader;import java.security.KeyFactory;import java.security.KeyPair;import java.security.NoSuchAlgorithmException;import java.security.PrivateKey;import java.security.PublicKey;import java.security.Secur
复制链接

扫一扫