RSA AES 前端JS与后台JAVA的加密解密的是实现

 

 

AES CryptoJS 
前提是编码方式,key,vi中设置一样,就可以进行跨语言加密解密

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55

< link  rel="stylesheet" href="<%=basePath %>/css/login.css">   < script   src="<%=basePath %>jslib/jquery-1.8.3.js" type="text/javascript" ></ script > < script   src="<%=basePath %>jslib/Common.js" type="text/javascript" ></ script > < script   src="<%=basePath %>jslib/core-min.js" type="text/javascript" ></ script > < script   src="<%=basePath %>jslib/aes.js" type="text/javascript" ></ script > </ head > < body > < form  action="<%=basePath %>login?action=goAES" id="login" name="form" method="post">      < h1 >Log In</ h1 >      < fieldset    id="inputs">          < input   id="name"  type="text" placeholder="Username" value="" autofocus required>          <!-- ming -->          < input   id="pwd" name="pwd" type="password" placeholder="Password" value=""  required>      </ fieldset >      < fieldset  id="actions">          < input  type="button" id="button" onclick="go()"  value="登 录">          < a  href="#" id="msg"></ a >      </ fieldset >      < input  type="hidden" name="key" id="key">      <!-- 密钥 -->      < input  type="hidden" id="msg_source" value="0807060504030201"> </ form >   < script  type="text/javascript">            function go(){                    if(isEmptyById(['name','pwd'])){              $('#msg').text('用户名或密码不能为空');              return;          }                    //var pwd = $("#pwd").val();          //console.info("加密前  ： "+pwd);           //CryptoJS.AES.encrypt('明文','key');          //var ecodeRestult = CryptoJS.AES.encrypt($("#pwd").val(),$("#msg_source").val());          //console.info("加密后  ："+ecodeRestult);          //$("#pwd").val(ecodeRestult);          //CryptoJS.AES.decrypt('密文','key').toString(CryptoJS.enc.Utf8);          //var decodeResult = CryptoJS.AES.decrypt(ecodeRestult,$("#msg_source").val()).toString(CryptoJS.enc.Utf8);          //console.info("解密后  ："+decodeResult);            var pwd = $("#pwd").val();          var key  = CryptoJS.enc.Utf8.parse($("#msg_source").val());            var iv   = CryptoJS.enc.Utf8.parse($("#msg_source").val());            var srcs = CryptoJS.enc.Utf8.parse(pwd);           var encrypted = CryptoJS.AES.encrypt(srcs, key, { iv: iv,mode:CryptoJS.mode.CBC});           $("#pwd").val(encrypted);          $('#login').submit();      }               </ script >

这里需要注意的是$("#msg_source").val();  因为key是动态的，需要从服务器提前设置好，前端AES JS加密指定是CryptoJS.mode.CBC模式，那么Java解密的同时也必须用这个模式来解密，不然会报错Given final block not properly padded...异常
AES--Java

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87

package  org.common.kit;   import  org.apache.log4j.Logger;   import  javax.crypto.Cipher; import  javax.crypto.spec.IvParameterSpec; import  javax.crypto.spec.SecretKeySpec;   import  org.apache.commons.codec.binary.Base64;   public  class  AESKit {      /**       * Logger for this class       */      private  static  final  Logger logger = Logger.getLogger(AESKit. class );            public  static  final  String IV =  "0807060504030201" ;            /*******************************************************************       * AES加密算法       * @author moyun       * 加密用的Key 可以用26个字母和数字组成，最好不要用保留字符，虽然不会错，至于怎么裁决，个人看情况而定    此处使用AES-128-CBC加密模式，key需要为16位。       * */        //加密      public  static  String Encrypt(String sSrc, String sKey)  throws  Exception {            if  (sKey ==  null ) {              System.out.print( "Key为空null" );              return  null ;          }          // 判断Key是否为16位          if  (sKey.length() !=  16 ) {              System.out.print( "Key长度不是16位" );              return  null ;          }          byte [] raw = sKey.getBytes();                    SecretKeySpec skeySpec =  new  SecretKeySpec(raw,  "AES" );             Cipher cipher = Cipher.getInstance( "AES/CBC/PKCS5Padding" ); //"算法/模式/补码方式"             IvParameterSpec iv =  new  IvParameterSpec(IV.getBytes()); //使用CBC模式，需要一个向量iv，可增加加密算法的强度             cipher.init(Cipher.ENCRYPT_MODE, skeySpec, iv);             byte [] encrypted = cipher.doFinal(sSrc.getBytes());                     return  Base64.encodeBase64String(encrypted); //此处使用BAES64做转码功能，同时能起到2次      }              //解密      public  static  String Decrypt(String sSrc, String sKey)  throws  Exception {                     // 判断Key是否正确             if  (sKey ==  null ) {                 System.out.print( "Key为空null" );                 return  null ;             }             // 判断Key是否为16位             if  (sKey.length() !=  16 ) {                 System.out.print( "Key长度不是16位" );                 return  null ;             }             byte [] raw = sKey.getBytes( "ASCII" );                    SecretKeySpec skeySpec =  new  SecretKeySpec(raw,  "AES" );             Cipher cipher = Cipher.getInstance( "AES/CBC/PKCS5Padding" );             IvParameterSpec iv =  new  IvParameterSpec(IV.getBytes());             cipher.init(Cipher.DECRYPT_MODE, skeySpec, iv);             byte [] encrypted1 = Base64.decodeBase64(sSrc); //先用bAES64解密            try  {                 byte [] original = cipher.doFinal(encrypted1);                 String originalString =  new  String(original);                 return  originalString;             }  catch  (Exception e) {                 logger.info(e.toString());              return  null ;             }         }            public  static  void  main(String[] args)  throws  Exception {                    String pwd =  "世界你好" ;          String epwd = Encrypt(pwd,  "abcdefghijkmlnsf" );          System.out.println(epwd);          System.out.println(Decrypt(epwd,  "abcdefghijkmlnsf" ));      }       }

　　

---

RSA RSAUtils js

 1 <link rel="stylesheet" href="<%=basePath %>/css/login.css">
 2 <script src="<%=basePath %>jslib/security.js" type="text/javascript"></script>
 3 <script src="<%=basePath %>jslib/jquery-1.8.3.js" type="text/javascript" ></script>
 4 <script src="<%=basePath %>jslib/Common.js" type="text/javascript" ></script>
 5 </head>
 6 <body>
 7 
 8 <form action="<%=basePath %>login?action=go" id="login" name="form" method="post">
 9     <h1>Log In</h1>
10     <fieldset   id="inputs">
11         <input  id="name" type="text" placeholder="Username" value="" autofocus required>
12         <input  id="pwd"  type="password" placeholder="Password" value=""  required>
13     </fieldset>
14     <fieldset id="actions">
15         <input type="button" id="button" οnclick="go()"  value="登 录">
16         <a href="#" id="msg"></a> 
17     </fieldset>
18     <input type="hidden" name="modulus" id="hid_modulus" value="${modulus }">
19     <input type="hidden" name="exponent" id="hid_exponent" value="${exponent }">
20     <input type="hidden" name="key" id="key">
21 </form>
22 
23 <script type="text/javascript">
24     
25     function go(){
26         
27         if(isEmptyById(['name','pwd'])){
28             $('#msg').text('用户名或密码不能为空');
29              return;
30         }
31         var modulus = $('#hid_modulus').val(), exponent = $('#hid_exponent').val();
32         var key = RSAUtils.getKeyPair(exponent, '', modulus);
33         var key2="name="+$('#name').val()+"&pwd="+$('#pwd').val();
34         $('#key').val(RSAUtils.encryptedString(key, key2));
35         $('#login').submit();
36     }
37 </script>

  1 package org.common.kit;
  2 
  3 import java.io.File;
  4 import java.io.FileInputStream;
  5 import java.io.FileOutputStream;
  6 import java.io.ObjectInputStream;
  7 import java.io.ObjectOutputStream;
  8 import java.math.BigInteger;
  9 import java.security.InvalidParameterException;
 10 import java.security.KeyFactory;
 11 import java.security.KeyPair;
 12 import java.security.KeyPairGenerator;
 13 import java.security.NoSuchAlgorithmException;
 14 import java.security.PrivateKey;
 15 import java.security.Provider;
 16 import java.security.PublicKey;
 17 import java.security.SecureRandom;
 18 import java.security.interfaces.RSAPrivateKey;
 19 import java.security.interfaces.RSAPublicKey;
 20 import java.security.spec.InvalidKeySpecException;
 21 import java.security.spec.RSAPrivateKeySpec;
 22 import java.security.spec.RSAPublicKeySpec;
 23 import java.util.Date;
 24 
 25 import javax.crypto.Cipher;
 26 
 27 import org.apache.commons.codec.DecoderException;
 28 import org.apache.commons.codec.binary.Hex;
 29 import org.apache.commons.io.FileUtils;
 30 import org.apache.commons.io.IOUtils;
 31 import org.apache.commons.lang3.StringUtils;
 32 import org.apache.commons.lang3.time.DateFormatUtils;
 33 import org.apache.log4j.Logger;
 34 import org.bouncycastle.jce.provider.BouncyCastleProvider;
 35 
 36 public abstract class RSA
 37 {
 38 
 39     private static final Logger LOGGER = Logger.getLogger(RSA.class);
 40     
 41     private static final String ALGORITHOM = "RSA";
 42     private static final String RSA_PAIR_FILENAME = "/__RSA_PAIR.txt";
 43     private static final int KEY_SIZE = 1024;
 44     private static final Provider DEFAULT_PROVIDER = new BouncyCastleProvider();
 45 
 46     private static KeyPairGenerator keyPairGen = null;
 47     private static KeyFactory keyFactory = null;
 48 
 49     private static KeyPair oneKeyPair = null;
 50 
 51     private static File rsaPairFile = null;
 52     
 53     static
 54     {
 55         try
 56         {
 57             keyPairGen = KeyPairGenerator.getInstance("RSA", DEFAULT_PROVIDER);
 58             keyFactory = KeyFactory.getInstance("RSA", DEFAULT_PROVIDER);
 59         } catch (NoSuchAlgorithmException ex)
 60         {
 61             LOGGER.error(ex.getMessage());
 62         }
 63         rsaPairFile = new File(getRSAPairFilePath());
 64     }
 65 
 66     /***
 67      * 
 68      * 返回 解码后的 username pwd
 69      * 
 70      * add by 12
 71      * 
 72      * @param key
 73      * @return
 74      */
 75     public static String[] decryptUsernameAndPwd(String key)
 76     {
 77 
 78         key = RSA.decryptStringByJs(key);
 79 
 80         try
 81         {
 82             String username = key.substring(key.indexOf("=") + 1, key.indexOf("&"));
 83             String pwd = key.substring(key.lastIndexOf("=") + 1, key.length());
 84             return new String[] { username, pwd };
 85         } catch (Exception e)
 86         {
 87             return null;
 88         }
 89 
 90     }
 91 
 92     private static synchronized KeyPair generateKeyPair()
 93     {
 94         try
 95         {
 96             keyPairGen.initialize(1024, new SecureRandom(DateFormatUtils.format(new Date(), "yyyyMMdd").getBytes()));
 97             oneKeyPair = keyPairGen.generateKeyPair();
 98             saveKeyPair(oneKeyPair);
 99             return oneKeyPair;
100         } catch (InvalidParameterException ex)
101         {
102             LOGGER.error("KeyPairGenerator does not support a key length of 1024.", ex);
103         } catch (NullPointerException ex)
104         {
105             LOGGER.error("RSAUtils#KEY_PAIR_GEN is null, can not generate KeyPairGenerator instance.", ex);
106         }
107         return null;
108     }
109 
110     private static String getRSAPairFilePath()
111     {
112         String urlPath = RSA.class.getResource("/").getPath();
113         String str = new File(urlPath).getParent() + "/__RSA_PAIR.txt";
114 
115         urlPath = null;
116 
117         return str;
118     }
119 
120     private static boolean isCreateKeyPairFile()
121     {
122         boolean createNewKeyPair = false;
123         if ((!rsaPairFile.exists()) || (rsaPairFile.isDirectory()))
124         {
125             createNewKeyPair = true;
126         }
127         return createNewKeyPair;
128     }
129 
130     private static void saveKeyPair(KeyPair keyPair)
131     {
132         FileOutputStream fos = null;
133         ObjectOutputStream oos = null;
134         try
135         {
136             fos = FileUtils.openOutputStream(rsaPairFile);
137             oos = new ObjectOutputStream(fos);
138             oos.writeObject(keyPair);
139         } catch (Exception ex)
140         {
141             ex.printStackTrace();
142         } finally
143         {
144             IOUtils.closeQuietly(oos);
145             IOUtils.closeQuietly(fos);
146         }
147 
148         fos = null;
149         oos = null;
150     }
151 
152     public static KeyPair getKeyPair()
153     {
154         if (isCreateKeyPairFile()) { return generateKeyPair(); }
155         if (oneKeyPair != null) { return oneKeyPair; }
156         return readKeyPair();
157     }
158 
159     private static KeyPair readKeyPair()
160     {
161         FileInputStream fis = null;
162         ObjectInputStream ois = null;
163         try
164         {
165             fis = FileUtils.openInputStream(rsaPairFile);
166             ois = new ObjectInputStream(fis);
167             oneKeyPair = (KeyPair) ois.readObject();
168             return oneKeyPair;
169         } catch (Exception ex)
170         {
171             ex.printStackTrace();
172         } finally
173         {
174             IOUtils.closeQuietly(ois);
175             IOUtils.closeQuietly(fis);
176         }
177 
178         fis = null;
179         ois = null;
180         return null;
181     }
182 
183     public static RSAPublicKey generateRSAPublicKey(byte[] modulus, byte[] publicExponent)
184     {
185         RSAPublicKeySpec publicKeySpec = new RSAPublicKeySpec(new BigInteger(modulus), new BigInteger(publicExponent));
186         try
187         {
188             return (RSAPublicKey) keyFactory.generatePublic(publicKeySpec);
189         } catch (InvalidKeySpecException ex)
190         {
191             LOGGER.error("RSAPublicKeySpec is unavailable.", ex);
192         } catch (NullPointerException ex)
193         {
194             LOGGER.error("RSAUtils#KEY_FACTORY is null, can not generate KeyFactory instance.", ex);
195         }
196         publicKeySpec = null;
197         modulus = (byte[]) null;
198         publicExponent = (byte[]) null;
199         return null;
200     }
201 
202     public static RSAPrivateKey generateRSAPrivateKey(byte[] modulus, byte[] privateExponent)
203     {
204         RSAPrivateKeySpec privateKeySpec = new RSAPrivateKeySpec(new BigInteger(modulus), new BigInteger(privateExponent));
205         try
206         {
207             return (RSAPrivateKey) keyFactory.generatePrivate(privateKeySpec);
208         } catch (InvalidKeySpecException ex)
209         {
210             LOGGER.error("RSAPrivateKeySpec is unavailable.", ex);
211         } catch (NullPointerException ex)
212         {
213             LOGGER.error("RSAUtils#KEY_FACTORY is null, can not generate KeyFactory instance.", ex);
214         }
215         privateKeySpec = null;
216         modulus = (byte[]) null;
217         privateExponent = (byte[]) null;
218         return null;
219     }
220 
221     public static RSAPrivateKey getRSAPrivateKey(String hexModulus, String hexPrivateExponent)
222     {
223         if ((StringUtils.isBlank(hexModulus)) || (StringUtils.isBlank(hexPrivateExponent)))
224         {
225             if (LOGGER.isDebugEnabled())
226             {
227                 LOGGER.debug("hexModulus and hexPrivateExponent cannot be empty. RSAPrivateKey value is null to return.");
228             }
229             return null;
230         }
231         byte[] modulus = (byte[]) null;
232         byte[] privateExponent = (byte[]) null;
233         try
234         {
235             modulus = Hex.decodeHex(hexModulus.toCharArray());
236             privateExponent = Hex.decodeHex(hexPrivateExponent.toCharArray());
237         } catch (DecoderException ex)
238         {
239             LOGGER.error("hexModulus or hexPrivateExponent value is invalid. return null(RSAPrivateKey).");
240         }
241         if ((modulus != null) && (privateExponent != null)) { return generateRSAPrivateKey(modulus, privateExponent); }
242         return null;
243     }
244 
245     public static RSAPublicKey getRSAPublidKey(String hexModulus, String hexPublicExponent)
246     {
247         if ((StringUtils.isBlank(hexModulus)) || (StringUtils.isBlank(hexPublicExponent)))
248         {
249             if (LOGGER.isDebugEnabled())
250             {
251                 LOGGER.debug("hexModulus and hexPublicExponent cannot be empty. return null(RSAPublicKey).");
252             }
253             return null;
254         }
255         byte[] modulus = (byte[]) null;
256         byte[] publicExponent = (byte[]) null;
257         try
258         {
259             modulus = Hex.decodeHex(hexModulus.toCharArray());
260             publicExponent = Hex.decodeHex(hexPublicExponent.toCharArray());
261         } catch (DecoderException ex)
262         {
263             LOGGER.error("hexModulus or hexPublicExponent value is invalid. return null(RSAPublicKey).");
264         }
265         if ((modulus != null) && (publicExponent != null)) { return generateRSAPublicKey(modulus, publicExponent); }
266         return null;
267     }
268 
269     public static byte[] encrypt(PublicKey publicKey, byte[] data) throws Exception
270     {
271         Cipher ci = Cipher.getInstance("RSA", DEFAULT_PROVIDER);
272         ci.init(1, publicKey);
273         return ci.doFinal(data);
274     }
275 
276     public static byte[] decrypt(PrivateKey privateKey, byte[] data) throws Exception
277     {
278         Cipher ci = Cipher.getInstance("RSA", DEFAULT_PROVIDER);
279         ci.init(2, privateKey);
280         return ci.doFinal(data);
281     }
282 
283     public static String encryptString(PublicKey publicKey, String plaintext)
284     {
285         if ((publicKey == null) || (plaintext == null)) { return null; }
286         byte[] data = plaintext.getBytes();
287         try
288         {
289             byte[] en_data = encrypt(publicKey, data);
290             return new String(Hex.encodeHex(en_data));
291         } catch (Exception ex)
292         {
293             LOGGER.error(ex.getCause().getMessage());
294         }
295         return null;
296     }
297 
298     public static String encryptString(String plaintext)
299     {
300         if (plaintext == null) { return null; }
301         byte[] data = plaintext.getBytes();
302         KeyPair keyPair = getKeyPair();
303         try
304         {
305             byte[] en_data = encrypt((RSAPublicKey) keyPair.getPublic(), data);
306             return new String(Hex.encodeHex(en_data));
307         } catch (NullPointerException ex)
308         {
309             LOGGER.error("keyPair cannot be null.");
310         } catch (Exception ex)
311         {
312             LOGGER.error(ex.getCause().getMessage());
313         }
314         return null;
315     }
316 
317     public static String decryptString(PrivateKey privateKey, String encrypttext)
318     {
319         if ((privateKey == null) || (StringUtils.isBlank(encrypttext))) return null;
320         try
321         {
322             byte[] en_data = Hex.decodeHex(encrypttext.toCharArray());
323             byte[] data = decrypt(privateKey, en_data);
324             return new String(data);
325         } catch (Exception ex)
326         {
327             LOGGER.error(String.format("\"%s\" Decryption failed. Cause: %s", new Object[] { encrypttext, ex.getCause().getMessage() }));
328         }
329         return null;
330     }
331 
332     public static String decryptString(String encrypttext)
333     {
334         if (StringUtils.isBlank(encrypttext)) { return null; }
335         KeyPair keyPair = getKeyPair();
336         try
337         {
338             byte[] en_data = Hex.decodeHex(encrypttext.toCharArray());
339             byte[] data = decrypt((RSAPrivateKey) keyPair.getPrivate(), en_data);
340             return new String(data);
341         } catch (NullPointerException ex)
342         {
343             LOGGER.error("keyPair cannot be null.");
344         } catch (Exception ex)
345         {
346             LOGGER.error(String.format("\"%s\" Decryption failed. Cause: %s", new Object[] { encrypttext, ex.getMessage() }));
347         }
348         return null;
349     }
350 
351     public static String decryptStringByJs(String encrypttext)
352     {
353         String text = decryptString(encrypttext);
354         if (text == null) { return null; }
355         return StringUtils.reverse(text);
356     }
357 
358     public static RSAPublicKey getDefaultPublicKey()
359     {
360         KeyPair keyPair = getKeyPair();
361         if (keyPair != null) { return (RSAPublicKey) keyPair.getPublic(); }
362         return null;
363     }
364 
365     public static RSAPrivateKey getDefaultPrivateKey()
366     {
367         KeyPair keyPair = getKeyPair();
368         if (keyPair != null) { return (RSAPrivateKey) keyPair.getPrivate(); }
369         return null;
370     }
371 }