java vm 加密,使用BouncyCastle在Java中使用ECIES进行加密

I am trying to encrypt some content using ECC algorithm using BouncyCastle in java. But I am getting exception of BouncyCastle library saying cannot cast JCEECPublicKey to IESKey. Which I understood that the public key generated by KeyPairGenerator is JCEECPublicKey which cannot be used in java Cipher.init method. Can someone tell me how can convert it in Public key or X509 spec so that I can use it in encryption.

Here is the code which I tried

// add instance of provider class

Security.addProvider(new BouncyCastleProvider());

// initializing parameter specs secp256r1/prime192v1

ECParameterSpec ecSpec = ECNamedCurveTable.getParameterSpec("prime192v1");

// key pair generator to generate public and private key

KeyPairGenerator generator = KeyPairGenerator.getInstance("ECDH", new BouncyCastleProvider());

// initialize key pair generator

generator.initialize(ecSpec);

// Key pair to store public and private key

KeyPair keyPair = generator.generateKeyPair();

Cipher iesCipher = Cipher.getInstance("ECIES", new BouncyCastleProvider());

iesCipher.init(Cipher.ENCRYPT_MODE, keyPair.getPublic());

Also I tried to convert the public key into X509EncodedSpec but I get same exception

X509EncodedKeySpec spec = new X509EncodedKeySpec(keyPair.getPublic().getEncoded());

KeyFactory factory = KeyFactory.getInstance("ECDH");

PublicKey publicKey = factory.generatePublic(spec);

The exception which I am getting is

java.lang.ClassCastException: org.bouncycastle.jce.provider.JCEECPublicKey cannot be cast to org.bouncycastle.jce.interfaces.IESKey

at org.bouncycastle.jce.provider.JCEIESCipher.engineGetKeySize(JCEIESCipher.java:49)

at javax.crypto.Cipher.passCryptoPermCheck(Cipher.java:1057)

at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1015)

at javax.crypto.Cipher.init(Cipher.java:1229)

at javax.crypto.Cipher.init(Cipher.java:1173)

at com.test.EciesTest.main(EciesTest.java:45)

EDIT

Based on comment the JDK version I am using is JDK 7 - Oracle

Import statements I am using:

import java.security.KeyPair;

import java.security.KeyPairGenerator;

import java.security.Security;

import java.security.spec.ECGenParameterSpec;

import javax.crypto.Cipher;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

解决方案

Try the following:

// add instance of provider class

Security.addProvider(new BouncyCastleProvider());

String name = "secp256r1";

// NOTE just "EC" also seems to work here

KeyPairGenerator kpg = KeyPairGenerator.getInstance("ECDH", BouncyCastleProvider.PROVIDER_NAME);

kpg.initialize(new ECGenParameterSpec(name));

// Key pair to store public and private key

KeyPair keyPair = kpg.generateKeyPair();

Cipher iesCipher = Cipher.getInstance("ECIES", BouncyCastleProvider.PROVIDER_NAME);

iesCipher.init(Cipher.ENCRYPT_MODE, keyPair.getPublic());

And note that in general it is best to keep to JCE classes instead of Bouncy Castle classes when trying to use Bouncy through the JCE. In this case the problem was probably the parameters given to the key generator.

In above code I used BouncyCastleProvider.PROVIDER_NAME but just "BC" would work equally well of course. Re-instantiating the provider each time is not a good idea, although it should not have influenced the end result.

Make sure you've got an up to date system to run this code. This code was tested on the following system:

--- runtime information ---

Properties:

java.vendor : Oracle Corporation

java.specification.name : Java Platform API Specification

java.specification.version : 1.8

java.runtime.name : Java(TM) SE Runtime Environment

java.runtime.version : 1.8.0_65-b17

java.vm.name : Java HotSpot(TM) 64-Bit Server VM

Unlimited crypto: yes

--- info for provider Bouncy Castle ---

Bouncy Castle version: 1.520000

Bouncy Castle provider registered: yes