java rsa oaep_Bouncy Castle vs Java默认RSA与OAEP

有人可以向我解释为什么这段代码抛出javax.crypto.BadPaddingException：解密密钥时最后一行的解密错误？

// Given an RSA key pair...

KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");

keyGen.initialize(2048);

KeyPair keyPair = keyGen.genKeyPair();

PrivateKey privateKey = keyPair.getPrivate();

PublicKey publicKey = keyPair.getPublic();

// ... and an AES key:

KeyGenerator keyGenerator = KeyGenerator.getInstance("AES");

keyGenerator.init(256);

SecretKey aesKey = keyGenerator.generateKey();

// When I encrypt the key with this Bouncy Castle cipher:

Cipher encryptionCipher = Cipher.getInstance("RSA/NONE/OAEPWithSHA256AndMGF1Padding", "BC");

encryptionCipher.init(Cipher.ENCRYPT_MODE, publicKey);

byte[] encryptedKey = encryptionCipher.doFinal(aesKey.getEncoded());

// Then trying to decrypt the key with this cipher...

Cipher decryptionCipher = Cipher.getInstance("RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING");

decryptionCipher.init(Cipher.DECRYPT_MODE, privateKey);

// ... throws `javax.crypto.BadPaddingException: Decryption error` here:

decryptionCipher.doFinal(encryptedKey);

“RSA/ECB/PKCS1Padding” actually doesn’t implement ECB mode encryption.

It should have been called “RSA/None/PKCS1Padding” as it can only be

used to encrypt a single block of plaintext (or, indeed a secret key).

This is just a naming mistake of Sun/Oracle.

如果是这样,我希望这些转换是等价的,我的测试将通过.两者都指定了相同的填充,为什么BadPaddingException？

无论哪种方式,我都会感谢外行人对不同之处的解释.