java ecc公钥初始化_java – 存储/检索椭圆曲线加密(ECC)公钥和私钥

我必须编写代码来生成ECC密钥对.

然后我使用公钥加密字符串并使用私钥进行解密.

现在我通过将密钥对写入pem文件并存储在外部存储器中来存储密钥对.

这似乎不安全.

那么如何存储和检索这些密钥呢？

预先感谢.

这是我生成密钥对并写入pem文件的代码：

btnGenKey.setOnClickListener(new View.OnClickListener() {

@Override

public void onClick(View v) {

ECNamedCurveParameterSpec spec = ECNamedCurveTable.getParameterSpec("prime256v1");

try {

KeyPairGenerator g = KeyPairGenerator.getInstance("ECDSA","SC");

g.initialize(spec, new SecureRandom());

KeyPair keyPair = g.generateKeyPair();

privateKey = keyPair.getPrivate();

publicKey = keyPair.getPublic();

Toast.makeText(MainActivity.this, "GEN KEY SUCCESS!!", Toast.LENGTH_SHORT).show();

String state;

state = Environment.getExternalStorageState();

if(Environment.MEDIA_MOUNTED.equals(state))

{

File root = Environment.getExternalStorageDirectory();

File dir = new File(root.getAbsolutePath()+"/EDCSA1");

if(!dir.exists())

{

dir.mkdir();

}

File pub = new File(dir,"pub.pem");

File prv = new File(dir,"pri.pem");

try

{

FileOutputStream fileOutputStream = new FileOutputStream(pub);

StringWriter writer = new StringWriter();

PemWriter pemWriter = new PemWriter(writer);

pemWriter.writeObject(new PemObject("PUBLIC KEY",publicKey.getEncoded()));

pemWriter.flush();

pemWriter.close();

String publickeyPem = writer.toString();

fileOutputStream.write(publickeyPem.getBytes());

fileOutputStream.close();

Toast.makeText(MainActivity.this, "SAVE PUBLICKEY", Toast.LENGTH_SHORT).show();

///

FileOutputStream fileOutputStream2 = new FileOutputStream(prv);

StringWriter writer2 = new StringWriter();

PemWriter pemWriter2 = new PemWriter(writer2);

pemWriter2.writeObject(new PemObject("PRIVATE KEY",privateKey.getEncoded()));

pemWriter2.flush();

pemWriter2.close();

String privatekeyPem = writer2.toString();

fileOutputStream2.write(privatekeyPem.getBytes());

fileOutputStream2.close();

Toast.makeText(MainActivity.this, "SAVE PRIVATE", Toast.LENGTH_SHORT).show();

}

catch (Exception ex)

{

ex.printStackTrace();

}

}

} catch (Exception e) {

e.printStackTrace();

}

}

});

解决方法:

我不建议使用pem文件.在android中存储您的秘密信息的最佳方式是在密钥库中,因为它非常安全.阅读更多关于keystore here的信息.

如果您正在寻找要应用的密码转换,请参阅this,因为它包含您可以使用的算法和密码转换列表.

以下是关于如何使用所有这些的一般概念.

1)初始化密钥库,生成密钥对(公钥和私钥)

2)加密你的字符串并将其存储在存储中(共享首选项,数据库等)

3)从存储中获取加密字符串并解密以供您使用.

UPDATE :Examples

标签：java,android

来源： https://codeday.me/bug/20190705/1390303.html