RSA-S软证书加密

最新推荐文章于 2022-11-14 18:20:25 发布

Dima3773

最新推荐文章于 2022-11-14 18:20:25 发布

阅读量1.5k

点赞数

分类专栏： encrypt/decrypt

本文链接：https://blog.csdn.net/wgq3773/article/details/79311843

版权

encrypt/decrypt 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

RSA-S软证书加密

1. RSA算法

RSA算法百度百科链接地址
RSA密钥成对出现，一个私钥对应一个公钥，一般交易中来说都是拥有自己的一对密钥和对方的公钥。
例如：
A拥有自己的一对密钥：公钥publicKey_A及私钥privateKey_A，还拥有B的公钥publicKey_B；
B拥有自己的一对密钥：公钥publicKey_B及私钥privateKey_B，还拥有A的公钥publicKey_A
在线生成RSA密钥
2.签名机制：私钥签名，公钥验签
A将原始数据，用A的私钥privateKey_A生成签名，再将原始数据以及签名字段一起发送给B，B接收到数据之后，再用A的公钥publicKey_A对数据进行验签，验签通过则证明数据没有被篡改；
同理B给A发送数据也是一样。
3.密送机制：公钥加密，私钥解密
A将原始数据用B的公钥publicKey_B进行加密，将加密数据发送给B，B接收到数据之后，再用B的私钥进行解密，即可得到原始数据。
4.示例代码

import java.io.ByteArrayOutputStream;
import java.security.Key;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.Base64;//注意：JDK1.8才有此功能
import java.util.HashMap;
import java.util.Map;

import javax.crypto.Cipher;

public static final String CHARSET = "UTF-8";

    public static final String ALGORITHM_RSA = "RSA";

    public static final String RSA_PUBLIC_KEY = "RSAPublicKey";

    public static final String RSA_PRIVATE_KEY = "RSAPrivateKey";

    public static final String MD5_WITH_RSA_ALGORITHM = "MD5withRSA";

    public static final String SHA1_WITH_RSA_ALGORITHM = "SHA1withRSA";

1、生成RSA-S密钥对及获取私钥公钥

    // 生成密钥对(公钥和私钥)
    public static Map<String, Object> genKeyPair() throws Exception {
        KeyPairGenerator keyPairGen = KeyPairGenerator.getInstance(ALGORITHM_RSA);
        keyPairGen.initialize(1024);
        KeyPair keyPair = keyPairGen.generateKeyPair();
        RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic();
        RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate();
        Map<String, Object> keyMap = new HashMap<String, Object>(2);
        keyMap.put(RSA_PUBLIC_KEY, publicKey);
        keyMap.put(RSA_PRIVATE_KEY, privateKey);
        return keyMap;
    }

    // 获取私钥
    public static String getPrivateKey(Map<String, Object> keyMap) throws Exception {
        Key key = (Key) keyMap.get(RSA_PRIVATE_KEY);
        return Base64.getEncoder().encodeToString(key.getEncoded()).replaceAll("\r\n", "").replaceAll("\r", "").replaceAll("\n", "");
    }

    // 获取公钥
    public static String getPublicKey(Map<String, Object> keyMap) throws Exception {
        Key key = (Key) keyMap.get(RSA_PUBLIC_KEY);
        return Base64.getEncoder().encodeToString(key.getEncoded()).replaceAll("\r\n", "").replaceAll("\r", "")
                .replaceAll("\n", "");
    }

2、【签名机制】私钥签名

    // 私钥签名
    public static String signByPrivateKey(String data, String privateKey, String algorithmMethod) throws Exception {
        byte[] keyBytes = Base64.getDecoder().decode(privateKey);
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        PrivateKey privateK = keyFactory.generatePrivate(pkcs8KeySpec);
        Signature signature = Signature.getInstance(algorithmMethod);
        signature.initSign(privateK);
        signature.update(data.getBytes(CHARSET));
        return Base64.getEncoder().encodeToString(signature.sign()).replaceAll("\n", "").replaceAll("\r\n", "");
    }

    public static String signByPrivateKey(String data, String privateKey) throws Exception {
        // 默认为MD5withRSA算法
        return signByPrivateKey(data, privateKey,MD5_WITH_RSA_ALGORITHM);
    }

3、【签名机制】公钥验签

// 公钥验签
    public static boolean validateSignByPublicKey(String paramStr, String publicKey, String signedData, String algorithmMethod) throws Exception {
        byte[] keyBytes = Base64.getDecoder().decode(publicKey);
        X509EncodedKeySpec keySpec = new X509EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        PublicKey publicK = keyFactory.generatePublic(keySpec);
        Signature signature = Signature.getInstance(algorithmMethod);
        signature.initVerify(publicK);
        signature.update(paramStr.getBytes(CHARSET));
        return signature.verify(Base64.getDecoder().decode(signedData));
    }

    public static boolean validateSignByPublicKey(String paramStr, String publicKey, String signedData) throws Exception {
        // 默认为MD5withRSA算法
        return validateSignByPublicKey(paramStr, publicKey, signedData,MD5_WITH_RSA_ALGORITHM);
    }

4、【密送机制】公钥加密

    // 公钥加密
    public static String encryptByPublicKey(String data, String publicKey) throws Exception {
        byte[] keyBytes = Base64.getDecoder().decode(publicKey);
        byte[] dataBytes = data.getBytes(CHARSET);
        X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        Key publicK = keyFactory.generatePublic(x509KeySpec);
        // 对数据加密
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        cipher.init(Cipher.ENCRYPT_MODE, publicK);
        int inputLen = dataBytes.length;
        ByteArrayOutputStream out = new ByteArrayOutputStream();
        int offSet = 0;
        byte[] cache;
        int i = 0;
        // 对数据分段加密,RSA最大加密明文大小116
        while (inputLen - offSet > 0) {
            if (inputLen - offSet > 116) {
                cache = cipher.doFinal(dataBytes, offSet, 116);
            } else {
                cache = cipher.doFinal(dataBytes, offSet, inputLen - offSet);
            }
            out.write(cache, 0, cache.length);
            i++;
            offSet = i * 116;
        }
        byte[] encryptedData = out.toByteArray();
        out.close();
        return Base64.getEncoder().encodeToString(encryptedData).replaceAll("\n", "").replaceAll("\r\n", "");
    }

5、【密送机制】私钥解密

    // 私钥解密
    public static String decryptByPrivateKey(String encryptedData, String privateKey) throws Exception {
        byte[] keyBytes = Base64.getDecoder().decode(privateKey);
        byte[] encryptedBytes = Base64.getDecoder().decode(encryptedData);
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        Key privateK = keyFactory.generatePrivate(pkcs8KeySpec);
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        cipher.init(Cipher.DECRYPT_MODE, privateK);
        int inputLen = encryptedBytes.length;
        ByteArrayOutputStream out = new ByteArrayOutputStream();
        int offSet = 0;
        byte[] cache;
        int i = 0;
        // 对数据分段解密,RSA最大解密密文大小128
        while (inputLen - offSet > 0) {
            if (inputLen - offSet > 128) {
                cache = cipher.doFinal(encryptedBytes, offSet, 128);
            } else {
                cache = cipher.doFinal(encryptedBytes, offSet, inputLen - offSet);
            }
            out.write(cache, 0, cache.length);
            i++;
            offSet = i * 128;
        }
        byte[] decryptedData = out.toByteArray();
        out.close();
        return new String(decryptedData, CHARSET);
    }

5、测试代码

public class RSAWithSoftwareTest {

    public static void main(String[] args) throws Exception {
        String signData = "name=张三&age=18&address=广东省深圳市&money=100&isVip=false";
        System.out.println("原始数据：");
        System.out.println(signData);
        System.out.println();

        Map<String, Object> keyMap = RSAWithSoftwareUtils.genKeyPair();
        String privateKey = RSAWithSoftwareUtils.getPrivateKey(keyMap);
        String publicKey = RSAWithSoftwareUtils.getPublicKey(keyMap);
        System.out.println("私钥：");
        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
        System.out.println(privateKey);
        System.out.println();
        System.out.println("公钥：");
        //MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKlp+1H2Tw2MAcAAxkBgh/rdiRSKk5t7wIfGJVXhjCmsJrg5rgBDe+WVK2qbw7/Se4DeshFdZRs+POytfjtz3D25TkjhPa0J/ZbdAsB+deFKQlNkOme5Ykn06/1OX5LXlNpllWoH/uxiWH2PLjRz5HZXAfsQkhwl1P01Q3uc6ViwIDAQAB
        System.out.println(publicKey);
        System.out.println();

        /*签名机制：私钥签名，公钥验签*/
        // 私钥签名
        String signature = RSAWithSoftwareUtils.signByPrivateKey(signData, privateKey);
        System.out.println("签名：");
        //Dfk3xLyHOIWEiMZXMysQarOi8WgVB7YPxRwL+mNCINVjgaTAK5eC81fDMOGARR6y+10Bwe04tc8eoYDaqqo4BlhR7ngukT46JwzV/4lK880ZfVadQWqXFLnOPR09nbBoY1wGh0sanQgVAtfJTVkpiQAIaK00FwtxNZ9g8EaW1oE=
        System.out.println(signature);
        System.out.println();

        // 公钥验签
        boolean validateResult = RSAWithSoftwareUtils.validateSignByPublicKey(signData, publicKey, signature);
        System.out.println("验签结果：");
        //true
        System.out.println(validateResult);
        System.out.println();


        /*密送机制：公钥加密，私钥解密*/
        // 公钥加密
        String encryptByPublicKey = RSAWithSoftwareUtils.encryptByPublicKey(signData, publicKey);
        System.out.println("公钥加密结果：");
        //LXmqo9VbYNkX1g1khZh1hjZCKPmJiTNpxt0K0ZrI7IDbS9nOXeggyxxSROeJ1fsaeJFqFT3eAe+hfWYJfc+I+OAqJp6CnZ41Ur/72pThCeltqf+uHAnFkRuN045JAZ9MuLK8r+MDufCpDTG0AF5AD/Nv0SskVx/yetBAQjnxh10=
        System.out.println(encryptByPublicKey);
        System.out.println();

        String decryptByPrivateKey = RSAWithSoftwareUtils.decryptByPrivateKey(encryptByPublicKey, privateKey);
        System.out.println("私钥解密结果：");
        System.out.println(decryptByPrivateKey);
    }
}

6、Apache Commons Codec实现Base64编码解码的RSA-S软证书工具

import java.io.ByteArrayOutputStream;
import java.security.Key;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.HashMap;
import java.util.Map;

import javax.crypto.Cipher;

import org.apache.commons.codec.binary.Base64;

/**
 * @Description RSA-S软证书
 * Apache Commons Codec实现Base64编码解码
 */
public class RSAWithSoftCertificateUtils {

    //字符编码
    public static final String CHARSET = "UTF-8";

    //加密算法RSA
    public static final String KEY_ALGORITHM = "RSA";

    //签名算法:MD5withRSA
    public static final String MD5_WITH_RSA = "MD5withRSA";

    //签名算法:MD5withRSA
    public static final String SHA1_WITH_RSA = "SHA1WithRSA";

    //获取公钥的key
    private static final String PUBLIC_KEY = "RSAPublicKey";

    //获取私钥的key
    private static final String PRIVATE_KEY = "RSAPrivateKey";

    //RSA最大加密明文大小
    private static final int MAX_ENCRYPT_BLOCK = 116;

    //RSA最大解密密文大小
    private static final int MAX_DECRYPT_BLOCK = 128;

    // 生成密钥对(公钥和私钥)
    public static Map<String, Object> genKeyPair() throws Exception {
        KeyPairGenerator keyPairGen = KeyPairGenerator.getInstance(KEY_ALGORITHM);
        keyPairGen.initialize(1024);
        KeyPair keyPair = keyPairGen.generateKeyPair();
        RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic();
        RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate();
        Map<String, Object> keyMap = new HashMap<String, Object>(2);
        keyMap.put(PUBLIC_KEY, publicKey);
        keyMap.put(PRIVATE_KEY, privateKey);
        return keyMap;
    }

    // 获取私钥
    public static String getPrivateKey(Map<String, Object> keyMap) throws Exception {
        Key key = (Key) keyMap.get(PRIVATE_KEY);
        String privateKey = new String(new Base64().encode(key.getEncoded())).replaceAll("\r\n", "").replaceAll("\r", "").replaceAll("\n", "");
        return privateKey;
    }

    // 获取公钥
    public static String getPublicKey(Map<String, Object> keyMap) throws Exception {
        Key key = (Key) keyMap.get(PUBLIC_KEY);
        String publicKey = new String(new Base64().encode(key.getEncoded())).replaceAll("\r\n", "").replaceAll("\r", "").replaceAll("\n", "");
        return publicKey;
    }

    // 私钥解密  私钥(BASE64编码)
    public static String decryptByPrivateKey(String encryptedData, String privateKey) throws Exception {
        byte[] keyBytes = new Base64().decode(privateKey.getBytes());
        byte[] encryptedBytes = new Base64().decode(encryptedData.getBytes());
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
        Key privateK = keyFactory.generatePrivate(pkcs8KeySpec);
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        cipher.init(Cipher.DECRYPT_MODE, privateK);
        int inputLen = encryptedBytes.length;
        ByteArrayOutputStream out = new ByteArrayOutputStream();
        int offSet = 0;
        byte[] cache;
        int i = 0;
        // 对数据分段解密
        while (inputLen - offSet > 0) {
            if (inputLen - offSet > MAX_DECRYPT_BLOCK) {
                cache = cipher.doFinal(encryptedBytes, offSet, MAX_DECRYPT_BLOCK);
            } else {
                cache = cipher.doFinal(encryptedBytes, offSet, inputLen - offSet);
            }
            out.write(cache, 0, cache.length);
            i++;
            offSet = i * MAX_DECRYPT_BLOCK;
        }
        byte[] decryptedData = out.toByteArray();
        out.close();
        return new String(decryptedData, CHARSET);
    }

    // 公钥加密  公钥(BASE64编码)
    public static String encryptByPublicKey(String data, String publicKey) throws Exception {
        byte[] keyBytes = new Base64().decode(publicKey.getBytes());
        byte[] dataBytes = data.getBytes(CHARSET);
        X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
        Key publicK = keyFactory.generatePublic(x509KeySpec);
        // 对数据加密
        Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
        cipher.init(Cipher.ENCRYPT_MODE, publicK);
        int inputLen = dataBytes.length;
        ByteArrayOutputStream out = new ByteArrayOutputStream();
        int offSet = 0;
        byte[] cache;
        int i = 0;
        // 对数据分段加密
        while (inputLen - offSet > 0) {
            if (inputLen - offSet > MAX_ENCRYPT_BLOCK) {
                cache = cipher.doFinal(dataBytes, offSet, MAX_ENCRYPT_BLOCK);
            } else {
                cache = cipher.doFinal(dataBytes, offSet, inputLen - offSet);
            }
            out.write(cache, 0, cache.length);
            i++;
            offSet = i * MAX_ENCRYPT_BLOCK;
        }
        byte[] encryptedData = out.toByteArray();
        out.close();
        return new String(new Base64().encode(encryptedData)).replaceAll("\n", "").replaceAll("\r\n", "");
    }

    // 私钥签名  私钥(BASE64编码)
    public static String signByPrivateKey(String data, String privateKey, String signatureAlgorithm) throws Exception {
        byte[] keyBytes = new Base64().decode(privateKey.getBytes());
        PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
        PrivateKey privateK = keyFactory.generatePrivate(pkcs8KeySpec);
        Signature signature = Signature.getInstance(signatureAlgorithm);
        signature.initSign(privateK);
        signature.update(data.getBytes(CHARSET));
        return new String(new Base64().encode(signature.sign())).replaceAll("\n", "").replaceAll("\r\n", "");
    }

    public static String signByPrivateKey(String data, String privateKey) throws Exception {
        // 默认为MD5withRSA算法
        return signByPrivateKey(data, privateKey, RSAWithSoftCertificateUtils.MD5_WITH_RSA);
    }

    // 公钥验签  公钥(BASE64编码)
    public static boolean validateSignByPublicKey(String paramStr, String publicKey, String signedData, String signatureAlgorithm) throws Exception {
        byte[] keyBytes = new Base64().decode(publicKey.getBytes());
        X509EncodedKeySpec keySpec = new X509EncodedKeySpec(keyBytes);
        KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
        PublicKey publicK = keyFactory.generatePublic(keySpec);
        Signature signature = Signature.getInstance(signatureAlgorithm);
        signature.initVerify(publicK);
        signature.update(paramStr.getBytes(CHARSET));
        return signature.verify(new Base64().decode(signedData.getBytes()));
    }

    public static boolean validateSignByPublicKey(String paramStr, String publicKey, String signedData) throws Exception {
        // 默认为MD5withRSA算法
        return validateSignByPublicKey(paramStr,publicKey,signedData,RSAWithSoftCertificateUtils.MD5_WITH_RSA);
    }
}