JAVA 关于“RSA/ECB/OAEPWithSHA-256AndMGF1Padding”的问题

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import java.security.*;

public static final String ECB_PKCS1_PADDING = "RSA/ECB/NoPadding";
public static final String ECB_PKCS1_PADDING = "RSA/ECB/PKCS1Padding";
public static final String ECB_PKCS1_PADDING = "RSA/ECB/OAEPWithSHA-1AndMGF1Padding";
public static final String ECB_PKCS1_PADDING = "RSA/ECB/OAEPWithSHA-256AndMGF1Padding";
public static byte[] decryptByPrivateKey(byte[] encrypted, byte[] privateKey) throws Exception {
    // 得到私钥
    PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKey);
    KeyFactory kf = KeyFactory.getInstance(RSA);
    PrivateKey keyPrivate = kf.generatePrivate(keySpec);

    // 解密数据
    Cipher cp = Cipher.getInstance(ECB_PKCS1_PADDING);
    cp.init(Cipher.DECRYPT_MODE, keyPrivate);
    byte[] arr = cp.doFinal(encrypted);
    return arr;
}

其中 ECB_PKCS1_PADDING ="RSA/ECB/OAEPWithSHA-256AndMGF1Padding"上述的decryptByPrivateKey方法不可用,会出现解密不成功,其他的补位方式都可以采用上述的函数。

如下图所示:

纠正后的正确的写法如下:
public static byte[] decryptByPrivateKey(byte[] encrypted, byte[] privateKey) throws Exception 
{
        OAEPParameterSpec oaepParameterSpec = new OAEPParameterSpec("SHA-256", "MGF1",         MGF1ParameterSpec.SHA256, PSource.PSpecified.DEFAULT);

        PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKey);

        KeyFactory kf = KeyFactory.getInstance(RSA);
        PrivateKey keyPrivate = kf.generatePrivate(keySpec);

        // 解密数据
        Cipher cp = Cipher.getInstance("RSA/ECB/OAEPPadding");
        cp.init(Cipher.DECRYPT_MODE, keyPrivate,oaepParameterSpec);
        byte[] arr = cp.doFinal(encrypted);
        return arr;
}

其他的写法也类似,公钥加密也需要采用同样的方式进行处理。

示例代码:

{
        PrivateKey mPrivatekey ;//获取私钥
        byte[] encryptBytes =null;//待解密的数据
        byte[] decryptBytes = decryptByPrivateKey(encryptBytes , mPrivatekey.getEncoded());
}

  • 3
    点赞
  • 4
    收藏
    觉得还不错? 一键收藏
  • 2
    评论
RSA/ECB/OAEPWithSHA-256AndMGF1Padding是一种RSA加密算法,使用OAEP(Optimal Asymmetric Encryption Padding)填充,使用SHA-256哈希函数和MGF1(Mask Generation Function 1)填充。 以下是Java代码示例: ```java import java.security.KeyPair; import java.security.KeyPairGenerator; import java.security.PrivateKey; import java.security.PublicKey; import java.security.SecureRandom; import java.security.spec.MGF1ParameterSpec; import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.X509EncodedKeySpec; import javax.crypto.Cipher; import javax.crypto.spec.OAEPParameterSpec; import javax.crypto.spec.PSource; public class RSAEncryption { // 生成RSA密钥对 public static KeyPair generateRSAKeyPair() throws Exception { KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA"); keyPairGenerator.initialize(2048, new SecureRandom()); return keyPairGenerator.generateKeyPair(); } // RSA加密 public static byte[] encryptRSA(byte[] data, PublicKey publicKey) throws Exception { Cipher cipher = Cipher.getInstance("RSA/ECB/OAEPWithSHA-256AndMGF1Padding"); OAEPParameterSpec oaepParameterSpec = new OAEPParameterSpec("SHA-256", "MGF1", new MGF1ParameterSpec("SHA-256"), PSource.PSpecified.DEFAULT); cipher.init(Cipher.ENCRYPT_MODE, publicKey, oaepParameterSpec); return cipher.doFinal(data); } // RSA解密 public static byte[] decryptRSA(byte[] data, PrivateKey privateKey) throws Exception { Cipher cipher = Cipher.getInstance("RSA/ECB/OAEPWithSHA-256AndMGF1Padding"); OAEPParameterSpec oaepParameterSpec = new OAEPParameterSpec("SHA-256", "MGF1", new MGF1ParameterSpec("SHA-256"), PSource.PSpecified.DEFAULT); cipher.init(Cipher.DECRYPT_MODE, privateKey, oaepParameterSpec); return cipher.doFinal(data); } // 测试 public static void main(String[] args) throws Exception { // 生成RSA密钥对 KeyPair keyPair = generateRSAKeyPair(); PublicKey publicKey = keyPair.getPublic(); PrivateKey privateKey = keyPair.getPrivate(); // 加密数据 byte[] data = "Hello, RSA!".getBytes(); byte[] encryptedData = encryptRSA(data, publicKey); // 解密数据 byte[] decryptedData = decryptRSA(encryptedData, privateKey); // 输出结果 System.out.println("原始数据:" + new String(data)); System.out.println("加密后的数据:" + new String(encryptedData)); System.out.println("解密后的数据:" + new String(decryptedData)); } } ``` 需要注意的是,RSA加密算法不适合加密大量数据,因为加密后的数据长度会比原始数据长度长很多,而且加密速度较慢,所以一般只用于加密对称加密算法的密钥。

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 2
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值