admin/MaxKey
1
0
Fork 0
mirror of https://gitee.com/dromara/MaxKey.git synced 2025-12-07 01:18:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

RSAUtils optimize

Browse Source
This commit is contained in:
MaxKey 2022-02-27 10:23:58 +08:00
parent 61673b4b07
commit feabbcdd97
2 changed files with 104 additions and 99 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

181
maxkey-common/src/main/java/org/maxkey/crypto/RSAUtils.java
View File

@ -21,16 +21,18 @@ import java.security.Key;
import java.security.KeyFactory; import java.security.KeyFactory;
import java.security.KeyPair; import java.security.KeyPair;
import java.security.KeyPairGenerator; import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.interfaces.RSAPrivateKey; import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey; import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec; import java.security.spec.X509EncodedKeySpec;
import java.util.Base64; import java.util.Base64;
import java.util.HashMap;
import java.util.Map;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import org.apache.commons.lang3.StringUtils;
/** /**
* @author shiming * @author shiming
@ -40,32 +42,12 @@ public final class RSAUtils {
public static final String KEY_ALGORTHM = "RSA"; public static final String KEY_ALGORTHM = "RSA";
public static final String PUBLIC_KEY = "RSAPublicKey"; public static final String LINE_SEPARATOR = "\n";
public static final String PRIVATE_KEY = "RSAPrivateKey";
public static final int KEY_SIZE = 1024; public static final int KEY_SIZE = 1024;
public static final int PEM_ARRAY_SIZE = 64; public static final int PEM_ARRAY_SIZE = 64;
/**
* 生成KEY_SIZE长度的RSA密钥对,存放在keyMap中
* @return keyMap RSA密钥对
* @throws Exception
*/
public static Map<String, Object> genKeyPair() throws Exception {
KeyPair keyPair = genRSAKeyPair();
RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic();
RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate();
Map<String, Object> keyMap = new HashMap<String, Object>(2);
keyMap.put(PUBLIC_KEY, publicKey);
keyMap.put(PRIVATE_KEY, privateKey);
return keyMap;
}
/** /**
* gen RSA KeyPair * gen RSA KeyPair
* @return KeyPair * @return KeyPair
@ -78,45 +60,27 @@ public final class RSAUtils {
} }
/** /**
* 获取公钥 * 通过keyBytes构建私钥
* @param keyMap * @param keyBytes
* @return 公钥 * @return
* @throws Exception * @throws Exception
*/ */
public static byte[] getPublicKey(Map<String, Object> keyMap)throws Exception { public static PrivateKey privateKey(byte[] keyBytes)throws Exception {
Key key = (Key) keyMap.get(PUBLIC_KEY); PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
return key.getEncoded(); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
return keyFactory.generatePrivate(pkcs8EncodedKeySpec);
} }
/** /**
* 获取私钥 * 通过keyBytes构建公钥
* @param keyMap * @param keyBytes
* @return 私钥 * @return
* @throws Exception * @throws Exception
*/ */
public static byte[] getPrivateKey(Map<String, Object> keyMap)throws Exception { public static PublicKey publicKey(byte[] keyBytes)throws Exception {
Key key = (Key) keyMap.get(PRIVATE_KEY); X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
return key.getEncoded(); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
} return keyFactory.generatePublic(x509EncodedKeySpec);
/**
* 公钥数据转换为Hex字符串
* @param keyMap
* @return 公钥
* @throws Exception
*/
public static String getPublicKey2Hex(Map<String, Object> keyMap)throws Exception {
return HexUtils.bytes2HexString(getPublicKey(keyMap));
}
/**
* 私钥数据转换为Hex字符串
* @param keyMap
* @return 私钥
* @throws Exception
*/
public static String getPrivateKey2Hex(Map<String, Object> keyMap)throws Exception {
return HexUtils.bytes2HexString(getPrivateKey(keyMap));
} }
/** /**
@ -139,10 +103,8 @@ public final class RSAUtils {
* @throws Exception * @throws Exception
*/ */
public static byte[] encryptByPrivateKey(byte[] data, byte[] keyBytes)throws Exception { public static byte[] encryptByPrivateKey(byte[] data, byte[] keyBytes)throws Exception {
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
Key privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec); Key privateKey = privateKey(keyBytes);
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm()); Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
cipher.init(Cipher.ENCRYPT_MODE, privateKey); cipher.init(Cipher.ENCRYPT_MODE, privateKey);
@ -150,6 +112,8 @@ public final class RSAUtils {
return cipher.doFinal(data); return cipher.doFinal(data);
} }
/** /**
* 私钥解密 * 私钥解密
* @param data 解密数据 * @param data 解密数据
@ -172,9 +136,8 @@ public final class RSAUtils {
* @throws Exception * @throws Exception
*/ */
public static byte[] decryptByPrivateKey(byte[] data, byte[] keyBytes)throws Exception { public static byte[] decryptByPrivateKey(byte[] data, byte[] keyBytes)throws Exception {
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
Key privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec); Key privateKey = privateKey(keyBytes);
// 解密 // 解密
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm()); Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
cipher.init(Cipher.DECRYPT_MODE, privateKey); cipher.init(Cipher.DECRYPT_MODE, privateKey);
@ -203,10 +166,8 @@ public final class RSAUtils {
* @throws Exception * @throws Exception
*/ */
public static byte[] encryptByPublicKey(byte[] data, byte[] keyBytes)throws Exception { public static byte[] encryptByPublicKey(byte[] data, byte[] keyBytes)throws Exception {
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
Key publicKey = keyFactory.generatePublic(x509EncodedKeySpec); Key publicKey = publicKey(keyBytes);
// <EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݽ<EFBFBD><EFBFBD><EFBFBD> // <EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݽ<EFBFBD><EFBFBD><EFBFBD>
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm()); Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
@ -236,10 +197,9 @@ public final class RSAUtils {
* @throws Exception * @throws Exception
*/ */
public static byte[] decryptByPublicKey(byte[] data, byte[] keyBytes)throws Exception { public static byte[] decryptByPublicKey(byte[] data, byte[] keyBytes)throws Exception {
// 通过keyBytes构建公钥
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM); KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
Key publicKey = keyFactory.generatePublic(x509EncodedKeySpec); Key publicKey = publicKey(keyBytes);
// 解密 // 解密
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm()); Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
@ -248,6 +208,37 @@ public final class RSAUtils {
return cipher.doFinal(data); return cipher.doFinal(data);
} }
public byte[] sign(byte[] src, RSAPrivateKey privateKey, String algorithm) {
if(StringUtils.isBlank(algorithm)) {
algorithm = "SHA1withRSA";
}
try {
Signature signature = Signature.getInstance(algorithm);
signature.initSign(privateKey);
signature.update(src);
return signature.sign();
} catch (Exception e) {
e.printStackTrace();
return null;
}
}
public boolean verify(byte[] sign, byte[] src, RSAPublicKey publicKey, String algorithm) {
try {
if(StringUtils.isBlank(algorithm)) {
algorithm = "SHA1withRSA";
}
Signature signature = Signature.getInstance(algorithm);
signature.initVerify(publicKey);
signature.update(src);
return signature.verify(sign);
} catch (Exception e) {
e.printStackTrace();
return false;
}
}
/** /**
* 获取公钥的PEM格式 * 获取公钥的PEM格式
* @param encoded 公钥 * @param encoded 公钥
@ -256,9 +247,9 @@ public final class RSAUtils {
public static String getPublicKeyPEM(byte[] encoded) { public static String getPublicKeyPEM(byte[] encoded) {
StringBuffer base64String = StringBuffer base64String =
new StringBuffer(""); new StringBuffer("");
base64String.append("-----BEGIN PUBLIC KEY-----").append("\n"); base64String.append("-----BEGIN PUBLIC KEY-----").append(LINE_SEPARATOR);
base64String.append(getBase64PEM(encoded)); base64String.append(getBase64PEM(encoded)).append(LINE_SEPARATOR);
base64String.append("-----END PUBLIC KEY-----").append("\n"); base64String.append("-----END PUBLIC KEY-----").append(LINE_SEPARATOR);
return base64String.toString(); return base64String.toString();
} }
@ -270,9 +261,23 @@ public final class RSAUtils {
public static String getPrivateKeyPEM(byte[] encoded) { public static String getPrivateKeyPEM(byte[] encoded) {
StringBuffer base64String = StringBuffer base64String =
new StringBuffer(""); new StringBuffer("");
base64String.append("-----BEGIN RSA PRIVATE KEY-----").append("\n"); base64String.append("-----BEGIN RSA PRIVATE KEY-----").append(LINE_SEPARATOR);
base64String.append(getBase64PEM(encoded)); base64String.append(getBase64PEM(encoded)).append(LINE_SEPARATOR);
base64String.append("-----END RSA PRIVATE KEY-----").append("\n"); base64String.append("-----END RSA PRIVATE KEY-----").append(LINE_SEPARATOR);
return base64String.toString();
}
/**
* 获取Certificate的PEM格式
* @param encoded 公钥
* @return PEM格式公钥
*/
public static String getCertificatePEM(byte[] encoded) {
StringBuffer base64String =
new StringBuffer("");
base64String.append("-----BEGIN CERTIFICATE-----").append(LINE_SEPARATOR);
base64String.append(getBase64PEM(encoded)).append(LINE_SEPARATOR);
base64String.append("-----END CERTIFICATE-----").append(LINE_SEPARATOR);
return base64String.toString(); return base64String.toString();
} }
@ -282,21 +287,21 @@ public final class RSAUtils {
* @return PEM格式密钥 * @return PEM格式密钥
*/ */
public static String getBase64PEM(byte[] encoded) { public static String getBase64PEM(byte[] encoded) {
String base64String = Base64.getEncoder().encodeToString(encoded); String base64String =
StringBuffer base64ArrayString = new StringBuffer(""); Base64.getMimeEncoder(PEM_ARRAY_SIZE,LINE_SEPARATOR.getBytes()).encodeToString(encoded);
int startPosition = 0; //StringBuffer base64ArrayString = new StringBuffer("");
int endPosition = PEM_ARRAY_SIZE; //int startPosition = 0;
while(endPosition < base64String.length()) { //int endPosition = PEM_ARRAY_SIZE;
base64ArrayString.append(base64String.substring(startPosition, endPosition)).append("\n"); //while(endPosition < base64String.length()) {
startPosition = endPosition; // base64ArrayString.append(base64String.substring(startPosition, endPosition)).append("\n");
endPosition = endPosition + PEM_ARRAY_SIZE; // startPosition = endPosition;
} // endPosition = endPosition + PEM_ARRAY_SIZE;
if(startPosition < base64String.length()) { //}
base64ArrayString.append(base64String.substring(startPosition)).append("\n"); //if(startPosition < base64String.length()) {
} // base64ArrayString.append(base64String.substring(startPosition)).append("\n");
//}
return base64ArrayString.toString(); //return base64ArrayString.toString();
return base64String;
} }
} }

16
maxkey-common/src/test/java/org/maxkey/crypto/RSAUtilsTest.java
View File

@ -17,9 +17,7 @@
package org.maxkey.crypto; package org.maxkey.crypto;
import java.security.Key; import java.security.KeyPair;
import java.util.Map;
import org.junit.Test; import org.junit.Test;
@ -29,14 +27,16 @@ public class RSAUtilsTest {
public void test() throws Exception { public void test() throws Exception {
// RSA KeyPair // RSA KeyPair
Map<String, Object> key = RSAUtils.genKeyPair(); KeyPair keyPair = RSAUtils.genRSAKeyPair();
String privateKey = RSAUtils.getPublicKey2Hex(key); String privateKey = HexUtils.hex2String(keyPair.getPrivate().getEncoded());
String publicKey = RSAUtils.getPrivateKey2Hex(key); String publicKey = HexUtils.hex2String(keyPair.getPublic().getEncoded());
System.out.println("privateKey:" + privateKey); System.out.println("privateKey:" + privateKey);
System.out.println("publicKey:" + publicKey); System.out.println("publicKey:" + publicKey);
String signString = "my name is shiming"; String signString = "my name is shiming";
Key keyp = (Key) key.get(RSAUtils.PUBLIC_KEY); System.out.println("privateKey:");
System.out.println("privateKey:" + Base64Utils.base64UrlEncode(keyp.getEncoded())); System.out.println( Base64Utils.base64UrlEncode(keyPair.getPublic().getEncoded()));
System.out.println("PublicKeyPEM:");
System.out.println(RSAUtils.getPublicKeyPEM(keyPair.getPublic().getEncoded()));
byte[] encodedData = RSAUtils.encryptByPrivateKey(signString.getBytes(), privateKey); byte[] encodedData = RSAUtils.encryptByPrivateKey(signString.getBytes(), privateKey);
System.out.println("encodedData \r\n" + new String(encodedData)); System.out.println("encodedData \r\n" + new String(encodedData));