欢迎您访问 最编程 本站为您分享编程语言代码，编程技术文章！

热门搜索/Hot Search

您现在的位置是： 首页

深入理解Java中的数字证书与密码学：详尽解析

最编程 2024-02-21 13:30:57
...
import javax.crypto.Cipher; import java.io.FileInputStream; import java.security.KeyStore; import java.security.PrivateKey; import java.security.PublicKey; import java.security.Signature; import java.security.cert.Certificate; import java.security.cert.CertificateFactory; import java.security.cert.X509Certificate; public class CertCoder { //证书类型x509 public static final String CERT_TYPE = "x.509"; /** * 由keyStore获得私钥 * @param keyStorePath 密钥库路径 * @param alias 别名 * @param pwd 密码 * @return 私钥 * @throws Exception */ private static PrivateKey getPrivateKeyByKeyStore(String keyStorePath,String alias,String pwd) throws Exception { //获取密钥库 KeyStore ks = getKeyStore(keyStorePath,pwd); //获得私钥 return (PrivateKey)ks.getKey(alias,pwd.toCharArray()); } /** * 由证书获得公钥 * @param certPath 证书路径 * @return 公钥 * @throws Exception */ private static PublicKey getPublicKeyByKeyStore(String certPath) throws Exception { //获得证书 Certificate certificate = getCertificate(certPath); //获得公钥 return certificate.getPublicKey(); } /** * 获得证书 * @param certPath 证书路径 * @return 证书 */ private static Certificate getCertificate(String certPath) throws Exception { //实例化证书工厂 CertificateFactory factory = CertificateFactory.getInstance(CERT_TYPE); //获取证书文件流 FileInputStream fis = new FileInputStream(certPath); //生成证书 Certificate certificate = factory.generateCertificate(fis); //关闭文件流 fis.close(); return certificate; } /** * 获得证书 * @param keyStorePath 密钥库路径 * @param alias 别名 * @param password 密码 * @return 证书 * @throws Exception */ private static Certificate getCertificate(String keyStorePath,String alias,String password) throws Exception { //获得密钥库 KeyStore keyStore = getKeyStore(keyStorePath,password); //获得证书 return keyStore.getCertificate(alias); } /** * 获取KeyStore * @param keyStorePath 路径 * @param pwd 密码 * @return KeyStore * @throws Exception */ private static KeyStore getKeyStore(String keyStorePath, String pwd) throws Exception { //实例化密钥库 KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); //获得密钥库文件流 FileInputStream is = new FileInputStream(keyStorePath); //加载密钥库 keyStore.load(is,pwd.toCharArray()); //关闭文件流 is.close(); return keyStore; } /** * 私钥加密 * @param data 待加密数据 * @param keyStorePath 密钥库路径 * @param alias 别名 * @param pwd 密码 * @return 加密数据 * @throws Exception */ public static byte[] encryptByPrivateKey(byte[] data,String keyStorePath,String alias,String pwd) throws Exception { //获取私钥 PrivateKey privateKey = getPrivateKeyByKeyStore(keyStorePath,alias,pwd); //对数据加密 Cipher cipher = Cipher.getInstance(privateKey.getAlgorithm()); cipher.init(Cipher.ENCRYPT_MODE,privateKey); return cipher.doFinal(data); } /** * 私钥解密 * @param data 待解密数据 * @param keyStorePath 密钥库路径 * @param alias 别名 * @param pwd 密码 * @return 解密后的数据 * @throws Exception */ public static byte[] decryptByPrivateKey(byte[] data,String keyStorePath,String alias,String pwd) throws Exception { //获取私钥 PrivateKey privateKey = getPrivateKeyByKeyStore(keyStorePath,alias,pwd); //解密操作 Cipher cipher = Cipher.getInstance(privateKey.getAlgorithm()); cipher.init(Cipher.DECRYPT_MODE,privateKey); return cipher.doFinal(data); } /** * 公钥加密 * @param data 代加密数据 * @param certPath 证书路径 * @return 密文 * @throws Exception */ public static byte[] encryptByPublicKey(byte[] data,String certPath) throws Exception { PublicKey publicKey = getPublicKeyByKeyStore(certPath); Cipher cipher = Cipher.getInstance(publicKey.getAlgorithm()); cipher.init(Cipher.ENCRYPT_MODE,publicKey); return cipher.doFinal(data); } /** * 公钥解密 * @param data 待解密数据 * @param cerPath 证书路径 * @return 明文 * @throws Exception */ public static byte[] decryptByOublicKey(byte[] data,String cerPath) throws Exception { PublicKey publicKey = getPublicKeyByKeyStore(cerPath); Cipher cipher = Cipher.getInstance(publicKey.getAlgorithm()); cipher.init(Cipher.DECRYPT_MODE,publicKey); return cipher.doFinal(data); } /** * 由证书构建签名 * @param sign 待签名数据 * @param keyStorePath 密钥库路径 * @param alias 别名 * @param pwd 密码 * @return * @throws Exception */ public static byte[] sign(byte[] sign,String keyStorePath,String alias,String pwd) throws Exception { //获取证书 X509Certificate certificate = (X509Certificate) getCertificate(keyStorePath,alias,pwd); //构建签名 Signature signature = Signature.getInstance(certificate.getSigAlgName()); //获取私钥 PrivateKey privateKey = getPrivateKeyByKeyStore(keyStorePath,alias,pwd); //初始化签名，有私钥构建 signature.initSign(privateKey); signature.update(sign); return signature.sign(); } /** * 认证 * @param data 数据 * @param sign 签名 * @param cerPath 证书路径 * @return 数据是否有改变 * @throws Exception */ public static boolean vertify(byte[] data,byte[] sign,String cerPath) throws Exception { //获取证书 X509Certificate certificate = (X509Certificate) getCertificate(cerPath); //获取公钥 PublicKey publicKey = certificate.getPublicKey(); Signature signature = Signature.getInstance(certificate.getSigAlgName()); signature.initVerify(publicKey); signature.update(data); return signature.verify(sign); } public static void main(String[] args) throws Exception { String pwd = "Lu3jianL6"; String alias = "www.zlex.org"; String cerPath = "D:\\Program Files\\Java\\jdk1.8.0_201\\bin\\zlex.cer"; String keyStorePath = "D:\\Program Files\\Java\\jdk1.8.0_201\\bin\\zlex.keystore"; byte[] data = "心里有思念的人就不会孤独".getBytes("utf-8"); System.err.println("公钥加密，私钥解密"); byte[] bytes = encryptByPublicKey(data, cerPath); System.out.println("公钥加密：" + new String(bytes,"utf-8")); byte[] result = decryptByPrivateKey(bytes, keyStorePath, alias, pwd); System.out.println("私钥解密："+new String(result,"utf-8")); System.err.println("私钥加密，公钥解密"); byte[] result1 = encryptByPrivateKey(data, keyStorePath, alias, pwd); System.out.println("私钥加密：" + new String(result1,"utf-8")); byte[] bytes1 = decryptByOublicKey(result1, cerPath); System.out.println("公钥解密：" + new String(bytes1,"utf-8")); System.err.println("数字签名"); byte[] sign = sign(data,keyStorePath,alias,pwd); System.out.println("签名：" + new String(sign,"utf-8")); System.out.println(vertify(data,sign,cerPath)); } } //执行结果 公钥加密，私钥解密 ???H[:A??D`U???J?*??..7?S??D?v8??O????D?*????x? o? "H*#H??`T?v???\rf???a?H??*a?Av?c?0'?MN?PQ?O???1.VR?at:hV?zY?==?/?ī,???????`???$(?^?s 7/??2?'??5??Tu0??Js|9K*E%?A??C?ea?29 ?{?SM????^ ????????lf)???+???k??I?$?8? 私钥加密，公钥解密 私钥解密：心里有思念的人就不会孤独 私钥加密：u?)??? -l?x?n???EQ?N/??*????x?9?\w?i}ZZ??K??v?k???????$??j?z?h?/f`???8L?$<s#??<??8se?ы ē?*J???R??^??IZz{????A??2I4???%? P????????!?o??XjRBryMj?Z?X w& ?h???R?????WR???>>??.\G?q????a?A??$???# %????????v??L`)????? 公钥解密：心里有思念的人就不会孤独 数字签名 签名：^???<C??WqN:A[?WM?t??+?RP?X??7?_<???Z?R,?i8%qЬa??!?>G-6U??|??6?1r9|??hQ????h? z?5???O* H9??N v?F2~s6I???DX??R^?@)A?NY/g?*??oQU?I@w=?? ??hDv? h-?????lO???#?O?3?`?c?P??X?u5TaO??Cz4??p?1???@6KS???5?!< y<?34?x$?R3n?G true

上一篇： 若需在IE浏览器以管理员身份访问该页面，请尝试用管理员权限重新安装Microsoft Edge

下一篇： 如何设置及处理CDN中的HTTPS问题与常见难题

推荐阅读