• java使用bouncycastle加解密

    jdk默认带了一些常见的加解密方式，当我们常见的加解密不能满足时，就需要用到一些第三方的库了，bouncycastle就是其中一种。

    但是bouncycastle文档比较少。简单介绍一下写法

    1.导入依赖

    1.    <dependency>
    2.             <groupId>org.bouncycastle</groupId>
    3.             <artifactId>bcprov-jdk15on</artifactId>
    4.             <version>1.69</version>
    5.         </dependency>

    2.写代码

    常见的有两种方式，一种使用BouncyCastleProvider，另一种使用BlockCipherEngine

    BouncyCastleProvider使用方式跟原生jdk类似，多数getInstance的地方指定一下provider就行

    BouncyCastleProvider方式DES加解密代码如下

    1. package com.vvvtimes.demo.util.endecrypt;
    2.  
    3. import lombok.extern.slf4j.Slf4j;
    4. import org.bouncycastle.jce.provider.BouncyCastleProvider;
    5.  
    6. import javax.crypto.Cipher;
    7. import javax.crypto.KeyGenerator;
    8. import javax.crypto.SecretKey;
    9. import javax.crypto.SecretKeyFactory;
    10. import javax.crypto.spec.DESKeySpec;
    11. import javax.crypto.spec.IvParameterSpec;
    12. import java.security.Key;
    13. import java.security.NoSuchAlgorithmException;
    14.  
    15. @Slf4j
    16. public class BcDesUtil {
    17.  
    18.     private static final BouncyCastleProvider provider;
    19.  
    20.     //BouncyCastle与JDK加解密类区别
    21.     //KeyFactory.getInstance("RSA"); +provider-->KeyFactory.getInstance("RSA", provider)
    22.     //Cipher.getInstance("RSA");  +provider-->Cipher.getInstance("RSA", provider)
    23.     //Signature.getInstance("SHA1withRSA"); +provider-->Signature.getInstance("SHA1withRSA", provider);
    24.     //KeyGenerator.getInstance("DES") ; +provider-->KeyGenerator.getInstance("DES", provider); 或者KeyGenerator.getInstance("DES","BC")
    25.  
    26.     /**
    27.      * 偏移变量，固定占8位字节
    28.      */
    29.     private final static String IV_PARAMETER = "12345678";
    30.  
    31.     /*
    32.      * 生成key
    33.      */
    34.     public byte[] generateKey() {
    35.         KeyGenerator keyGenerator = null;
    36.         try {
    37.             keyGenerator = KeyGenerator.getInstance("DES",provider);
    38.             keyGenerator.init(56);
    39.             SecretKey secretKey = keyGenerator.generateKey();
    40.             byte[] encoded = secretKey.getEncoded();
    41.             return encoded;
    42.         } catch (NoSuchAlgorithmException e) {
    43.             e.printStackTrace();
    44.         }
    45.         return null;
    46.     }
    47.  
    48.  
    49.     /**
    50.      * 生成key
    51.      *
    52.      * @param password 密钥字符串
    53.      * @return 密钥对象
    54.      * @throws Exception
    55.      */
    56.     private static Key convertKey(byte[] password) throws Exception {
    57.         DESKeySpec dks = new DESKeySpec(password);
    58.         SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES",provider);
    59.         return keyFactory.generateSecret(dks);
    60.     }
    61.  
    62.     /**
    63.      * DES加密
    64.      */
    65.     public static byte[] encrypt(byte[] data, byte[] password) {
    66.         if (password == null || password.length < 8) {
    67.             throw new RuntimeException("加密失败，key不能小于8位");
    68.         }
    69.         if (data == null)
    70.             return null;
    71.         try {
    72.             Key secretKey = convertKey(password);
    73.             Cipher cipher = Cipher.getInstance("DES/CBC/PKCS5Padding",provider);
    74.             IvParameterSpec iv = new IvParameterSpec(IV_PARAMETER.getBytes("utf-8"));
    75.             cipher.init(Cipher.ENCRYPT_MODE, secretKey, iv);
    76.             byte[] bytes = cipher.doFinal(data);
    77.             return bytes;
    78.         } catch (Exception e) {
    79.             e.printStackTrace();
    80.             return data;
    81.         }
    82.     }
    83.  
    84.     /**
    85.      * DES解密解密字符串
    86.      */
    87.     public static byte[] decrypt(byte[] data, byte[] password) {
    88.         if (password == null || password.length < 8) {
    89.             throw new RuntimeException("加密失败，key不能小于8位");
    90.         }
    91.         if (data == null)
    92.             return null;
    93.         try {
    94.             Key secretKey = convertKey(password);
    95.             Cipher cipher = Cipher.getInstance("DES/CBC/PKCS5Padding",provider);
    96.             IvParameterSpec iv = new IvParameterSpec(IV_PARAMETER.getBytes("utf-8"));
    97.             cipher.init(Cipher.DECRYPT_MODE, secretKey, iv);
    98.             byte[] bytes = cipher.doFinal(data);
    99.             return bytes;
    100.         } catch (Exception e) {
    101.             e.printStackTrace();
    102.             return data;
    103.         }
    104.     }
    105.  
    106.     /**
    107.      * byte数组转十六进制
    108.      *
    109.      * @param bytes
    110.      * @return
    111.      */
    112.     public static String byte2HexString(byte[] bytes) {
    113.         StringBuilder hex = new StringBuilder();
    114.         if (bytes != null) {
    115.             for (Byte b : bytes) {
    116.                 hex.append(String.format("%02X", b.intValue() & 0xFF));
    117.             }
    118.         }
    119.         return hex.toString();
    120.     }
    121.  
    122.     //测试
    123.     public static void main(String[] args) throws Exception {
    124.         String source = "admin测试信息1234!@#$%^&*()_+";
    125.         System.out.println("原  文: " + source);
    126.         String password = "lw112190@2023";
    127.         byte[] encryptDataBytes = encrypt(source.getBytes("utf-8"), password.getBytes("utf-8"));
    128.         String encryptData = byte2HexString(encryptDataBytes);
    129.         System.out.println("加密后: " + encryptData);
    130.         byte[] decryptDataBytes = decrypt(encryptDataBytes, password.getBytes("utf-8"));
    131.         String decryptData = new String(decryptDataBytes, "utf-8");
    132.         ;
    133.         System.out.println("解密后: " + decryptData);
    134.     }
    135.  
    136.     static {
    137.         provider = new BouncyCastleProvider();
    138.     }
    139. }

    BlockCipherEngine方式的DES加解密代码如下

    1. package com.vvvtimes.demo.util.endecrypt;
    2.  
    3. import org.bouncycastle.crypto.BlockCipher;
    4. import org.bouncycastle.crypto.BufferedBlockCipher;
    5. import org.bouncycastle.crypto.InvalidCipherTextException;
    6. import org.bouncycastle.crypto.engines.DESEngine;
    7. import org.bouncycastle.crypto.modes.CBCBlockCipher;
    8. import org.bouncycastle.crypto.paddings.PKCS7Padding;
    9. import org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher;
    10. import org.bouncycastle.crypto.params.DESParameters;
    11. import org.bouncycastle.crypto.params.ParametersWithIV;
    12. import org.bouncycastle.jce.provider.BouncyCastleProvider;
    13.  
    14. import javax.crypto.SecretKey;
    15. import javax.crypto.SecretKeyFactory;
    16. import javax.crypto.spec.DESKeySpec;
    17. import java.io.UnsupportedEncodingException;
    18. import java.security.InvalidKeyException;
    19. import java.security.NoSuchAlgorithmException;
    20. import java.security.spec.InvalidKeySpecException;
    21.  
    22. public class BcDesEngineUtil {
    23.  
    24.     private final static BlockCipher engine;
    25.     private static final BouncyCastleProvider provider;
    26.  
    27.     /**
    28.      * 偏移变量，固定占8位字节
    29.      */
    30.     private final static String IV_PARAMETER = "12345678";
    31.  
    32.     /**
    33.      * 生成key
    34.      *
    35.      * @param password 密钥字符串
    36.      * @return 密钥对象
    37.      * @throws Exception
    38.      */
    39.     private static byte[] convertKeyEncoded(byte[] password) {
    40.         byte[] result = null;
    41.         try {
    42.             DESKeySpec dks  = new DESKeySpec(password);
    43.             SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES",provider);
    44.             SecretKey secretKey = keyFactory.generateSecret(dks);
    45.             return secretKey.getEncoded();
    46.         } catch (InvalidKeyException e) {
    47.             e.printStackTrace();
    48.         } catch (NoSuchAlgorithmException e) {
    49.             e.printStackTrace();
    50.         } catch (InvalidKeySpecException e) {
    51.             e.printStackTrace();
    52.         }
    53.         return result;
    54.  
    55.     }
    56.  
    57.     private static byte[] encrypt( byte[] ptBytes,byte[] key) throws InvalidCipherTextException, UnsupportedEncodingException {
    58.         BufferedBlockCipher cipher = new PaddedBufferedBlockCipher(new CBCBlockCipher(engine), new PKCS7Padding());
    59.         cipher.init(true, new ParametersWithIV(new DESParameters(key), IV_PARAMETER.getBytes("utf-8")));
    60.         byte[] rv = new byte[cipher.getOutputSize(ptBytes.length)];
    61.         int tam = cipher.processBytes(ptBytes, 0, ptBytes.length, rv, 0);
    62.  
    63.         cipher.doFinal(rv, tam);
    64.         return rv;
    65.     }
    66.  
    67.  
    68.     private static byte[] decrypt( byte[] cipherText,byte[] key) throws InvalidCipherTextException, UnsupportedEncodingException {
    69.         BufferedBlockCipher cipher = new PaddedBufferedBlockCipher(new CBCBlockCipher(engine), new PKCS7Padding());
    70.         cipher.init(false, new ParametersWithIV(new DESParameters( key),IV_PARAMETER.getBytes("utf-8")));
    71.         byte[] rv = new byte[cipher.getOutputSize(cipherText.length)];
    72.         int tam = cipher.processBytes(cipherText, 0, cipherText.length, rv, 0);
    73.         cipher.doFinal(rv, tam);
    74.         return rv;
    75.     }
    76.  
    77.     /**
    78.      * byte数组转十六进制
    79.      *
    80.      * @param bytes
    81.      * @return
    82.      */
    83.     public static String byte2HexString(byte[] bytes) {
    84.         StringBuilder hex = new StringBuilder();
    85.         if (bytes != null) {
    86.             for (Byte b : bytes) {
    87.                 hex.append(String.format("%02X", b.intValue() & 0xFF));
    88.             }
    89.         }
    90.         return hex.toString();
    91.     }
    92.  
    93.     //测试
    94.     public static void main(String[] args) throws Exception {
    95.         String source = "admin测试信息1234!@#$%^&*()_+";
    96.         System.out.println("原  文: " + source);
    97.         String password = "lw112190@2023";
    98.         //String password ="geffzhan";
    99.         //String password ="lw112190";
    100.         byte[] keyEncoded = convertKeyEncoded(password.getBytes("utf-8"));
    101.  
    102.         byte[] encryptDataBytes = encrypt(source.getBytes("utf-8"), keyEncoded);
    103.         String encryptData = byte2HexString(encryptDataBytes);
    104.         System.out.println("加密后: " + encryptData);
    105.         byte[] decryptDataBytes = decrypt(encryptDataBytes, keyEncoded);
    106.         String decryptData = new String(decryptDataBytes, "utf-8");
    107.         ;
    108.         System.out.println("解密后: " + decryptData);
    109.         /*
    110.          *原  文: admin测试信息1234!@#$%^&*()_+
    111.         加密后: 1D5C21B694A9085A69BE7EA37C197D1632239545298613B944C3AC272750A519F66FB43EFEC55C89
    112.         解密后: admin测试信息1234!@#$%^&*()_+
    113.          */
    114.     }
    115.  
    116.     static {
    117.         engine = new DESEngine();
    118.         provider = new BouncyCastleProvider();
    119.     }
    120.  
    121. }

    3.其他示例

    AES加解密

    1. package com.vvvtimes.demo.util.endecrypt;
    2.  
    3. import lombok.extern.slf4j.Slf4j;
    4. import org.bouncycastle.jce.provider.BouncyCastleProvider;
    5.  
    6. import javax.crypto.Cipher;
    7. import javax.crypto.KeyGenerator;
    8. import javax.crypto.SecretKey;
    9. import javax.crypto.SecretKeyFactory;
    10. import javax.crypto.spec.DESKeySpec;
    11. import javax.crypto.spec.IvParameterSpec;
    12. import javax.crypto.spec.SecretKeySpec;
    13. import java.security.AlgorithmParameters;
    14. import java.security.Key;
    15. import java.security.NoSuchAlgorithmException;
    16. import java.security.spec.InvalidParameterSpecException;
    17.  
    18. @Slf4j
    19. public class BcAesUtil {
    20.  
    21.     private static final BouncyCastleProvider provider;
    22.  
    23.     /**
    24.      * 偏移变量，固定占8位字节
    25.      */
    26.     private final static String IV_PARAMETER = "1234567890123456";
    27.  
    28.     /**
    29.      * AES加密
    30.      */
    31.     public static byte[] encrypt(byte[] data, byte[] password, byte[] iv) {
    32.         if (data == null)
    33.             return null;
    34.         try {
    35.             Key secretKey = new SecretKeySpec(password,"AES");
    36.             Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding",provider);
    37.             AlgorithmParameters generateIV = generateIV(iv);
    38.             cipher.init(Cipher.ENCRYPT_MODE, secretKey, generateIV);
    39.             byte[] bytes = cipher.doFinal(data);
    40.             return bytes;
    41.         } catch (Exception e) {
    42.             e.printStackTrace();
    43.             return data;
    44.         }
    45.     }
    46.  
    47.     /**
    48.      * AES解密解密字符串
    49.      */
    50.     public static byte[] decrypt(byte[] data, byte[] password, byte[] iv) {
    51.         if (data == null)
    52.             return null;
    53.         try {
    54.             Key secretKey = new SecretKeySpec(password,"AES");
    55.             Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding",provider);
    56.             AlgorithmParameters generateIV = generateIV(iv);
    57.             cipher.init(Cipher.DECRYPT_MODE, secretKey, generateIV);
    58.             byte[] bytes = cipher.doFinal(data);
    59.             return bytes;
    60.         } catch (Exception e) {
    61.             e.printStackTrace();
    62.             return data;
    63.         }
    64.     }
    65.  
    66.    public static AlgorithmParameters generateIV(byte[] iv){
    67.        AlgorithmParameters params = null;
    68.        try {
    69.            params = AlgorithmParameters.getInstance("AES");
    70.            params.init(new IvParameterSpec(iv));
    71.        } catch (NoSuchAlgorithmException | InvalidParameterSpecException e) {
    72.            e.printStackTrace();
    73.        }
    74.        return params;
    75.  
    76.     }
    77.  
    78.     /**
    79.      * byte数组转十六进制
    80.      *
    81.      * @param bytes
    82.      * @return
    83.      */
    84.     public static String byte2HexString(byte[] bytes) {
    85.         StringBuilder hex = new StringBuilder();
    86.         if (bytes != null) {
    87.             for (Byte b : bytes) {
    88.                 hex.append(String.format("%02X", b.intValue() & 0xFF));
    89.             }
    90.         }
    91.         return hex.toString();
    92.     }
    93.  
    94.     //测试
    95.     public static void main(String[] args) throws Exception {
    96.         String source = "admin测试信息1234!@#$%^&*()_+";
    97.         System.out.println("原  文: " + source);
    98.         String password = "passwordpassword";
    99.         byte[] encryptDataBytes = encrypt(source.getBytes("utf-8"), password.getBytes("utf-8"),IV_PARAMETER.getBytes("utf-8"));
    100.         String encryptData = byte2HexString(encryptDataBytes);
    101.         System.out.println("加密后: " + encryptData);
    102.         byte[] decryptDataBytes = decrypt(encryptDataBytes, password.getBytes("utf-8"),IV_PARAMETER.getBytes("utf-8"));
    103.         String decryptData = new String(decryptDataBytes, "utf-8");
    104.         System.out.println("解密后: " + decryptData);
    105.     }
    106.  
    107.     static {
    108.         provider = new BouncyCastleProvider();
    109.     }
    110. }

    RSA私钥解密 签名

    1. package com.vvvtimes.demo.util.endecrypt;
    2.  
    3. import cn.hutool.core.codec.Base64;
    4. import org.bouncycastle.jce.provider.BouncyCastleProvider;
    5.  
    6. import javax.crypto.BadPaddingException;
    7. import javax.crypto.Cipher;
    8. import javax.crypto.IllegalBlockSizeException;
    9. import javax.crypto.NoSuchPaddingException;
    10. import java.nio.charset.Charset;
    11. import java.security.*;
    12. import java.security.spec.PKCS8EncodedKeySpec;
    13.  
    14. public class BcRsaUtil {
    15.     private static final BouncyCastleProvider provider;
    16.  
    17.  
    18.  
    19.  
    20.     private static PrivateKey getPrivateKey(String pkcs8Key) {
    21.  
    22.         byte[] pkcs8Keybytes = Base64.decode(pkcs8Key.getBytes(Charset.forName("UTF-8")));
    23.         final PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(pkcs8Keybytes);
    24.         try {
    25.             return KeyFactory.getInstance("RSA", provider).generatePrivate(pkcs8EncodedKeySpec);
    26.         } catch (Exception ex) {
    27.             ex.printStackTrace();
    28.             return null;
    29.         }
    30.     }
    31.  
    32.     /**
    33.      * RSA私钥解密
    34.      *
    35.      * @param inputByte 待解密字节数组
    36.      * @param pkcs8Key  私钥
    37.      * @return 明文
    38.      */
    39.     public static byte[] decrypt(byte[] inputByte, String pkcs8Key) {
    40.         byte[] outputeByte = null;
    41.         try {
    42.             PrivateKey privateKey = getPrivateKey(pkcs8Key);
    43.             //RSA解密
    44.             Cipher cipher = Cipher.getInstance("RSA", provider);
    45.             cipher.init(Cipher.DECRYPT_MODE, privateKey);
    46.             outputeByte = cipher.doFinal(inputByte);
    47.  
    48.         } catch (NoSuchPaddingException | InvalidKeyException | IllegalBlockSizeException | BadPaddingException | NoSuchAlgorithmException e) {
    49.             e.printStackTrace();
    50.         }
    51.         return outputeByte;
    52.     }
    53.  
    54.     public static byte[] sign(final byte[] array, String pkcs8Key) {
    55.         try {
    56.             PrivateKey privateKey = getPrivateKey(pkcs8Key);
    57.             final Signature instance = Signature.getInstance("SHA1withRSA", provider);
    58.             instance.initSign(privateKey);
    59.             instance.update(array);
    60.             return instance.sign();
    61.         } catch (GeneralSecurityException ex) {
    62.             throw new RuntimeException("License Server installation error 0000000F2", ex);
    63.         }
    64.     }
    65.  
    66.     static {
    67.         provider = new BouncyCastleProvider();
    68.     }
    69. }

    实际上bouncycastle还支持部分国密算法，这一部分不用自己写实现了。

  • 相关阅读:
    MetaObjectHandler的使用
    比较两个对象 取最大值 并返回对象
    网络安全等级保护基本要求解读- 安全计算环境-应用系统和数据安全
    AMD老电脑超频及性能提升方案及实施
    SpringBoot 整合 Dozer 映射框架
    Java EE -- Spring
    ardupilot的编译过程
    hi3559 C/C++混编 makefile（基于官方sample）
    博弈论
    熊猫在线影院系统笔记链接
  • 原文地址：https://blog.csdn.net/gsls200808/article/details/134256085