RAS非对称加解密-RAS加解密和签名和验签,密钥生成器(java代码)

RAS非对称加解密-RAS加解密和签名和验签,密钥生成器(java代码)
RSA 算法是一种非对称加解密算法。服务方生成一对 RSA 密钥，即公钥 + 私钥，将公钥提供给调用方，调用方使用公钥对数据进行加密后，服务方根据私钥进行解密。

1. RAS密钥生成器
2. RAS加解密和签名和验签 代码1
3. RAS实现签名和验签 代码2

import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;

/**
 * 密钥生成器
 */
public class RSAKeysGenerator {
    /**
     * RsaKey 密钥生成器
     *
     * @return stirng[0]-pubKey string[1]-privKey
     * @throws Exception
     * @author guolei
     */
    public static String[] generateRsaKeys() throws Exception {
        String[] keys = new String[2];
        String pubKeyStr = "", priKeyStr = "";
        KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA");
        generator.initialize(1024);// 1024 bit
        KeyPair pair = generator.generateKeyPair();
        PublicKey pubKey = pair.getPublic();
        PrivateKey privKey = pair.getPrivate();
        pubKeyStr = Base64.encode(pubKey.getEncoded()).replaceAll(" ", "");
        priKeyStr = Base64.encode(privKey.getEncoded()).replaceAll(" ", "");

        keys[0] = pubKeyStr; // public Key
        keys[1] = priKeyStr; // private key

        return keys;
    }
    public static void main(String[] args) {
        try {
            String[] keys = generateRsaKeys();
            System.out.println("Public Key::" + keys[0]);
            System.out.println("Private Key::" + keys[1]);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

2. RAS加解密和签名和验签 代码1

import javax.crypto.Cipher;
import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.InputStream;
import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.RSAPublicKeySpec;
import java.security.spec.X509EncodedKeySpec;

public class RSA {

    public static final String  SIGN_ALGORITHMS = "SHA1WithRSA";

    /**
    * RSA签名
    * @param content 待签名数据
    * @param privateKey 商户私钥
    * @param input_charset 编码格式
    * @return 签名值
    */
    public static String sign(String content, String privateKey, String input_charset)
    {
        try
        {
            PKCS8EncodedKeySpec priPKCS8     = new PKCS8EncodedKeySpec( Base64.decode(privateKey) );
            KeyFactory keyf                 = KeyFactory.getInstance("RSA");
            PrivateKey priKey                 = keyf.generatePrivate(priPKCS8);

            java.security.Signature signature = java.security.Signature
                .getInstance(SIGN_ALGORITHMS);

            signature.initSign(priKey);
            signature.update( content.getBytes(input_charset) );

            byte[] signed = signature.sign();

            return Base64.encode(signed);
        }
        catch (Exception e)
        {
            e.printStackTrace();
        }

        return null;
    }

    /**
    * RSA验签名检查
    * @param content 待签名数据
    * @param sign 签名值
    * @param ali_public_key 支付宝公钥
    * @param input_charset 编码格式
    * @return 布尔值
    */
    public static boolean verify(String content, String sign, String ali_public_key, String input_charset)
    {
        try
        {
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            byte[] encodedKey = Base64.decode(ali_public_key);
            PublicKey pubKey = keyFactory.generatePublic(new X509EncodedKeySpec(encodedKey));

            java.security.Signature signature = java.security.Signature
            .getInstance(SIGN_ALGORITHMS);

            signature.initVerify(pubKey);
            signature.update( content.getBytes(input_charset) );

            boolean bverify = signature.verify( Base64.decode(sign) );
            return bverify;

        }
        catch (Exception e)
        {
            e.printStackTrace();
        }

        return false;
    }

    /**
    * 私钥解密
    * @param content 密文
    * @param private_key 商户私钥
    * @param input_charset 编码格式
    * @return 解密后的字符串
    */
    public static String decrypt(String content, String private_key, String input_charset) throws Exception {
        PrivateKey prikey = getPrivateKey(private_key);

        Cipher cipher = Cipher.getInstance("RSA");
        cipher.init(Cipher.DECRYPT_MODE, prikey);

        InputStream ins = new ByteArrayInputStream(Base64.decode(content));
        ByteArrayOutputStream writer = new ByteArrayOutputStream();
        //rsa解密的字节大小最多是128，将需要解密的内容，按128位拆开解密
        byte[] buf = new byte[128];
        int bufl;

        while ((bufl = ins.read(buf)) != -1) {
            byte[] block = null;

            if (buf.length == bufl) {
                block = buf;
            } else {
                block = new byte[bufl];
                for (int i = 0; i < bufl; i++) {
                    block[i] = buf[i];
                }
            }

            writer.write(cipher.doFinal(block));
        }

        return new String(writer.toByteArray(), input_charset);
    }

    /**
     * 私钥解密
     *
     * @param secretText    待解密的密文字符串
     * @param privateKeyStr 私钥
     * @return 解密后的明文
     */
    public static String decrypt1(String secretText, String privateKeyStr,String input_charset) {
        try {
            // 生成私钥
            Cipher cipher = Cipher.getInstance("RSA");
            cipher.init(Cipher.DECRYPT_MODE, getPrivateKey(privateKeyStr));
            // 密文解码
            byte[] secretTextDecoded = Base64.decode(secretText);
            byte[] tempBytes = cipher.doFinal(secretTextDecoded);
            return new String(tempBytes);
        } catch (Exception e) {
            throw new RuntimeException("解密字符串[" + secretText + "]时遇到异常", e);
        }
    }

    /**
     * 公钥 加密
     * @param content
     * @param
     * @param input_charset
     * @return
     * @throws Exception
     */
    public static String encrypt(String content, String public_key, String input_charset) throws Exception {

        PublicKey pubkey = getPublicKey(public_key);

        Cipher cipher = Cipher.getInstance("RSA");
        cipher.init(Cipher.ENCRYPT_MODE, pubkey);
        byte[] tempBytes = cipher.doFinal(content.getBytes("UTF-8"));
        return Base64.encode(tempBytes);
//        return new String(tempBytes, input_charset);
    }

    /**
    * 得到私钥
    * @param key 密钥字符串（经过base64编码）
    * @throws Exception
    */
    private static PrivateKey getPrivateKey(String key) throws Exception {

        byte[] keyBytes;

        keyBytes = Base64.decode(key);

        PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(keyBytes);

        KeyFactory keyFactory = KeyFactory.getInstance("RSA");

        PrivateKey privateKey = keyFactory.generatePrivate(keySpec);

        return privateKey;
    }

    /**
     * 得到公钥
     * @param key
     * @return
     * @throws Exception
     */
    private static PublicKey getPublicKey(String key) throws Exception {
        byte[] keyBytes;
        keyBytes = Base64.decode(key);

        //Only RSAPublicKeySpec and X509EncodedKeySpec supported for RSA public keys
//        PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(keyBytes);
        X509EncodedKeySpec keySpec = new X509EncodedKeySpec(keyBytes);

        KeyFactory keyFactory = KeyFactory.getInstance("RSA");

        PublicKey publicKey = keyFactory.generatePublic(keySpec);
        return publicKey;
    }

    /**
     * 报文体签名=f6G0o2wme/8uiQFt6/FRd0kO160Mp+NEs9p3JizqHY3SjqYdp28Bk+DJW4heYLrmSIt3PyHrOdKGRppqfdjJt02VXUJyc/A0Xg0KuQ3ulfpmqzxOA4gzNea+CeZtLUjzshXq2WedEgH4QF4LrFkDeaMWefE3YkIOfwcbNrcJJtE=
     * verify flag=true
     * enctyptString=g0XdRF6wAELkudaOCdolTBhx4mkSX/7LtvbMKd1AZt79H2MSKI7U+fvR4Sb6NL8028LlH9lmmS3Og7BKzNz+yBhvGOiA3NKlIMh1GTBNsfmPwXapFcVDFghbkc/cpWyOLHv263fSHxCN4cVYenQYAxOSQgK2VZ7bMtt8E87eZSg=
     * detyptString={amount=250, name=张三, orderId=2014061114360001}
     * detyptStringNew={amount=250, name=张三, orderId=2014061114360001}
     *
     * @param args
     */
    public static void main(String[] args) {
        String pubKey = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUDWMv2wCwYlFKJebtYc+E3rji8rnYEeRZGU9t4Y6RFAhJfsCm1yUGAS26PhAsgYTJIptnBESr+RtATxOelh03JwEyFXEYyZyl2VQnbtAftHkkcnLp812z4FyDPRldwVj1AAdFGUEhYW4Hc1sbRJnv41LNJBDio8jiKPGQT9titQIDAQAB";
        String priKey = "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";

        String content ="{amount=250, name=张三, orderId=2014061114360001}";

        //rsa签名和验证签名

        //私钥加密  生成报文体和报文体签名
        String signData = sign(content,priKey,"UTF-8");
        System.out.println("报文体签名="+signData);

        //公钥验证签名
        boolean f = verify(content,signData,pubKey,"UTF-8");
        System.out.println("verify flag="+f);

        try {
            String enctyptString = encrypt(content,pubKey,"UTF-8");
            System.out.println("enctyptString="+enctyptString);

            //解密的方法1
            String detyptString = decrypt(enctyptString,priKey,"UTF-8");
            System.out.println("detyptString="+detyptString);

            //decrypt1 解密的方法2
            String detyptStringNew = decrypt1(enctyptString,priKey,"UTF-8");
            System.out.println("detyptStringNew="+detyptStringNew);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

3. RAS实现签名和验签 代码2

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import java.net.URLDecoder;
import java.net.URLEncoder;
import java.security.KeyFactory;
import java.security.Signature;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * 签名以及验签
 */
public class RSAUtil {

    private static final Logger logger = LoggerFactory.getLogger(RSAUtil.class);

    /** RSA:加密算法 */
    private static final String KEY_ALGORITHM = "RSA";

    /** SHA1WithRSA:用SHA算法进行签名，用RSA算法进行加密 */
    private static final String SIGN_ALGORITHMS = "SHA1withRSA";

    /**
     * 生成报文体和报文体签名
     *
     * @param privateKey
     * @param content
     * @param encoding
     * @return
     */
    public static String[] signData(String privateKey, String content, String encoding) {
        logger.info("原始报文内容:" + content);
        String param[] = new String[2];
        try {
            // 报文体使用base64编码
            content = Base64.encode(content.getBytes(encoding));
            // 删除base64编码中的空格
            content = content.replaceAll(" ", "");
            // 生成报文体签名
            String contentSign = envolopData(privateKey, content);
            // 报文体签名进行url编码
             contentSign = URLEncoder.encode(contentSign, encoding);
            logger.info("报文体签名:" + contentSign);
            // 报文体进行url编码
             content = URLEncoder.encode(content, encoding);
            logger.info("base64编码报文体:" + content);
            // 返回报文体签名
            param[0] = contentSign;
            // 返回报文体
            param[1] = content;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return param;
    }

    /**
     * 生成报文体签名
     *
     * @param privateKey
     * @param content
     * @return
     */
    private static String envolopData(String privateKey, String content) {
        // 报文体签名
        String contentSign = "";
        try {
            // 根据密钥字符创建密钥类
            PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(Base64.decode(privateKey));
            KeyFactory fac = KeyFactory.getInstance(KEY_ALGORITHM);
            RSAPrivateKey rsaPrivateKey = (RSAPrivateKey) fac.generatePrivate(keySpec);
            // 创建签名算法类
            Signature sigEng = Signature.getInstance(SIGN_ALGORITHMS);
            sigEng.initSign(rsaPrivateKey);
            // 生成签名
            sigEng.update(content.getBytes("UTF-8"));
            byte[] signature = sigEng.sign();
            // base64编码[请求报文签名]
            contentSign = Base64.encode(signature);
            // 删除换行符[请求报文签名]
            contentSign = contentSign.replaceAll(" ", "");
        } catch (Exception e) {
            e.printStackTrace();
        }
        return contentSign;
    }

    /**
     * 验证返回的报文的签名
     * @param publicKey 公钥
     * @param sign 返回报文体的签名
     * @param src 返回报文体
     * @param encoding 编码格式
     * @return
     */
    public static boolean rsaVerify(String publicKey, String sign, String src, String encoding) {
        // 验签结果
        boolean result = false;
        try {
            // url解密[返回报文签名]
            sign = URLDecoder.decode(sign, encoding);
            // base64解密[返回报文签名]
            byte[] signature = Base64.decode(sign);
            // url解密[返回报文]
            src = URLDecoder.decode(src, encoding);
            // 根据密钥创建密钥类
            X509EncodedKeySpec keySpec = new X509EncodedKeySpec(Base64.decode(publicKey));
            KeyFactory fac = KeyFactory.getInstance(KEY_ALGORITHM);
            RSAPublicKey rsaPubKey = (RSAPublicKey) fac.generatePublic(keySpec);
            // 创建签名方法类
            Signature sigEng = Signature.getInstance(SIGN_ALGORITHMS);
            sigEng.initVerify(rsaPubKey);
            // 生成签名
            sigEng.update(src.getBytes(encoding));
            // 验证签名是一致
            result = sigEng.verify(signature);
        } catch (Exception e) {
            e.printStackTrace();
        }
        return result;
    }

    /**
     * 解密返回的报文体信息
     *
     * @param content
     * @param encoding
     * @return
     */
    public static String decodeContent(String content, String encoding){
        String result = "";
        try {
            // 返回报文体的签名执行url解密
            result = URLDecoder.decode(content, encoding);
            // 返回报文体的签名执行base64解密
            result = new String(Base64.decode(result), encoding);
        } catch (Exception e) {
            e.printStackTrace();
        }
        return result;
    }

    /**
     * 报文体签名=JZqGuYnoNkjre6qsIk5avdfYhkHyXDnxkEaSy9UMygX8cvVn4fvMc8can5rZUSefnI3M6a5RCH2YtHuu3TqVb%2FAIoQ8zNeWXb7OeRWgfbR8KrOGTZdfuZebQwT5Id9HBubLQ4BnnRUoPtgbpVZbHr26RwJMhPg36SYUaHPvA0k0%3D
     * base64编码报文体=e2Ftb3VudD0yNTAsIG5hbWU95byg5LiJLCBvcmRlcklkPTIwMTQwNjExMTQzNjAwMDF9
     * 解析={amount=250, name=张三, orderId=2014061114360001}
     * verify flag=true
     *
     * 报文体签名=f6G0o2wme/8uiQFt6/FRd0kO160Mp+NEs9p3JizqHY3SjqYdp28Bk+DJW4heYLrmSIt3PyHrOdKGRppqfdjJt02VXUJyc/A0Xg0KuQ3ulfpmqzxOA4gzNea+CeZtLUjzshXq2WedEgH4QF4LrFkDeaMWefE3YkIOfwcbNrcJJtE=
     * verify flag=true
     *
     * 测试类
     * @param args
     */
    public static void main(String[] args) {
        String pubKey = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUDWMv2wCwYlFKJebtYc+E3rji8rnYEeRZGU9t4Y6RFAhJfsCm1yUGAS26PhAsgYTJIptnBESr+RtATxOelh03JwEyFXEYyZyl2VQnbtAftHkkcnLp812z4FyDPRldwVj1AAdFGUEhYW4Hc1sbRJnv41LNJBDio8jiKPGQT9titQIDAQAB";
        String priKey = "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";

        String content ="{amount=250, name=张三, orderId=2014061114360001}";

        //私钥加密  生成报文体和报文体签名
        String[] signData = signData(priKey,content,"UTF-8");
        System.out.println("报文体签名="+signData[0]);
        System.out.println("base64编码报文体="+signData[1]);
        //解密返回的报文体信息
        System.out.println("解析="+decodeContent(signData[1],"UTF-8"));

        //公钥验证签名
        boolean f = rsaVerify(pubKey,signData[0],signData[1],"UTF-8");
        System.out.println("verify flag="+f);
    }
}