• java DH密钥交换算法实现类


    import javax.crypto.Cipher;
    import javax.crypto.KeyAgreement;
    import javax.crypto.KeyGenerator;
    import javax.crypto.SecretKey;
    import javax.crypto.interfaces.DHPrivateKey;
    import javax.crypto.interfaces.DHPublicKey;
    import javax.crypto.spec.DHParameterSpec;
    import javax.crypto.spec.SecretKeySpec;
    import java.security.*;
    import java.security.spec.PKCS8EncodedKeySpec;
    import java.security.spec.X509EncodedKeySpec;
    import java.util.HashMap;
    import java.util.Map;
    
    public class DHUtils {
        /**
         * 非对称加密密钥算法
         */
        private static final String KEY_ALGORITHM = "DH";
        /**
         * 本地密钥算法,即对称加密密钥算法
         * 可选DES、DESede或者AES
         */
        private static final String SELECT_ALGORITHM = "AES";
    
        /**
         * 默认的加密算法
         */
        private static final String DEFAULT_CIPHER_ALGORITHM = "AES/ECB/PKCS5Padding";
    
    
        /**
         * 密钥长度
         */
    
        private static final int KEY_SIZE = 512;
        //公钥
        private static final String PUBLIC_KEY = "DHPublicKey";
        //私钥
        private static final String PRIVATE_KEY = "DHPrivateKey";
    
        /**
         * 初始化甲方密钥
         *
         * @return Map 甲方密钥Map
         * @throws Exception
         */
        public static Map<String, Object> initKey() throws Exception {
            //实例化密钥对生成器
            KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance(KEY_ALGORITHM);
            //初始化密钥对生成器
            keyPairGenerator.initialize(KEY_SIZE);
            //生成密钥对
            KeyPair keyPair = keyPairGenerator.generateKeyPair();
            //甲方公钥
            DHPublicKey publicKey = (DHPublicKey) keyPair.getPublic();
            //甲方私钥
            DHPrivateKey privateKey = (DHPrivateKey) keyPair.getPrivate();
            //将密钥对存储在Map中
            Map<String, Object> keyMap = new HashMap<String, Object>(2);
            keyMap.put(PUBLIC_KEY, publicKey);
            keyMap.put(PRIVATE_KEY, privateKey);
            return keyMap;
        }
    
        /**
         * 初始化乙方密钥
         *
         * @param key 甲方公钥
         * @return Map 乙方密钥Map
         * @throws Exception
         */
        public static Map<String, Object> initKey(byte[] key) throws Exception {
            //解析甲方公钥
            //转换公钥材料
            X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(key);
            //实例化密钥工厂
            KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
            //产生公钥
            PublicKey pubKey = keyFactory.generatePublic(x509KeySpec);
            //由甲方公钥构建乙方密钥
            DHParameterSpec dhParameterSpec = ((DHPublicKey) pubKey).getParams();
            //实例化密钥对生成器
            KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance(KEY_ALGORITHM);
            //初始化密钥对生成器
            keyPairGenerator.initialize(dhParameterSpec);
            //产生密钥对
            KeyPair keyPair = keyPairGenerator.generateKeyPair();
            //乙方公钥
            DHPublicKey publicKey = (DHPublicKey) keyPair.getPublic();
            //乙方私约
            DHPrivateKey privateKey = (DHPrivateKey) keyPair.getPrivate();
            //将密钥对存储在Map中
            Map<String, Object> keyMap = new HashMap<String, Object>(2);
            keyMap.put(PUBLIC_KEY, publicKey);
            keyMap.put(PRIVATE_KEY, privateKey);
            return keyMap;
        }
    
        /**
         * 生成加密秘钥
         *
         * @return
         */
        private static SecretKeySpec getSecretKey(final byte[] key) {
            //返回生成指定算法密钥生成器的 KeyGenerator 对象
            KeyGenerator kg = null;
    
            try {
                kg = KeyGenerator.getInstance(SELECT_ALGORITHM);
    
                //AES 要求密钥长度为 128
                kg.init(128, new SecureRandom(key));
    
                //生成一个密钥
                SecretKey secretKey = kg.generateKey();
    
                return new SecretKeySpec(secretKey.getEncoded(), SELECT_ALGORITHM);// 转换为AES专用密钥
            } catch (NoSuchAlgorithmException ex) {
    //            Logger.getLogger(AESUtil.class.getName()).log(Level.SEVERE, null, ex);
            }
    
            return null;
        }
    
        /**
         * 加密
         *
         * @param data 待加密数据
         * @param key  密钥
         * @return byte[] 加密数据
         * @throws Exception
         */
        public static byte[] encrypt(byte[] data, byte[] key) throws Exception {
    
            try {
                Cipher cipher = Cipher.getInstance(DEFAULT_CIPHER_ALGORITHM);// 创建密码器
    
                byte[] byteContent = data;
    
                cipher.init(Cipher.ENCRYPT_MODE, getSecretKey(key));// 初始化为加密模式的密码器
    
                byte[] result = cipher.doFinal(byteContent);// 加密
                return result;
    //            return org.apache.commons.codec.binary.Base64.encodeBase64String(result);//通过Base64转码返回
    
            } catch (Exception ex) {
    //            Logger.getLogger(AESUtil.class.getName()).log(Level.SEVERE, null, ex);
            }
    
            return null;
    
    
        }
    
        /**
         * 解密
         *
         * @param data 待解密数据
         * @param key  密钥
         * @return byte[] 解密数据
         * @throws Exception
         */
        public static byte[] decrypt(byte[] data, byte[] key) throws Exception {
    
            try {
                //实例化
                Cipher cipher = Cipher.getInstance(DEFAULT_CIPHER_ALGORITHM);
    
                //使用密钥初始化,设置为解密模式
                cipher.init(Cipher.DECRYPT_MODE, getSecretKey(key));
    
                //执行操作
                byte[] result = cipher.doFinal(data);
    
                return result;
    
            } catch (Exception ex) {
    //            Logger.getLogger(AESUtil.class.getName()).log(Level.SEVERE, null, ex);
            }
    
            return null;
        }
    
        /**
         * 构建密钥
         *
         * @param publicKey  公钥
         * @param privateKey 私钥
         * @return byte[] 本地密钥
         * @throws Exception
         */
        public static byte[] getSecretKey(byte[] publicKey, byte[] privateKey) throws Exception {
            //实例化密钥工厂
            KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
            //初始化公钥
            //密钥材料转换
            X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(publicKey);
            //产生公钥
            PublicKey pubKey = keyFactory.generatePublic(x509KeySpec);
            //初始化私钥
            //密钥材料转换
            PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(privateKey);
            //产生私钥
            PrivateKey priKey = keyFactory.generatePrivate(pkcs8KeySpec);
            //实例化
            KeyAgreement keyAgree = KeyAgreement.getInstance(keyFactory.getAlgorithm());
            //初始化
            keyAgree.init(priKey);
            keyAgree.doPhase(pubKey, true);
            //生成本地密钥
            SecretKey secretKey = keyAgree.generateSecret(SELECT_ALGORITHM);
            return secretKey.getEncoded();
        }
    
        /**
         * 取得私钥
         *
         * @param keyMap 密钥Map
         * @return byte[] 私钥
         * @throws Exception
         */
        public static byte[] getPrivateKey(Map<String, Object> keyMap) throws Exception {
            Key key = (Key) keyMap.get(PRIVATE_KEY);
            return key.getEncoded();
        }
    
        /**
         * 取得公钥
         *
         * @param keyMap 密钥Map
         * @return byte[] 公钥
         * @throws Exception
         */
        public static byte[] getPublicKey(Map<String, Object> keyMap) throws Exception {
            Key key = (Key) keyMap.get(PUBLIC_KEY);
            return key.getEncoded();
        }
    
    
        /**
         * 主方法
         *
         * @param args
         * @throws Exception
         */
        public static void main(String[] args) throws Exception {
            //甲方公钥
            byte[] publicKeyA;
            //甲方私钥
            byte[] privateKeyA;
            //甲方本地密钥
            byte[] localKeyA;
            //乙方公钥
            byte[] publicKeyB;
            //乙方私钥
            byte[] privateKeyB;
            //乙方本地密钥
            byte[] localKeyB;
    
            //初始化密钥
            //生成甲方密钥对
            Map<String, Object> keyMapA = DHUtils.initKey();
            publicKeyA = DHUtils.getPublicKey(keyMapA);
            privateKeyA = DHUtils.getPrivateKey(keyMapA);
            System.out.println("甲方公钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(publicKeyA));
            System.out.println("甲方私钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(privateKeyA));
            //由甲方公钥产生乙方本地密钥对
            Map<String, Object> keyMapB = DHUtils.initKey(publicKeyA);
            publicKeyB = DHUtils.getPublicKey(keyMapB);
            privateKeyB = DHUtils.getPrivateKey(keyMapB);
            System.out.println("乙方公钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(publicKeyB));
            System.out.println("乙方私钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(privateKeyB));
            localKeyA = DHUtils.getSecretKey(publicKeyB, privateKeyA);
            System.out.println("甲方本地密钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(localKeyA));
            localKeyB = DHUtils.getSecretKey(publicKeyA, privateKeyB);
            System.out.println("乙方本地密钥:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(localKeyB));
    
            System.out.println();
            System.out.println("===甲方向乙方发送加密数据===");
            String msgA2B = "求知若饥,虚心若愚。";
            System.out.println("原文:
    " + msgA2B);
            System.out.println("---使用甲方本地密钥对数据进行加密---");
            //使用甲方本地密钥对数据加密
            byte[] encodeMsgA2B = DHUtils.encrypt(msgA2B.getBytes(), localKeyA);
            System.out.println("加密:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(encodeMsgA2B));
            System.out.println("---使用乙方本地密钥对数据库进行解密---");
            //使用乙方本地密钥对数据进行解密
            byte[] msgB2A = DHUtils.decrypt(encodeMsgA2B, localKeyB);
            String output1 = new String(msgB2A);
            System.out.println("解密:
    " + output1);
    
            System.out.println("/~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~/");
            System.out.println("===乙方向甲方发送加密数据===");
            String input2 = "好好学习,天天向上。";
            System.out.println("原文:
    " + input2);
            System.out.println("---使用乙方本地密钥对数据进行加密---");
            //使用乙方本地密钥对数据进行加密
            byte[] encode2 = DHUtils.encrypt(input2.getBytes(), localKeyB);
            System.out.println("加密:
    " + org.apache.commons.codec.binary.Base64.encodeBase64String(encode2));
            System.out.println("---使用甲方本地密钥对数据进行解密---");
            //使用甲方本地密钥对数据进行解密
            byte[] decode2 = DHUtils.decrypt(encode2, localKeyA);
            String output2 = new String(decode2);
            System.out.println("解密:
    " + output2);
        }
    
    }
    

      输出结果

    "C:Program FilesJavajdk1.8.0_91injava.exe" "-javaagent:C:Program FilesJetBrainsIntelliJ IDEA 2019.3.3libidea_rt.jar=56888:C:Program FilesJetBrainsIntelliJ IDEA 2019.3.3in" -Dfile.encoding=UTF-8 -classpath "C:Program FilesJavajdk1.8.0_91jrelibcharsets.jar;C:Program FilesJavajdk1.8.0_91jrelibdeploy.jar;C:Program FilesJavajdk1.8.0_91jrelibextaccess-bridge-64.jar;C:Program FilesJavajdk1.8.0_91jrelibextcldrdata.jar;C:Program FilesJavajdk1.8.0_91jrelibextdnsns.jar;C:Program FilesJavajdk1.8.0_91jrelibextjaccess.jar;C:Program FilesJavajdk1.8.0_91jrelibextjfxrt.jar;C:Program FilesJavajdk1.8.0_91jrelibextlocaledata.jar;C:Program FilesJavajdk1.8.0_91jrelibext
    ashorn.jar;C:Program FilesJavajdk1.8.0_91jrelibextsunec.jar;C:Program FilesJavajdk1.8.0_91jrelibextsunjce_provider.jar;C:Program FilesJavajdk1.8.0_91jrelibextsunmscapi.jar;C:Program FilesJavajdk1.8.0_91jrelibextsunpkcs11.jar;C:Program FilesJavajdk1.8.0_91jrelibextzipfs.jar;C:Program FilesJavajdk1.8.0_91jrelibjavaws.jar;C:Program FilesJavajdk1.8.0_91jrelibjce.jar;C:Program FilesJavajdk1.8.0_91jrelibjfr.jar;C:Program FilesJavajdk1.8.0_91jrelibjfxswt.jar;C:Program FilesJavajdk1.8.0_91jrelibjsse.jar;C:Program FilesJavajdk1.8.0_91jrelibmanagement-agent.jar;C:Program FilesJavajdk1.8.0_91jrelibplugin.jar;C:Program FilesJavajdk1.8.0_91jrelib
    esources.jar;C:Program FilesJavajdk1.8.0_91jrelib
    t.jar;Z:workspaceim	arget	est-classes;Z:.m2
    epositoryorgapachecommonscommons-lang33.9commons-lang3-3.9.jar;Z:.m2
    epositorycommons-codeccommons-codec1.14commons-codec-1.14.jar;Z:.m2
    epositorycnhutoolhutool-all5.1.4hutool-all-5.1.4.jar;Z:.m2
    epositoryorgouncycastlecprov-jdk15on1.52cprov-jdk15on-1.52.jar" DHUtils
    甲方公钥:
    MIHgMIGXBgkqhkiG9w0BAwEwgYkCQQD8poLOjhLKuibvzPcRDlJtsHiwXt7LzR60ogjzrhYXrgHzW5Gkfm32NBPF4S7QiZvNEyrNUNmRUb3EPuc3WS4XAkBnhHGyepz0TukaScUUfbGpqvJE8FpDTWSGkx0tFCcbnjUDC3H9c9oXkGmzLik1Yw4cIGI1TQ2iCmxBblC+eUykAgIBgANEAAJBANKee3tUIVRpwpLj+Kfqe5t8w4QIM54k94fKcp2Alg/kWLm4bEBTvWv4XMKIH13k9eQcvTRxVuqxdkS62yi1guc=
    甲方私钥:
    MIHSAgEAMIGXBgkqhkiG9w0BAwEwgYkCQQD8poLOjhLKuibvzPcRDlJtsHiwXt7LzR60ogjzrhYXrgHzW5Gkfm32NBPF4S7QiZvNEyrNUNmRUb3EPuc3WS4XAkBnhHGyepz0TukaScUUfbGpqvJE8FpDTWSGkx0tFCcbnjUDC3H9c9oXkGmzLik1Yw4cIGI1TQ2iCmxBblC+eUykAgIBgAQzAjEA/cVM7DmzLK7gijP61uR2ipNjP/tG84kCZJzt10KM8XPpvvKGDa6c000GO3dNliIC
    乙方公钥:
    MIHgMIGXBgkqhkiG9w0BAwEwgYkCQQD8poLOjhLKuibvzPcRDlJtsHiwXt7LzR60ogjzrhYXrgHzW5Gkfm32NBPF4S7QiZvNEyrNUNmRUb3EPuc3WS4XAkBnhHGyepz0TukaScUUfbGpqvJE8FpDTWSGkx0tFCcbnjUDC3H9c9oXkGmzLik1Yw4cIGI1TQ2iCmxBblC+eUykAgIBgANEAAJBAJIS3ho3UENwFuQwrB3uPXS0q9K+0Box8fdGeCdj10uyT0vSV+TgoO6IhX11k535QfBMvh8cHR4BrYo7LSC/wdY=
    乙方私钥:
    MIHSAgEAMIGXBgkqhkiG9w0BAwEwgYkCQQD8poLOjhLKuibvzPcRDlJtsHiwXt7LzR60ogjzrhYXrgHzW5Gkfm32NBPF4S7QiZvNEyrNUNmRUb3EPuc3WS4XAkBnhHGyepz0TukaScUUfbGpqvJE8FpDTWSGkx0tFCcbnjUDC3H9c9oXkGmzLik1Yw4cIGI1TQ2iCmxBblC+eUykAgIBgAQzAjEAyMLT94TotoWZCPvaJpT3VYlQ3TgwJvo7Mc/gsbdTBIQKQRIRhEZ1MCpn8is83CKh
    甲方本地密钥:
    SZb1nFDuDT34Q9WkIb7bNVndlSOfHa0s55ZbxuldNhQ=
    乙方本地密钥:
    SZb1nFDuDT34Q9WkIb7bNVndlSOfHa0s55ZbxuldNhQ=
    
    ===甲方向乙方发送加密数据===
    原文:
    求知若饥,虚心若愚。
    ---使用甲方本地密钥对数据进行加密---
    加密:
    5cORf8g/pkzIvSPd7sNn0yWkOjx0JQvzwYaKR0/ox2c=
    ---使用乙方本地密钥对数据库进行解密---
    解密:
    求知若饥,虚心若愚。
    /~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~..~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~/
    ===乙方向甲方发送加密数据===
    原文:
    好好学习,天天向上。
    ---使用乙方本地密钥对数据进行加密---
    加密:
    Mh08mY3CwWCJowGf8t/ZPaNJUxJpcAifHepADby3kTs=
    ---使用甲方本地密钥对数据进行解密---
    解密:
    好好学习,天天向上。
    
    Process finished with exit code 0
    

      

  • 相关阅读:
    Tye exception
    DataSeeder
    angular
    认证Authentication
    MVC
    Ef Core
    工作单元
    VirtualFileSystem
    中间件
    日志
  • 原文地址:https://www.cnblogs.com/xiaojf/p/12363702.html
Copyright © 2020-2023  润新知