龙空技术网

非对称加密算法之Java RSA算法应用 附可用工具类

超哥说码 106

前言:

此刻姐妹们对“rsa算法的应用范围”大约比较关切,各位老铁们都想要剖析一些“rsa算法的应用范围”的相关知识。那么小编同时在网上网罗了一些有关“rsa算法的应用范围””的相关内容,希望姐妹们能喜欢,姐妹们一起来学习一下吧!

  RSA算法简介

RSA 算法

  RSA公开密钥密码体制是一种使用不同的加密密钥与解密密钥,“由已知加密密钥推导出解密密钥在计算上是不可行的”密码体制。

  在公开密钥密码体制中,加密密钥(即公开密钥)PK是公开信息,而解密密钥(即秘密密钥)SK是需要保密的。加密算法E和解密算法D也都是公开的。虽然解密密钥SK是由公开密钥PK决定的,但却不能根据PK计算出SK。

  RSA允许你选择公钥的大小。512位的密钥被视为不安全的;768位的密钥不用担心受到除了国家安全管理(NSA)外的其他事物的危害;1024位的密钥几乎是安全的。

  关于RSA概念性的内容不做过多介绍,大家可以自行百度。

  Maven 依赖

  工具类对于加密后使用Base64进行编码,所以需要依赖Apache Commons Codec。

<dependency>    <groupId>commons-codec</groupId>    <artifactId>commons-codec</artifactId>    <version>1.9</version></dependency><dependency>    <groupId>log4j</groupId>    <artifactId>log4j</artifactId>    <version>1.2.17</version></dependency>

  工具类实现

  RSAUtil提供了针对文本内容、字节数组内容的加解密实现,RSAUtil工具类可以直接复制使用,代码如下:

package com.arhorchin.securitit.enordecryption.rsa;import java.io.ByteArrayOutputStream;import java.security.Key;import java.security.KeyFactory;import java.security.KeyPair;import java.security.KeyPairGenerator;import java.security.interfaces.RSAPrivateKey;import java.security.interfaces.RSAPublicKey;import java.security.spec.PKCS8EncodedKeySpec;import java.security.spec.X509EncodedKeySpec;import java.util.HashMap;import java.util.Map;import javax.crypto.Cipher;import org.apache.commons.codec.binary.Base64;import org.apache.log4j.Logger;/** * @author Securitit. * @note RSA加密算法实现. */public class RSAUtil {    /**     * logger.     */    private static Logger logger = Logger.getLogger(RSAUtil.class);    /**     * 数据编码.     */    private static final String CHARSET_UTF8 = "UTF-8";    /**     * 加密算法RSA.     */    public static final String RSA_NAME = "RSA";    /**     * 获取公钥的key.     */    public static final String PUBLIC_KEY = "RSAPublicKey";    /**     * 获取私钥的key.     */    public static final String PRIVATE_KEY = "RSAPrivateKey";    /**     * RSA最大加密明文大小.     */    public static final int MAX_ENCRYPT_BLOCK = 117;    /**     * RSA最大解密密文大小.     */    public static final int MAX_DECRYPT_BLOCK = 128;    /**     * RSA密钥长度必须是64的倍数,在512~65536之间。默认是1024.     */    public static final int KEY_SIZE = 1024;    /**     * 生成RSA算法的密钥对.     * @return 返回存储密钥对的Map.     * @throws Exception 可能的异常.     */    public static Map<String, String> generateDesKey() throws Exception {        Map<String, String> keysMap = null;        KeyPair keyPair = null;        RSAPublicKey publicKey = null;        RSAPrivateKey privateKey = null;        KeyPairGenerator keyPairGenerator = null;        // Key存储Map.        keysMap = new HashMap<String, String>(2);        // 生成RSA秘钥对.        keyPairGenerator = KeyPairGenerator.getInstance(RSA_NAME);        keyPairGenerator.initialize(KEY_SIZE);        keyPair = keyPairGenerator.generateKeyPair();        publicKey = (RSAPublicKey) keyPair.getPublic();        privateKey = (RSAPrivateKey) keyPair.getPrivate();        // 放置到存储Map.        keysMap.put(PUBLIC_KEY, Base64.encodeBase64String(publicKey.getEncoded()));        keysMap.put(PRIVATE_KEY, Base64.encodeBase64String(privateKey.getEncoded()));        return keysMap;    }    /**     * RAS基于Private密钥加密.     * @param plainText 原文内容.     * @param privateKey 私钥.     * @return 加密后内容.     * @throws Exception 可能的异常.     */    public static String encodeTextByPrivateKey(String plainText, String privateKey) throws Exception {        byte[] privateKeyBytes = null;        byte[] cipherBytes = null;        try {            privateKeyBytes = Base64.decodeBase64(privateKey);            cipherBytes = encodeByRsa(plainText.getBytes(CHARSET_UTF8), privateKeyBytes, true);            return Base64.encodeBase64String(cipherBytes);        } catch (Exception ex) {            logger.error("RSAUtil.encodeTextByPrivateKey.", ex);            return "";        }    }    /**     * RAS基于Private密钥解密.     * @param cipherText 密文内容.     * @param privateKey 私钥.     * @return 解密后内容.     * @throws Exception 可能的异常.     */    public static String decodeTextByPrivateKey(String cipherText, String privateKey) throws Exception {        byte[] privateKeyBytes = null;        byte[] plainBytes = null;        try {            privateKeyBytes = Base64.decodeBase64(privateKey);            plainBytes = decodeByRsa(Base64.decodeBase64(cipherText), privateKeyBytes, true);            return new String(plainBytes, CHARSET_UTF8);        } catch (Exception ex) {            logger.error("RSAUtil.decodeTextByPrivateKey.", ex);            return "";        }    }    /**     * RAS基于Public密钥加密.     * @param plainText 原文内容.     * @param PublicKey 公钥.     * @return 加密后内容.     * @throws Exception 可能的异常.     */    public static String encodeTextByPublicKey(String plainText, String publicKey) throws Exception {        byte[] publicKeyBytes = null;        byte[] cipherBytes = null;        try {            publicKeyBytes = Base64.decodeBase64(publicKey);            cipherBytes = encodeByRsa(plainText.getBytes(CHARSET_UTF8), publicKeyBytes, false);            return Base64.encodeBase64String(cipherBytes);        } catch (Exception ex) {            logger.error("RSAUtil.encodeTextByPublicKey.", ex);            return "";        }    }    /**     * RAS基于Public密钥解密.     * @param cipherText 密文内容.     * @param publicKey 公钥.     * @return 解密后内容.     * @throws Exception 可能的异常.     */    public static String decodeTextByPublicKey(String cipherText, String publicKey) throws Exception {        byte[] publicKeyBytes = null;        byte[] plainBytes = null;        try {            publicKeyBytes = Base64.decodeBase64(publicKey);            plainBytes = decodeByRsa(Base64.decodeBase64(cipherText), publicKeyBytes, false);            return new String(plainBytes, CHARSET_UTF8);        } catch (Exception ex) {            logger.error("RSAUtil.decodeTextByPublicKey.", ex);            return "";        }    }    /**     * RAS基于Private密钥加密.     * @param plainBytes 原文内容.     * @param privateKey 私钥.     * @return 加密后内容.     * @throws Exception 可能的异常.     */    public static byte[] encodeBytesByPrivateKey(byte[] plainBytes, String privateKey) throws Exception {        byte[] privateKeyBytes = null;        byte[] cipherBytes = null;        try {            privateKeyBytes = Base64.decodeBase64(privateKey);            cipherBytes = encodeByRsa(plainBytes, privateKeyBytes, true);            return cipherBytes;        } catch (Exception ex) {            logger.error("RSAUtil.encodeTextByPrivateKey.", ex);            return new byte[0];        }    }    /**     * RAS基于Private密钥解密.     * @param cipherBytes 密文内容.     * @param privateKey 私钥.     * @return 解密后内容.     * @throws Exception 可能的异常.     */    public static byte[] decodeBytesByPrivateKey(byte[] cipherBytes, String privateKey) throws Exception {        byte[] privateKeyBytes = null;        byte[] plainBytes = null;        try {            privateKeyBytes = Base64.decodeBase64(privateKey);            plainBytes = decodeByRsa(cipherBytes, privateKeyBytes, true);            return plainBytes;        } catch (Exception ex) {            logger.error("RSAUtil.decodeTextByPrivateKey.", ex);            return new byte[0];        }    }    /**     * RAS基于Public密钥加密.     * @param plainBytes 原文内容.     * @param PublicKey 公钥.     * @return 加密后内容.     * @throws Exception 可能的异常.     */    public static byte[] encodeBytesByPublicKey(byte[] plainBytes, String publicKey) throws Exception {        byte[] publicKeyBytes = null;        byte[] cipherBytes = null;        try {            publicKeyBytes = Base64.decodeBase64(publicKey);            cipherBytes = encodeByRsa(plainBytes, publicKeyBytes, false);            return cipherBytes;        } catch (Exception ex) {            logger.error("RSAUtil.encodeTextByPublicKey.", ex);            return new byte[0];        }    }    /**     * RAS基于Public密钥解密.     * @param cipherBytes 密文内容.     * @param publicKey 公钥.     * @return 解密后内容.     * @throws Exception 可能的异常.     */    public static byte[] decodeBytesByPublicKey(byte[] cipherBytes, String publicKey) throws Exception {        byte[] publicKeyBytes = null;        byte[] plainBytes = null;        try {            publicKeyBytes = Base64.decodeBase64(publicKey);            plainBytes = decodeByRsa(cipherBytes, publicKeyBytes, false);            return plainBytes;        } catch (Exception ex) {            logger.error("RSAUtil.decodeTextByPublicKey.", ex);            return new byte[0];        }    }    /**     * 利用RSA进行加密,支持公钥和私钥.     * @param plainBytes 待加密原文内容.     * @param rsaKeyBytes RSA密钥.     * @param isPrivateKey 是否私钥.     * @return 加密结果.     * @throws Exception 可能的异常.     */    public static byte[] encodeByRsa(byte[] plainBytes, byte[] rsaKeyBytes, boolean isPrivateKey) throws Exception {        KeyFactory keyFactory = null;        Key rsaKeyObj = null;        Cipher cipher = null;        PKCS8EncodedKeySpec pkcs8KeySpec = null;        X509EncodedKeySpec x509KeySpec = null;        int plainLength = plainBytes.length;        byte[] cipherCacheBytes = null;        int cipherPartTotal = 0;        ByteArrayOutputStream baos = null;        baos = new ByteArrayOutputStream();        // 生成密钥算法对象.        keyFactory = KeyFactory.getInstance(RSA_NAME);        // 处理加密使用的Key.        if (isPrivateKey) {            pkcs8KeySpec = new PKCS8EncodedKeySpec(rsaKeyBytes);            rsaKeyObj = keyFactory.generatePrivate(pkcs8KeySpec);        } else {            x509KeySpec = new X509EncodedKeySpec(rsaKeyBytes);            rsaKeyObj = keyFactory.generatePublic(x509KeySpec);        }        cipher = Cipher.getInstance(keyFactory.getAlgorithm());        // 初始化算法密钥.        cipher.init(Cipher.ENCRYPT_MODE, rsaKeyObj);        // 计算分组,对报文进行分段加密.        plainLength = plainBytes.length;        cipherPartTotal = (int) Math.ceil((float) plainLength / MAX_ENCRYPT_BLOCK);        for (int partIndex = 0; partIndex < cipherPartTotal; partIndex++) {            if (partIndex == cipherPartTotal - 1) {                cipherCacheBytes = cipher.doFinal(plainBytes, MAX_ENCRYPT_BLOCK * partIndex, plainLength);            } else {                cipherCacheBytes = cipher.doFinal(plainBytes, MAX_ENCRYPT_BLOCK * partIndex,                        MAX_ENCRYPT_BLOCK * (partIndex + 1));            }            baos.write(cipherCacheBytes, 0, cipherCacheBytes.length);        }        return baos.toByteArray();    }    /**     * 利用RSA进行解密,支持公钥和私钥.     * @param cipherBytes 待解密原文内容.     * @param rsaKeyBytes RSA密钥.     * @param isPrivateKey 是否私钥.     * @return 加密结果.     * @throws Exception 可能的异常.     */    public static byte[] decodeByRsa(byte[] cipherBytes, byte[] rsaKeyBytes, boolean isPrivateKey) throws Exception {        KeyFactory keyFactory = null;        Key rsaKeyObj = null;        Cipher cipher = null;        PKCS8EncodedKeySpec pkcs8KeySpec = null;        X509EncodedKeySpec x509KeySpec = null;        int plainLength = cipherBytes.length;        byte[] cipherCacheBytes = null;        int cipherPartTotal = 0;        ByteArrayOutputStream baos = null;        baos = new ByteArrayOutputStream();        // 生成密钥算法对象.        keyFactory = KeyFactory.getInstance(RSA_NAME);        // 处理加密使用的Key.        if (isPrivateKey) {            pkcs8KeySpec = new PKCS8EncodedKeySpec(rsaKeyBytes);            rsaKeyObj = keyFactory.generatePrivate(pkcs8KeySpec);        } else {            x509KeySpec = new X509EncodedKeySpec(rsaKeyBytes);            rsaKeyObj = keyFactory.generatePublic(x509KeySpec);        }        cipher = Cipher.getInstance(keyFactory.getAlgorithm());        // 初始化算法密钥.        cipher.init(Cipher.DECRYPT_MODE, rsaKeyObj);        // 计算分组,对报文进行分段解密.        plainLength = cipherBytes.length;        cipherPartTotal = (int) ((float) plainLength / MAX_ENCRYPT_BLOCK);        for (int partIndex = 0; partIndex < cipherPartTotal; partIndex++) {            if (partIndex == cipherPartTotal - 1) {                cipherCacheBytes = cipher.doFinal(cipherBytes, MAX_ENCRYPT_BLOCK * partIndex, plainLength);            } else {                cipherCacheBytes = cipher.doFinal(cipherBytes, MAX_ENCRYPT_BLOCK * partIndex,                        MAX_ENCRYPT_BLOCK * (partIndex + 1));            }            baos.write(cipherCacheBytes, 0, cipherCacheBytes.length);        }        return baos.toByteArray();    }}

  工具类测试

package com.arhorchin.securitit.enordecryption.rsa;import java.util.Map;import org.apache.commons.codec.binary.Base64;/** * @author Securitit. * @note RSAUtil测试类. */public class RSAUtilTester {    public static void main(String[] args) throws Exception {        Map<String, String> keyMap = null;        String publicKey = null;        String privateKey = null;        String plaintext = null;        String ciphertext = null;        byte[] cipherBytes = null;        String dePlaintext = null;        byte[] dePlainBytes = null;        System.out.println("----------------------- 获取RSA密钥对 -------------------------");        keyMap = RSAUtil.generateDesKey();        publicKey = keyMap.get(RSAUtil.PUBLIC_KEY);        privateKey = keyMap.get(RSAUtil.PRIVATE_KEY);        System.out.println("公钥:" + publicKey);        System.out.println("私钥:" + privateKey);        System.out.println();        System.out.println("----------------------- 字符串 公钥加密、私钥解密 -------------------------");        plaintext = "这是一段数据原文-公钥加密的原文.";        // 公钥进行加密示例.        ciphertext = RSAUtil.encodeTextByPublicKey(plaintext, publicKey);        System.out.println("公钥加密密文:" + ciphertext);        // 私钥进行解密示例.        dePlaintext = RSAUtil.decodeTextByPrivateKey(ciphertext, privateKey);        System.out.println("私钥解密明文:" + dePlaintext);        System.out.println();        System.out.println("----------------------- 字符串 私钥加密、公钥解密 -------------------------");        plaintext = "这是一段数据原文-私钥加密的原文.";        // 私钥进行加密示例.        ciphertext = RSAUtil.encodeTextByPrivateKey(plaintext, privateKey);        System.out.println("私钥加密密文:" + ciphertext);        // 公钥进行解密示例.        dePlaintext = RSAUtil.decodeTextByPublicKey(ciphertext, publicKey);        System.out.println("公钥解密明文:" + dePlaintext);        System.out.println("----------------------- 字节数组 公钥加密、私钥解密 -------------------------");        plaintext = "这是一段数据原文-公钥加密的原文.";        // 公钥进行加密示例.        cipherBytes = RSAUtil.encodeBytesByPublicKey(plaintext.getBytes("UTF-8"), publicKey);        ciphertext = Base64.encodeBase64String(cipherBytes);        System.out.println("公钥加密密文:" + ciphertext);        // 私钥进行解密示例.        dePlainBytes = RSAUtil.decodeBytesByPrivateKey(Base64.decodeBase64(ciphertext), privateKey);        dePlaintext = new String(dePlainBytes, "UTF-8");        System.out.println("私钥解密明文:" + dePlaintext);        System.out.println();        System.out.println("----------------------- 字节数组 私钥加密、公钥解密 -------------------------");        plaintext = "这是一段数据原文-私钥加密的原文.";        // 私钥进行加密示例.        cipherBytes = RSAUtil.encodeBytesByPrivateKey(plaintext.getBytes("UTF-8"), privateKey);        ciphertext = Base64.encodeBase64String(cipherBytes);        System.out.println("私钥加密密文:" + ciphertext);        // 公钥进行解密示例.        dePlainBytes = RSAUtil.decodeBytesByPublicKey(Base64.decodeBase64(ciphertext), publicKey);        dePlaintext = new String(dePlainBytes, "UTF-8");        System.out.println("公钥解密明文:" + dePlaintext);    }}

  控制台输出

  查看Console中的控制台内容,明文和解密后明文对比,可以确认RSAUtil可以正常工作,控制台如下图:

----------------------- 获取RSA密钥对 -------------------------公钥:MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQAJFIhf5nNviRgssUabOvM8iqcrXCYmPBX9s37y9z41THaF3B+7Au1+jhGl482LFBRivVl6yeBpfHGT/uNyO9ld9oBo5qbIx7hEApkxHtfd6P4i2zWxlDyqcSxy5QyrZclH7wci8UFzrbQBKD/wKFu80Tft3Neu03HnbD70zOjQIDAQAB私钥:MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAJAAkUiF/mc2+JGCyxRps68zyKpytcJiY8Ff2zfvL3PjVMdoXcH7sC7X6OEaXjzYsUFGK9WXrJ4Gl8cZP+43I72V32gGjmpsjHuEQCmTEe193o/iLbNbGUPKpxLHLlDKtlyUfvByLxQXOttAEoP/AoW7zRN+3c167TcedsPvTM6NAgMBAAECgYAkscBTtrFJI9zbV3TgUr8S2iM8K9bdHa1FzWNTMYPqB/fGiHW7xKL0jNgu5EU3RBCHDZaF6wx1iECM34ZG8Y4Nk4evaSvqxSpSyAEMWchln2K4KrAaHfvYBjy0MYz7/YXWdtYunaufDrFqBkCcB1Skfz6QUf9ryYOhPQnat+FggQJBAMZiXdClpmkzeZq7D+4ZU3VIw+cO/mPTjy1teKnqM6SNV+BuhdPy4aYy7yYGHdIlWBPx3O4P4d90L7sQ2E6BXJUCQQC50vY1PrvHq0vTQ6tKhDr+tTK6LkToOC9W8bNnYXYVBlAdB5CDtjUaoKcf9LIWSfU+1YRuGkte5nArXjK6yrQZAkA+4xnINWquOKIY2amwGZkqObnYOhmMPZlKlkRE4LgkNqYfwAluabT8QXMsA45aenoUQHx/fstkUWl8DFf1cu6NAkEApJQPs8DIF2PDWG2KfAj5JzXco8DvDq0UYHDZcCqFpsFcmxlkCQOLrPW0jzztrYf7SZdaHxnyvy5hEkfvrjhxoQJBAJAFJX26aaVXou1Dd5/Z5rqwi3Kc+d+HWM/54SBqxljKf0No1f0UW/MP4D5vFpXvnfI5a62NF+89Y4R3IejQIzg=----------------------- 字符串 公钥加密、私钥解密 -------------------------公钥加密密文:f0T4XxT6L2/t10/hhFD1NWriDgdAQNe9wLp34+Dkyn+w568GUDb8WZPbelmLoARzfz0DXI5fRFyRmbb9Zq5zqrxW1i/Ea0bs7cNnDQ23okPUNyIRdguMneAlrfi+WQgFJWXu9GUSMmFWMVgCAdtAX2I4YPXSmKuS3JX7fIslDxw=私钥解密明文:这是一段数据原文-公钥加密的原文.----------------------- 字符串 私钥加密、公钥解密 -------------------------私钥加密密文:BYI5K56BuSuXp/0Thxc94Tck4W92+bDkeJEIP2qxjyQFst2RB+J6YXWp6LQBCMqEpwwEWgMDBv+U42V9nVMDCTDmugx2oqzT2xys7mMOIhQQsrccISCDzF/lk+CfrxY0hdEc4PJGrqn7vvCoKslBuJEgTL0uUxQirlJ6EVXc76g=公钥解密明文:这是一段数据原文-私钥加密的原文.----------------------- 字节数组 公钥加密、私钥解密 -------------------------公钥加密密文:hvITbYLCnOhrCWDX/DgJNbuJTQWXXFzdPK6bVgep1MH99UyLO7nGKhqNViuVxuTqdVn1nh28Oz1ueA/PMNtiWCXHRUpVYgU957jfvoL17Eugyn9If81EJMpelBP9tdAb7lZJJiECkoUZpQvGImTNIYtONZA9dXGrakT15xO5m+I=私钥解密明文:这是一段数据原文-公钥加密的原文.----------------------- 字节数组 私钥加密、公钥解密 -------------------------私钥加密密文:BYI5K56BuSuXp/0Thxc94Tck4W92+bDkeJEIP2qxjyQFst2RB+J6YXWp6LQBCMqEpwwEWgMDBv+U42V9nVMDCTDmugx2oqzT2xys7mMOIhQQsrccISCDzF/lk+CfrxY0hdEc4PJGrqn7vvCoKslBuJEgTL0uUxQirlJ6EVXc76g=公钥解密明文:这是一段数据原文-私钥加密的原文.

  总结

  算法实现都很类似,本文只是对算法实现做了整理,在Maven依赖引入的情况下,RSAUtil已经做了简单测试,可以直接使用。

标签: #rsa算法的应用范围