Java实现两种方式 RSA签名, RSA签名校验
2024-05-09 09:01:06
Java实现两种方式 RSA签名, RSA签名校验
- 通过 .keystore密钥文件实现
- 生成密钥文件 test2.keystore
- 相关使用
- 通过密钥生成器实现
- Byte数据转换成 Hex字符串
- 相关使用
通过 .keystore密钥文件实现
生成密钥文件 test2.keystore
- ./keytool -genkeypair -v -alias test2 -dname “CN=test2,OU=Wenyao,O=RnD,L=Yangpu,ST=Shanghai,C=China” -keyalg RSA -keysize 2048 -keypass 123456 -keystore d:/test2.keystore -storepass 123456 -validity 99999 -storetype JCEKS
import org.springframework.util.Base64Utils;
import java.io.FileInputStream;
import java.io.InputStream;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.cert.Certificate;
import static org.springframework.http.converter.FormHttpMessageConverter.DEFAULT_CHARSET;/*** 通过已生成的密钥文件签名类* */
public class SignatureByFile {/** 密钥路径及文件名称*/private String keyStoreFilePath = "D:/test2.keystore";/** 密钥库口令*/private String keyStorePass = "123456";/** 密钥库算法*/private String keyStoreType = "JCEKS";/** 密钥项别名*/private String keyAlias = "test2";/** 密钥口令*/private String keyPass = "123456";/** 签名算法 [SHA256withRSA/SHA1withRSA/MD5withRSA/MD2withRSA]*/private String algorithm = "SHA256withRSA";/** 获取公钥*/public PublicKey getPublicKey(final String keyAlias) throws Exception {/** 指定密钥库算法创建实例*/final KeyStore ks = KeyStore.getInstance(keyStoreType);/** 指定要读取的密钥库文件, 创建文件输入流*/final InputStream is = new FileInputStream(keyStoreFilePath);/** 载入密钥库文件输入流*/ks.load(is, keyStorePass.toCharArray());/** 生成证书(X.509标准)*/final Certificate cert = ks.getCertificate(keyAlias);/** 从证书中获取公钥部分*/final PublicKey publicKey = cert.getPublicKey();return publicKey;}/** 获取私钥*/public PrivateKey getPrivateKey(final String keyAlias, final String keyAliasPass) throws Exception {/** 指定密钥库算法创建实例*/final KeyStore ks = KeyStore.getInstance(keyStoreType);/** 指定要读取的密钥库文件, 创建文件输入流*/final InputStream is = new FileInputStream(keyStoreFilePath);/** 载入密钥库文件输入流*/ks.load(is, keyStorePass.toCharArray());/** 通过别名和密钥口令, 从已载入的密钥库获取私钥*/final PrivateKey privateKey = (PrivateKey) ks.getKey(keyAlias, keyAliasPass.toCharArray());return privateKey;}/*** RSA签名* @param plainText 源文本* @return 签名**/public String sign(final String plainText) throws Exception {/** 获取私钥*/final PrivateKey privateKey = getPrivateKey(keyAlias, keyPass);/** 生成签名算法实例*/final Signature instance = Signature.getInstance(algorithm);instance.initSign(privateKey);instance.update(plainText.getBytes(DEFAULT_CHARSET));final byte[] signature = instance.sign();return Base64Utils.encodeToString(signature);}/*** RSA签名校验* @param plainText 源文本* @param signedText 签名* @return 签名**/public boolean verify(final String plainText, final String signedText) throws Exception {/** 获取公钥*/final PublicKey publicKey = getPublicKey(keyAlias);/** 生成签名算法实例*/final Signature instance = Signature.getInstance(algorithm);instance.initVerify(publicKey);instance.update(plainText.getBytes(DEFAULT_CHARSET));final byte[] signature = Base64Utils.decodeFromString(signedText);return instance.verify(signature);}}相关使用
final String data = "签名前数据";final SignatureByFile signature = new SignatureByFile();final String signedData = signature.sign(data);final boolean verify = signature.verify(data, signedData);System.out.println(signedData);System.out.println(verify);> M5hgiRY30fX7zSo5i+YRpAzpLR0i7dNX1qN8cwN6Sf9JtjoCaVXUywSOz1PC3w311jXtixPMfK3B1+2R7qUlOjTOWPFBiMBqUYy4f0xXLFQw9kMDK/WTtn+nbVezHgqxtBjFNC1/nttmH7PSxhY+SV2KzU+RzC0F2tGhWm0JQQpCZuVQQzVdikJL8NBY8vdqT9SuEpFSX++f2gAQVFyro92ntye/zTbqOFr/qAhXF03CN2jGlvp7ZEbxkxqcMLSHjeTGF0VfzrLgDVpsQdh4qb3dr+tgrs1rgBsVKKiRKmsus4J7YKrjWzcgd/DZAIEozoMnDT/GOonAphRKG6VDMA==
> true通过密钥生成器实现
import org.springframework.util.Base64Utils;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.Signature;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import static org.springframework.http.converter.FormHttpMessageConverter.DEFAULT_CHARSET;/*** RSA算法签名类* */
public class SignatureByRSA {/** 签名算法 [SHA256withRSA/SHA1withRSA/MD5withRSA/MD2withRSA]*/private String algorithm = "MD5withRSA";/** 秘钥对实例*/private KeyPair keyPair;/*** RSA签名校验* @param keyalg 密钥算法 [RSA]* @param keySize 密钥位大小 [1024,2048]* */public SignatureByRSA(final String keyalg, final int keySize) throws Exception {final KeyPairGenerator pairGenerator = KeyPairGenerator.getInstance(keyalg);pairGenerator.initialize(keySize);/** 生成秘钥对实例*/keyPair = pairGenerator.generateKeyPair();}/** 获得 RSA公钥*/public RSAPublicKey getPublicKey() {return (RSAPublicKey) keyPair.getPublic();}/** 获得 RSA私钥*/public RSAPrivateKey getPrivateKey() {return (RSAPrivateKey) keyPair.getPrivate();}/*** RSA签名* @param plainText 源文本* @return 签名**/public String sign(final String plainText) throws Exception {/** 生成签名算法实例*/final Signature instance = Signature.getInstance(algorithm);instance.initSign(getPrivateKey());instance.update(plainText.getBytes(DEFAULT_CHARSET));final byte[] signature = instance.sign();return Base64Utils.encodeToString(signature);}/*** RSA签名校验* @param plainText 源文本* @param signedText 签名* @return 签名**/public boolean verify(final String plainText, final String signedText) throws Exception {/** 生成签名算法实例*/final Signature instance = Signature.getInstance(algorithm);instance.initVerify(getPublicKey());instance.update(plainText.getBytes(DEFAULT_CHARSET));final byte[] signature = Base64Utils.decodeFromString(signedText);return instance.verify(signature);}}Byte数据转换成 Hex字符串
public static String convertBytes2HexString(final byte[] data) {final StringBuilder sb = new StringBuilder();for (int i = 0; i < data.length; i++) {String s = Integer.toHexString(0xFF & data[i]);if (s.length() == 1){sb.append(0).append(s);}else {sb.append(s);}}return sb.toString();}相关使用
final String data = "签名前数据";final SignatureByRSA signature = new SignatureByRSA("RSA", 2048);final String signedData = signature.sign(data);final boolean verify = signature.verify(data, signedData);System.out.println(convertBytes2HexString(signature.getPublicKey().getEncoded()));System.out.println(convertBytes2HexString(signature.getPrivateKey().getEncoded()));System.out.println(signedData);System.out.println(verify);> 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
> 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
hoJghoDi0WDNDcmsEyED1LNoaRTnZRD439v8tBlUimeKuBezrVH7fS7iTqyyCgBc+X6cdgk4pMo7eIMEBt+JwqBlKhjpdJZXQUHSbZQG7D+MGSXk9Ip5/FCIf3Y2NBc3Y5dHiqYVy0vQ5QClj8QK0l8hPZKUuvXSHHWNo72tF7OHkqdy/gysmVRbul3Kyt/QqA7CVU4d9IkNOoePlvqYcZeAdx2yIDisS0jR+RnsrKM2UuRrRJRMaPpRcxtYz/tqnvr/x4ZeUvLT85XZZAf9pL/Me2XwmN3D5i7tyuKKG/bftMS65YOyNvFD0Kytd9fAoOaeMVilfos9R4C3rjSh1w==
> true如果您觉得有帮助，欢迎点赞哦 ~ 谢谢!!
Java实现两种方式 RSA签名, RSA签名校验相关推荐
- java 多线程两种方式_JAVA多线程实现的两种方式
java多线程实现方式主要有两种:继承Thread类.实现Runnable接口 1.继承Thread类实现多线程 继承Thread类的方法尽管被我列为一种多线程实现方式,但Thread本质上也是实现了 ...
- 线程Java的两种方式_多线程(java和guava两种方式)：
1.Java 当要使用线程去执行一个任务时,可以使用ExecutorService.submit(new Callable); 这样可以不影响其他的业务的执行,但是在线程中的异常不能捕获到,也不能知道 ...
- java的两种方式_java 两种方式的区别？
成员函数方式 package cn.com.ch09; class FatherTest{ public void pet(String str){ System.out.println(str); ...
- hbase java api 两种方式
NoSQL Hbase JAVA API 实例一 导入架包: <dependency><groupId>org.apache.hbase</groupId>< ...
- java中实现同步的两种方式:syschronized和lock的区别和联系
转载自 http://www.cnblogs.com/xiohao/p/4151408.html Lock是java.util.concurrent.locks包下的接口,Lock 实现提供了比使用s ...
- rsa1024 公钥c语言程序,两种方式生成RSA 公钥私钥
两种方式-生成RSA256私钥公钥 两种方式生成私钥公钥 1.ssh-keygen 方式 生成加密长度4096位密钥 生成私钥:ssh-keygen -t rsa -b 4096 -f ${priva ...
- Java代码实现MD5加密的两种方式
MD5的全称是Message-Digest Algorithm 5 (信息-摘要算法),在90年代初,由MIT Laboratory for Computer Scientce 和RSA Data S ...
- java如何做全局缓存_传智播客JNI第七讲 – JNI中的全局引用/局部引用/弱全局引用、缓存jfieldID和jmethodID的两种方式...
讲解JNI中的全局引用/局部引用/弱全局引用.缓存jfieldID和jmethodID的两种方式,并编写两种缓存方式的示例代码. 1.从Java虚拟机创建的对象传到本地C/C++代码时会产生引用,根据 ...
- java native函数库_Java 层调用 Native 层函数的两种方式
概述 Java 层如何调用Native层函数,大家都应该知道使用JNI(Java 本地接口). 通过在java层声明native方法,然后遵守JNI规范命名Native函数,即可建立Java层nati ...
最新文章
- MySql库中所有表的属性_SQL查询某库所有的表所有的字段及字段的属性
- 为什么要进行图学习？谈一谈逆势而上的图神经网络
- 你需要学好知识图谱——用AI技术连接世界
- MaBatis（5）输入/输出映射
- linux mysql phpadmin_linux安装phpmyadmin数据库管理
- 高中电子技术——指针式万用表调零
- mybatis与hibernate区别
- Atitit 减少财政支出之减少通讯支出 解决方案attilax总结
- java scene_JavaFX中场景(Scene)的意义是什么？
- 如何更改ORCAD中的page number ?
- windows下安装maven后运行：mvn help:system报错
- srand c语言,C语言srand()rand()
- [c/c++] linux c生成静态库共享库 - bluefrog - 博客园
- 12星座绝情榜,你的绝情指数是多少呢?
- 视频特效剪辑小技巧，给每个视频添加反相特效
- 仿热血江湖帮战客方血帮战 准备记时器结束事件
- pycocotools报错 if type(resFile) == str or type(resFile) == unicode: NameError: name ‘unicode‘ is
- 2022金九银十最全的软件测试面试题，能不能找到合适工作就看它了
- 桥式整流电路原理;电感滤波原理;电容滤波原理
- 推荐系统从入门到实战笔记