You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
462 lines
16 KiB
462 lines
16 KiB
package com.hai.common.utils;
|
|
|
|
import org.apache.commons.lang3.ArrayUtils;
|
|
import sun.misc.BASE64Decoder;
|
|
import sun.misc.BASE64Encoder;
|
|
|
|
import javax.crypto.Cipher;
|
|
import java.security.*;
|
|
import java.security.interfaces.RSAPrivateKey;
|
|
import java.security.spec.PKCS8EncodedKeySpec;
|
|
import java.security.spec.X509EncodedKeySpec;
|
|
|
|
|
|
/**
|
|
* @Description RSAUtil
|
|
* @Author aili
|
|
**/
|
|
public class RSAUtil {
|
|
|
|
public static final String KEY_ALGORTHM = "RSA";
|
|
public static final String SIGNATURE_ALGORITHM = "MD5withRSA";
|
|
private static final int MAX_ENCRYPT_BLOCK = 117;
|
|
/**
|
|
* 用公钥加密
|
|
*
|
|
* @param data 加密数据
|
|
* @param key 密钥
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static byte[] encryptByPublicKey(byte[] data, String key) throws Exception {
|
|
//对公钥解密
|
|
byte[] keyBytes = decryptBASE64(key);
|
|
//取公钥
|
|
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
|
|
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
|
|
Key publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
|
|
|
|
//对数据解密
|
|
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
|
|
cipher.init(Cipher.ENCRYPT_MODE, publicKey);
|
|
//return cipher.doFinal(data);
|
|
|
|
byte[] enBytes = null;
|
|
for (int i = 0; i < data.length; i += MAX_ENCRYPT_BLOCK) {
|
|
// 注意要使用2的倍数,否则会出现加密后的内容再解密时为乱码
|
|
byte[] doFinal = cipher.doFinal(ArrayUtils.subarray(data, i, i + MAX_ENCRYPT_BLOCK));
|
|
enBytes = ArrayUtils.addAll(enBytes, doFinal);
|
|
}
|
|
return enBytes;
|
|
}
|
|
|
|
/**
|
|
* 用私钥对信息生成数字签名
|
|
*
|
|
* @param data //加密数据
|
|
* @param privateKey //私钥
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static String sign(byte[] data, String privateKey) throws Exception {
|
|
//解密私钥
|
|
byte[] keyBytes = decryptBASE64(privateKey);
|
|
//构造PKCS8EncodedKeySpec对象
|
|
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
|
|
//指定加密算法
|
|
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
|
|
//取私钥匙对象
|
|
PrivateKey privateKey2 = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
|
|
//用私钥对信息生成数字签名
|
|
Signature signature = Signature.getInstance(SIGNATURE_ALGORITHM);
|
|
signature.initSign(privateKey2);
|
|
signature.update(data);
|
|
|
|
return encryptBASE64(signature.sign());
|
|
}
|
|
|
|
/**
|
|
* 私钥解密
|
|
* @param str
|
|
* @param key
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static String decryptByPrivate(String str, String key) throws Exception{
|
|
//64位解码加密后的字符串
|
|
byte[] inputByte = decryptBASE64(str);
|
|
//base64编码的私钥
|
|
byte[] decoded = decryptBASE64(key);
|
|
RSAPrivateKey priKey = (RSAPrivateKey) KeyFactory.getInstance("RSA").generatePrivate(new PKCS8EncodedKeySpec(decoded));
|
|
//RSA解密
|
|
Cipher cipher = Cipher.getInstance("RSA");
|
|
cipher.init(Cipher.DECRYPT_MODE, priKey);
|
|
String outStr = new String(cipher.doFinal(inputByte));
|
|
return outStr;
|
|
}
|
|
|
|
/**
|
|
* BASE64解密
|
|
*
|
|
* @param key
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static byte[] decryptBASE64(String key) throws Exception {
|
|
return (new BASE64Decoder()).decodeBuffer(key);
|
|
}
|
|
|
|
/**
|
|
* BASE64加密
|
|
*
|
|
* @param key
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static String encryptBASE64(byte[] key) throws Exception {
|
|
return (new BASE64Encoder()).encodeBuffer(key);
|
|
}
|
|
|
|
/**
|
|
* 解密动态核销码 dynamicCode
|
|
* @param data
|
|
* @param key
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static String decryptByPrivateKey(String data, String key) throws Exception {
|
|
//对私钥解密
|
|
byte[] keyBytes = decryptBASE64(key);
|
|
//64位解码加密后的字符串
|
|
byte[] inputByte = decryptBASE64(data);
|
|
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
|
|
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
|
|
Key privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
|
|
//对数据解密
|
|
Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
|
|
cipher.init(Cipher.DECRYPT_MODE, privateKey);
|
|
int decryptBlock = 1024 / 8;
|
|
byte[] deBytes = null;
|
|
for (int i = 0; i < inputByte.length; i += decryptBlock) {
|
|
byte[] doFinal = cipher.doFinal(ArrayUtils.subarray(inputByte, i, i + decryptBlock));
|
|
deBytes = ArrayUtils.addAll(deBytes, doFinal);
|
|
}
|
|
return new String(deBytes);
|
|
}
|
|
/**
|
|
* 校验数字签名
|
|
*
|
|
* @param data 加密数据
|
|
* @param publicKey 公钥
|
|
* @param sign 数字签名
|
|
* @return
|
|
* @throws Exception
|
|
*/
|
|
public static boolean verify(byte[] data, String publicKey, String sign) throws Exception {
|
|
//解密公钥
|
|
byte[] keyBytes = decryptBASE64(publicKey);
|
|
//构造PKCS8EncodedKeySpec对象
|
|
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
|
|
//指定加密算法
|
|
KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORTHM);
|
|
//取公钥匙对象
|
|
PublicKey publicKey2 = keyFactory.generatePublic(x509EncodedKeySpec);
|
|
|
|
Signature signature = Signature.getInstance(SIGNATURE_ALGORITHM);
|
|
signature.initVerify(publicKey2);
|
|
signature.update(data);
|
|
//验证签名是否正常
|
|
return signature.verify(decryptBASE64(sign));
|
|
|
|
}
|
|
|
|
/**
|
|
* Base64 编码和解码
|
|
*/
|
|
static class Base64 {
|
|
|
|
static private final int BASELENGTH = 128;
|
|
static private final int LOOKUPLENGTH = 64;
|
|
static private final int TWENTYFOURBITGROUP = 24;
|
|
static private final int EIGHTBIT = 8;
|
|
static private final int SIXTEENBIT = 16;
|
|
static private final int FOURBYTE = 4;
|
|
static private final int SIGN = -128;
|
|
static private final char PAD = '=';
|
|
static private final boolean fDebug = false;
|
|
static final private byte[] base64Alphabet = new byte[BASELENGTH];
|
|
static final private char[] lookUpBase64Alphabet = new char[LOOKUPLENGTH];
|
|
|
|
static {
|
|
for (int i = 0; i < BASELENGTH; ++i) {
|
|
base64Alphabet[i] = -1;
|
|
}
|
|
for (int i = 'Z'; i >= 'A'; i--) {
|
|
base64Alphabet[i] = (byte) (i - 'A');
|
|
}
|
|
for (int i = 'z'; i >= 'a'; i--) {
|
|
base64Alphabet[i] = (byte) (i - 'a' + 26);
|
|
}
|
|
|
|
for (int i = '9'; i >= '0'; i--) {
|
|
base64Alphabet[i] = (byte) (i - '0' + 52);
|
|
}
|
|
|
|
base64Alphabet['+'] = 62;
|
|
base64Alphabet['/'] = 63;
|
|
|
|
for (int i = 0; i <= 25; i++) {
|
|
lookUpBase64Alphabet[i] = (char) ('A' + i);
|
|
}
|
|
|
|
for (int i = 26, j = 0; i <= 51; i++, j++) {
|
|
lookUpBase64Alphabet[i] = (char) ('a' + j);
|
|
}
|
|
|
|
for (int i = 52, j = 0; i <= 61; i++, j++) {
|
|
lookUpBase64Alphabet[i] = (char) ('0' + j);
|
|
}
|
|
lookUpBase64Alphabet[62] = (char) '+';
|
|
lookUpBase64Alphabet[63] = (char) '/';
|
|
|
|
}
|
|
|
|
private static boolean isWhiteSpace(char octect) {
|
|
return (octect == 0x20 || octect == 0xd || octect == 0xa || octect == 0x9);
|
|
}
|
|
|
|
private static boolean isPad(char octect) {
|
|
return (octect == PAD);
|
|
}
|
|
|
|
private static boolean isData(char octect) {
|
|
return (octect < BASELENGTH && base64Alphabet[octect] != -1);
|
|
}
|
|
|
|
/**
|
|
* Encodes hex octects into Base64
|
|
*
|
|
* @param binaryData Array containing binaryData
|
|
* @return Encoded Base64 array
|
|
*/
|
|
public static String encode(byte[] binaryData) {
|
|
|
|
if (binaryData == null) {
|
|
return null;
|
|
}
|
|
|
|
int lengthDataBits = binaryData.length * EIGHTBIT;
|
|
if (lengthDataBits == 0) {
|
|
return "";
|
|
}
|
|
|
|
int fewerThan24bits = lengthDataBits % TWENTYFOURBITGROUP;
|
|
int numberTriplets = lengthDataBits / TWENTYFOURBITGROUP;
|
|
int numberQuartet = fewerThan24bits != 0 ? numberTriplets + 1 : numberTriplets;
|
|
char encodedData[] = null;
|
|
|
|
encodedData = new char[numberQuartet * 4];
|
|
|
|
byte k = 0, l = 0, b1 = 0, b2 = 0, b3 = 0;
|
|
|
|
int encodedIndex = 0;
|
|
int dataIndex = 0;
|
|
if (fDebug) {
|
|
System.out.println("number of triplets = " + numberTriplets);
|
|
}
|
|
|
|
for (int i = 0; i < numberTriplets; i++) {
|
|
b1 = binaryData[dataIndex++];
|
|
b2 = binaryData[dataIndex++];
|
|
b3 = binaryData[dataIndex++];
|
|
|
|
if (fDebug) {
|
|
System.out.println("b1= " + b1 + ", b2= " + b2 + ", b3= " + b3);
|
|
}
|
|
|
|
l = (byte) (b2 & 0x0f);
|
|
k = (byte) (b1 & 0x03);
|
|
|
|
byte val1 = ((b1 & SIGN) == 0) ? (byte) (b1 >> 2) : (byte) ((b1) >> 2 ^ 0xc0);
|
|
byte val2 = ((b2 & SIGN) == 0) ? (byte) (b2 >> 4) : (byte) ((b2) >> 4 ^ 0xf0);
|
|
byte val3 = ((b3 & SIGN) == 0) ? (byte) (b3 >> 6) : (byte) ((b3) >> 6 ^ 0xfc);
|
|
|
|
if (fDebug) {
|
|
System.out.println("val2 = " + val2);
|
|
System.out.println("k4 = " + (k << 4));
|
|
System.out.println("vak = " + (val2 | (k << 4)));
|
|
}
|
|
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[val1];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[val2 | (k << 4)];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[(l << 2) | val3];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[b3 & 0x3f];
|
|
}
|
|
|
|
// form integral number of 6-bit groups
|
|
if (fewerThan24bits == EIGHTBIT) {
|
|
b1 = binaryData[dataIndex];
|
|
k = (byte) (b1 & 0x03);
|
|
if (fDebug) {
|
|
System.out.println("b1=" + b1);
|
|
System.out.println("b1<<2 = " + (b1 >> 2));
|
|
}
|
|
byte val1 = ((b1 & SIGN) == 0) ? (byte) (b1 >> 2) : (byte) ((b1) >> 2 ^ 0xc0);
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[val1];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[k << 4];
|
|
encodedData[encodedIndex++] = PAD;
|
|
encodedData[encodedIndex++] = PAD;
|
|
} else if (fewerThan24bits == SIXTEENBIT) {
|
|
b1 = binaryData[dataIndex];
|
|
b2 = binaryData[dataIndex + 1];
|
|
l = (byte) (b2 & 0x0f);
|
|
k = (byte) (b1 & 0x03);
|
|
|
|
byte val1 = ((b1 & SIGN) == 0) ? (byte) (b1 >> 2) : (byte) ((b1) >> 2 ^ 0xc0);
|
|
byte val2 = ((b2 & SIGN) == 0) ? (byte) (b2 >> 4) : (byte) ((b2) >> 4 ^ 0xf0);
|
|
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[val1];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[val2 | (k << 4)];
|
|
encodedData[encodedIndex++] = lookUpBase64Alphabet[l << 2];
|
|
encodedData[encodedIndex++] = PAD;
|
|
}
|
|
|
|
return new String(encodedData);
|
|
}
|
|
|
|
/**
|
|
* Decodes Base64 data into octects
|
|
*
|
|
* @param encoded string containing Base64 data
|
|
* @return Array containind decoded data.
|
|
*/
|
|
public static byte[] decode(String encoded) {
|
|
|
|
if (encoded == null) {
|
|
return null;
|
|
}
|
|
|
|
char[] base64Data = encoded.toCharArray();
|
|
// remove white spaces
|
|
int len = removeWhiteSpace(base64Data);
|
|
|
|
if (len % FOURBYTE != 0) {
|
|
return null;//should be divisible by four
|
|
}
|
|
|
|
int numberQuadruple = (len / FOURBYTE);
|
|
|
|
if (numberQuadruple == 0) {
|
|
return new byte[0];
|
|
}
|
|
|
|
byte decodedData[] = null;
|
|
byte b1 = 0, b2 = 0, b3 = 0, b4 = 0;
|
|
char d1 = 0, d2 = 0, d3 = 0, d4 = 0;
|
|
|
|
int i = 0;
|
|
int encodedIndex = 0;
|
|
int dataIndex = 0;
|
|
decodedData = new byte[(numberQuadruple) * 3];
|
|
|
|
for (; i < numberQuadruple - 1; i++) {
|
|
|
|
if (!isData((d1 = base64Data[dataIndex++])) || !isData((d2 = base64Data[dataIndex++]))
|
|
|| !isData((d3 = base64Data[dataIndex++]))
|
|
|| !isData((d4 = base64Data[dataIndex++]))) {
|
|
return null;
|
|
}//if found "no data" just return null
|
|
|
|
b1 = base64Alphabet[d1];
|
|
b2 = base64Alphabet[d2];
|
|
b3 = base64Alphabet[d3];
|
|
b4 = base64Alphabet[d4];
|
|
|
|
decodedData[encodedIndex++] = (byte) (b1 << 2 | b2 >> 4);
|
|
decodedData[encodedIndex++] = (byte) (((b2 & 0xf) << 4) | ((b3 >> 2) & 0xf));
|
|
decodedData[encodedIndex++] = (byte) (b3 << 6 | b4);
|
|
}
|
|
|
|
if (!isData((d1 = base64Data[dataIndex++])) || !isData((d2 = base64Data[dataIndex++]))) {
|
|
return null;//if found "no data" just return null
|
|
}
|
|
|
|
b1 = base64Alphabet[d1];
|
|
b2 = base64Alphabet[d2];
|
|
|
|
d3 = base64Data[dataIndex++];
|
|
d4 = base64Data[dataIndex++];
|
|
if (!isData((d3)) || !isData((d4))) {//Check if they are PAD characters
|
|
if (isPad(d3) && isPad(d4)) {
|
|
if ((b2 & 0xf) != 0)//last 4 bits should be zero
|
|
{
|
|
return null;
|
|
}
|
|
byte[] tmp = new byte[i * 3 + 1];
|
|
System.arraycopy(decodedData, 0, tmp, 0, i * 3);
|
|
tmp[encodedIndex] = (byte) (b1 << 2 | b2 >> 4);
|
|
return tmp;
|
|
} else if (!isPad(d3) && isPad(d4)) {
|
|
b3 = base64Alphabet[d3];
|
|
if ((b3 & 0x3) != 0)//last 2 bits should be zero
|
|
{
|
|
return null;
|
|
}
|
|
byte[] tmp = new byte[i * 3 + 2];
|
|
System.arraycopy(decodedData, 0, tmp, 0, i * 3);
|
|
tmp[encodedIndex++] = (byte) (b1 << 2 | b2 >> 4);
|
|
tmp[encodedIndex] = (byte) (((b2 & 0xf) << 4) | ((b3 >> 2) & 0xf));
|
|
return tmp;
|
|
} else {
|
|
return null;
|
|
}
|
|
} else { //No PAD e.g 3cQl
|
|
b3 = base64Alphabet[d3];
|
|
b4 = base64Alphabet[d4];
|
|
decodedData[encodedIndex++] = (byte) (b1 << 2 | b2 >> 4);
|
|
decodedData[encodedIndex++] = (byte) (((b2 & 0xf) << 4) | ((b3 >> 2) & 0xf));
|
|
decodedData[encodedIndex++] = (byte) (b3 << 6 | b4);
|
|
|
|
}
|
|
|
|
return decodedData;
|
|
}
|
|
|
|
/**
|
|
* remove WhiteSpace from MIME containing encoded Base64 data.
|
|
*
|
|
* @param data the byte array of base64 data (with WS)
|
|
* @return the new length
|
|
*/
|
|
private static int removeWhiteSpace(char[] data) {
|
|
if (data == null) {
|
|
return 0;
|
|
}
|
|
|
|
// count characters that's not whitespace
|
|
int newSize = 0;
|
|
int len = data.length;
|
|
for (int i = 0; i < len; i++) {
|
|
if (!isWhiteSpace(data[i])) {
|
|
data[newSize++] = data[i];
|
|
}
|
|
}
|
|
return newSize;
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|