????????國密算法是國家密碼局制定標(biāo)準(zhǔn)的一系列算法,包括SM1、SM2、SM3、SM4等。其中,SM1是采用硬件實現(xiàn)的,不予討論;SM2是非對稱加密算法;SM3是摘要算法;SM4是對稱加密算法。本篇貼出SM2?Java版本實現(xiàn)生成公私鑰及加解密、簽名驗簽代碼,供大家一起討論學(xué)習(xí),所有的代碼實現(xiàn)都是基于BC庫來做的。
????????BC庫是實現(xiàn)加解密算法的基礎(chǔ)庫,我們首先要在代碼里引入BC庫文章來源:http://www.zghlxwxcb.cn/news/detail-503778.html
?? ? ? ? <dependency>
? ? ? ? ? ? <groupId>org.bouncycastle</groupId>
? ? ? ? ? ? <artifactId>bcprov-jdk15on</artifactId>
? ? ? ? ? ? <version>1.69</version>
? ? ? ? </dependency>
? ? ? ? 下面是整個工具類,實現(xiàn)密鑰生成,加解密及簽名驗簽功能文章來源地址http://www.zghlxwxcb.cn/news/detail-503778.html
import org.apache.commons.codec.binary.Base64;
import org.bouncycastle.crypto.CipherParameters;
import org.bouncycastle.crypto.engines.SM2Engine;
import org.bouncycastle.crypto.params.ECPrivateKeyParameters;
import org.bouncycastle.crypto.params.ECPublicKeyParameters;
import org.bouncycastle.crypto.params.ParametersWithRandom;
import org.bouncycastle.crypto.signers.SM2Signer;
import org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.security.*;
import java.security.spec.ECGenParameterSpec;
import java.security.spec.KeySpec;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
public class Sm2Utils {
private static Logger log = LoggerFactory.getLogger(Sm2Utils.class);
/**
* SM2算法生成密鑰對
*
* @return 密鑰對信息
*/
public static KeyPair generateSm2KeyPair() {
try {
final ECGenParameterSpec sm2Spec = new ECGenParameterSpec("prime256v1");
final KeyPairGenerator kpg = KeyPairGenerator.getInstance("EC", new BouncyCastleProvider());
SecureRandom random = new SecureRandom();
kpg.initialize(sm2Spec, random);
KeyPair keyPair = kpg.generateKeyPair();
return keyPair;
} catch (Exception e) {
log.error("generate sm2 key pail failed:", e.getMessage(), e);
throw new RuntimeException("生成密鑰對失敗");
}
}
/**
* sm2公鑰加密
*
* @param data
* @param key
* @return
* @throws Exception
*/
public static byte[] encrypt(byte[] data, byte[] key) throws Exception {
KeySpec keySpec = new X509EncodedKeySpec(key);
PublicKey publicKey = KeyFactory.getInstance("EC", new BouncyCastleProvider()).generatePublic(keySpec);
ECPublicKeyParameters parameters = (ECPublicKeyParameters) ECUtil.generatePublicKeyParameter(publicKey);
CipherParameters pubKeyParameters = new ParametersWithRandom(parameters);
SM2Engine engine = new SM2Engine(SM2Engine.Mode.C1C2C3);
engine.init(true, pubKeyParameters);
return engine.processBlock(data, 0, data.length);
}
/**
* sm2私鑰解密
* @param data
* @param key
* @return
* @throws Exception
*/
public static byte[] decrypt(byte[] data, byte[] key) throws Exception {
KeySpec keySpec = new PKCS8EncodedKeySpec(key);
KeyFactory keyfactory = KeyFactory.getInstance("EC", new BouncyCastleProvider());
PrivateKey privateKey = keyfactory.generatePrivate(keySpec);
CipherParameters privateKeyParameters = ECUtil.generatePrivateKeyParameter(privateKey);
SM2Engine engine = new SM2Engine(SM2Engine.Mode.C1C2C3);
engine.init(false, privateKeyParameters);
byte[] byteDate = engine.processBlock(data, 0, data.length);
return byteDate;
}
/**
* 私鑰簽名
* @param data
* @param key
* @return
* @throws Exception
*/
public static byte[] sign(byte[] data, byte[] key) throws Exception {
SM2Signer signer = new SM2Signer();
KeySpec keySpec = new PKCS8EncodedKeySpec(key);
KeyFactory keyfactory = KeyFactory.getInstance("EC", new BouncyCastleProvider());
PrivateKey privateKey = keyfactory.generatePrivate(keySpec);
ECPrivateKeyParameters keyParameters = (ECPrivateKeyParameters) ECUtil.generatePrivateKeyParameter(privateKey);
CipherParameters param = new ParametersWithRandom(keyParameters);
signer.init(true, param);
signer.update(data, 0, data.length);
return signer.generateSignature();
}
/**
* 公鑰驗簽
* @param data
* @param sign
* @param key
* @return
* @throws Exception
*/
public static boolean verify(byte[] data, byte[] sign, byte[] key) throws Exception {
SM2Signer signer = new SM2Signer();
KeySpec keySpec = new X509EncodedKeySpec(key);
PublicKey publicKey = KeyFactory.getInstance("EC", new BouncyCastleProvider()).generatePublic(keySpec);
CipherParameters param = ECUtil.generatePublicKeyParameter(publicKey);
signer.init(false, param);
signer.update(data, 0, data.length);
return signer.verifySignature(sign);
}
public static void main(String[] args) throws Exception {
KeyPair keyPair = generateSm2KeyPair();//生成密鑰
String publicKey = Base64.encodeBase64String(keyPair.getPublic().getEncoded());
String privateKey = Base64.encodeBase64String(keyPair.getPrivate().getEncoded());
System.out.println("sm2公鑰=" + publicKey);
System.out.println("sm2私鑰=" + privateKey);
String plaintext = "test";//明文
String signature = Base64.encodeBase64String((sign(plaintext.getBytes("utf-8"),keyPair.getPrivate().getEncoded())));
String ciphertext = Base64.encodeBase64String(encrypt(plaintext.getBytes("utf-8"), Base64.decodeBase64(publicKey)));
System.out.println("ciphertext: " + ciphertext);
System.out.println("signature: " + signature);
boolean result = verify(plaintext.getBytes("utf-8"),Base64.decodeBase64(signature),keyPair.getPublic().getEncoded());
plaintext = new String(decrypt(Base64.decodeBase64(ciphertext), Base64.decodeBase64(privateKey)), "utf-8");
System.out.println("plaintext: " + plaintext);
System.out.println("verify result: " + result);
}
}
到了這里,關(guān)于國密算法-SM2的文章就介紹完了。如果您還想了解更多內(nèi)容,請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章,希望大家以后多多支持TOY模板網(wǎng)!