RSA之超过128个字节的加密

墨蓝 2023-02-22 12:27 39阅读 0赞

记录一下：

package com.ceshi.demo;
    import java.security.MessageDigest;
    import java.security.interfaces.RSAPrivateKey;
    import java.security.interfaces.RSAPublicKey;
    import java.util.ArrayList;
    import java.util.Collections;
    import java.util.Comparator;
    import java.util.HashMap;
    import java.util.List;
    import java.util.Map;
    import com.google.gson.Gson;
    public class SignAndUnsin { 
        //公私钥模值
        static String modulus = "";
        static String exponent = "";
    
        public static void main(String[] args) throws Exception { 
            Gson gson = new Gson();
            Map<String, Object> map = new HashMap<String, Object>();
            map.put("joininstid", "00000000");
            map.put("joininstssn", "20200622195901330");
            map.put("reqdate", "20200622");
            map.put("reqtime", "195901");
            map.put("ssotoken", "330500010000");
            map.put("reqchanneltype", "10");
            System.out.println(map.toString());
            // 开始签名
            RSAPublicKey publicKey = RSAUtil.loadPublicKey(modulus, "10001", 16);
            // 2、公钥加密，后台使用私钥解密验签
            String strForSign = "";
            // 真正的业务数据
            Map<String, Object> dataMap = new HashMap<String, Object>();
            dataMap.put("logintype", "0");
            dataMap.put("unionid", "123456");
            dataMap.put("loginname", "ceshi");
            dataMap.put("loginpasswd", "5059be4e8d3286e89c1181a6d13f2c2c");
            dataMap.put("loginmode", "0");
            dataMap.put("devicename", "PE-TL10");
            dataMap.put("uuid", "867601025524551");
            dataMap.put("reloginflag", "1");
            Map pp = new HashMap<>();
            pp.put("accoutpassword", "123456");
            dataMap.put("attch", pp);
            for (Map.Entry<String, Object> m : getSortMap(dataMap)) { 
                map.put(m.getKey(), gson.toJson(m.getValue()).replaceAll("\"", ""));
            }
            for (Map.Entry<String, Object> m : getSortMap(map)) { 
                strForSign += m.getKey() + m.getValue();
            }
            String strForSignSHA1 = calc(strForSign);
            System.out.println("要签名数据:" + strForSign);
            System.out.println("加密后数据:" + strForSignSHA1);
            byte[] cipherText = RSAUtil.publicKeyEncrypt("RSA", "ECB", "PKCS1Padding", publicKey, strForSignSHA1.getBytes("GBK"));
            System.out.println("加密：" + StringUtil.bytesToHexString(cipherText).toUpperCase());
            map.put("data", dataMap);
            map.put("sign", StringUtil.bytesToHexString(cipherText).toUpperCase());// 签名结果
            System.out.println("签名：" + map.get("sign"));
            //验签
            Unsign(map);
        }
        public static void Unsign(Map jsonObject) throws Exception { 
            Gson gson = new Gson();
            Map<String, Object> signData = new HashMap<String, Object>();
            signData.put("joininstid", (String) jsonObject.get("joininstid"));
            signData.put("joininstssn", (String) jsonObject.get("joininstssn"));
            signData.put("reqdate", (String) jsonObject.get("reqdate"));
            signData.put("reqtime", (String) jsonObject.get("reqtime"));
            signData.put("ssotoken", (String) jsonObject.get("ssotoken"));
            signData.put("reqchanneltype", (String) jsonObject.get("reqchanneltype"));
            String sign = (String) jsonObject.get("sign");
            Map<String, Object> dataMap = (Map<String, Object>) jsonObject.get("data");
            RSAPrivateKey privateKey = RSAUtil.loadPrivateKey(modulus, exponent, 16);
            for (Map.Entry<String, Object> m : dataMap.entrySet()) { 
                signData.put(m.getKey(), gson.toJson(m.getValue()).replaceAll("\"", ""));
            }
            String strForSign = "";
            //排序
            for (Map.Entry<String, Object> m : getSortMap(signData)) { 
                strForSign += m.getKey() + m.getValue().toString();
            }
            System.out.println("要签名数据:" + strForSign);
    
            byte[] plainText = RSAUtil.privateKeyDecrypt("RSA", "ECB", "PKCS1Padding", privateKey, StringUtil.hexStringToBytes(sign));
            String signDecrypt = new String(plainText, "GBK");
            String strForSignSHA1 = calc(strForSign);
            System.out.println("加密后数据:" + strForSignSHA1);
            if (!signDecrypt.equals(strForSignSHA1)) { 
                System.out.println("签名错误");
            } else { 
                System.out.println("签名通过");
            }
        }
    
        public static String calc(String decript) { 
            try { 
                MessageDigest digest = MessageDigest.getInstance("SHA-1");
                digest.update(decript.getBytes());
                byte[] messageDigest = digest.digest();
                StringBuffer hexString = new StringBuffer();
    
                for (int i = 0; i < messageDigest.length; ++i) { 
                    String shaHex = Integer.toHexString(messageDigest[i] & 255);
                    if (shaHex.length() < 2) { 
                        hexString.append(0);
                    }
    
                    hexString.append(shaHex);
                }
    
                return hexString.toString();
            } catch (Exception var6) { 
                return "ERROR";
            }
        }
    
        public static List<Map.Entry<String, Object>> getSortMap(Map map) { 
            List<Map.Entry<String, Object>> mappingList = null;
            mappingList = new ArrayList<Map.Entry<String, Object>>(map.entrySet());
            Collections.sort(mappingList, new Comparator<Map.Entry<String, Object>>() { 
                public int compare(Map.Entry<String, Object> mapping1, Map.Entry<String, Object> mapping2) { 
                    return mapping1.getKey().compareTo(mapping2.getKey());
                }
            });
            return mappingList;
        }
    }