Li Zhe - Norman's Tech Blog

Java实现RSA加密和解密

27 Oct 2020

使用OpenSSL生成密钥对（公钥和私钥），使用java代码对字符串进行加密解密。
使用公钥加密，可以使用私钥解密，反之也可以。

1.安装OpenSSL并生成密钥

官网：https://www.openssl.org/
Windows安装包下载：
https://oomake.com/download/openssl
安装完成后打开\OpenSSL-Win64\bin\openssl.exe
生成密钥文件：

genrsa -des3 -out lizheblogs_privkey.pem 2048

如果不需要密码，去掉-des3

输出私钥内容：

rsa -in lizheblogs_private_key.pem

输出公钥内容：

rsa -in lizheblogs_private_key.pem -pubout

内容类似于：

2.java加密解密代码

package com.lizheblogs.server.utils;

import org.apache.commons.codec.binary.Base64;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;

import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.Key;
import java.security.KeyFactory;
import java.security.NoSuchAlgorithmException;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;

/**
 * Created by LiZhe on 2020-10-27.
 * com.lizheblogs.server.utils
 */
@Component
public class RSAEncrypt {

    private static String privateKey;
    private static String publicKey;

    public RSAEncrypt() {
        java.security.Security.addProvider(
                new org.bouncycastle.jce.provider.BouncyCastleProvider()
        );
    }

    @Value("${constants.private-key}")
    public void setPrivateKey(String privateKey) {
        RSAEncrypt.privateKey = privateKey;
    }

    @Value("${constants.public-key}")
    public void setPublicKey(String publicKey) {
        RSAEncrypt.publicKey = publicKey;
    }

    /**
     * RSA公钥加密
     * 对应解密方法：{@link RSAEncrypt#decryptPrivate(java.lang.String)}
     *
     * @param str 加密字符串
     * @return 密文
     * @throws Exception 加密过程中的异常信息
     */
    public static String encryptPublic(String str) throws Exception {
        return encrypt(str, getRsaPublicKey());

    }

    /**
     * RSA私钥解密
     * 对应加密方法：{@link RSAEncrypt#encryptPublic(java.lang.String)}
     *
     * @param str 加密字符串
     * @return 铭文
     * @throws Exception 解密过程中的异常信息
     */
    public static String decryptPrivate(String str) throws Exception {
        return decrypt(str, getRsaPrivateKey());
    }

    /**
     * RSA私钥加密
     * 对应解密方法：{@link RSAEncrypt#decryptPublic(java.lang.String)}
     *
     * @param str 加密字符串
     * @return 密文
     * @throws Exception 加密过程中的异常信息
     */
    public static String encryptPrivate(String str) throws Exception {
        return encrypt(str, getRsaPrivateKey());
    }

    /**
     * RSA公钥解密
     * 对应加密方法：{@link RSAEncrypt#encryptPrivate(java.lang.String)}
     *
     * @param str 加密字符串
     * @return 铭文
     * @throws Exception 解密过程中的异常信息
     */
    public static String decryptPublic(String str) throws Exception {
        return decrypt(str, getRsaPublicKey());

    }

    /**
     * 解析私钥
     *
     * @return 私钥
     * @throws NoSuchAlgorithmException
     * @throws InvalidKeySpecException
     */
    private static RSAPrivateKey getRsaPrivateKey() throws NoSuchAlgorithmException, InvalidKeySpecException {
        String privateKeyContent = privateKey.replaceAll("\\n", "")
                .replace("-----BEGIN RSA PRIVATE KEY-----", "")
                .replace("-----END RSA PRIVATE KEY-----", "");

        KeyFactory kf = KeyFactory.getInstance("RSA");

        PKCS8EncodedKeySpec keySpecPKCS8 = new PKCS8EncodedKeySpec(java.util.Base64.getDecoder().decode(privateKeyContent));
        return (RSAPrivateKey) kf.generatePrivate(keySpecPKCS8);
    }

    /**
     * 解析公钥
     *
     * @return 公钥
     * @throws NoSuchAlgorithmException
     * @throws InvalidKeySpecException
     */
    private static RSAPublicKey getRsaPublicKey() throws NoSuchAlgorithmException, InvalidKeySpecException {
        //解析公钥
        String publicKeyContent = publicKey.replaceAll("\\n", "")
                .replace("-----BEGIN PUBLIC KEY-----", "")
                .replace("-----END PUBLIC KEY-----", "");

        KeyFactory kf = KeyFactory.getInstance("RSA");

        X509EncodedKeySpec keySpecX509 = new X509EncodedKeySpec(java.util.Base64.getDecoder().decode(publicKeyContent));
        return (RSAPublicKey) kf.generatePublic(keySpecX509);
    }

    /**
     * 解密
     *
     * @param str 加密字符串
     * @param key 密钥
     * @return 文字
     * @throws NoSuchAlgorithmException
     * @throws NoSuchPaddingException
     * @throws InvalidKeyException
     * @throws IllegalBlockSizeException
     * @throws BadPaddingException
     */
    private static String decrypt(String str, Key key) throws NoSuchAlgorithmException,
            NoSuchPaddingException, InvalidKeyException, IllegalBlockSizeException, BadPaddingException {
        //64位解码加密后的字符串
        byte[] inputByte = Base64.decodeBase64(str.getBytes(StandardCharsets.UTF_8));
        //RSA解密
        Cipher cipher = Cipher.getInstance("RSA");
        cipher.init(Cipher.DECRYPT_MODE, key);
        return new String(cipher.doFinal(inputByte));
    }

    /**
     * 加密
     *
     * @param str 文字
     * @param key 密钥
     * @return 加密字符串
     * @throws NoSuchAlgorithmException
     * @throws NoSuchPaddingException
     * @throws InvalidKeyException
     * @throws IllegalBlockSizeException
     * @throws BadPaddingException
     */
    private static String encrypt(String str, Key key) throws NoSuchAlgorithmException,
            NoSuchPaddingException, InvalidKeyException, IllegalBlockSizeException, BadPaddingException {
        //RSA加密
        Cipher cipher = Cipher.getInstance("RSA");
        cipher.init(Cipher.ENCRYPT_MODE, key);
        return Base64.encodeBase64String(cipher.doFinal(str.getBytes(StandardCharsets.UTF_8)));
    }
}

测试方法：

String encrypt = RSAEncrypt.encryptPublic("pulqueli@gmail.com");
System.out.println("====" + encrypt);
String decrypt = RSAEncrypt.decryptPrivate(encrypt);
System.out.println("====" + decrypt);

参考文献：
https://blog.csdn.net/ls0111/article/details/77533768
https://gist.github.com/destan/b708d11bd4f403506d6d5bb5fe6a82c5
https://blog.csdn.net/qy20115549/article/details/83105736
https://blog.csdn.net/lwz15071387627/article/details/88103997

Norman Li Zhe

Java实现RSA加密和解密

1.安装OpenSSL并生成密钥

2.java加密解密代码