AES,RSA, SHA1简单工具类
一些简单工具类
AES算法工具类：
<dependency>
<groupId>cn.hutoolgroupId>
<artifactId>hutool-allartifactId>
<version>5.7.18version>
dependency>
扒拉过去直接使用：
/**
* @author zqh
*/
public class AESUtil {
/** 加密
* @param encryptKey 密钥
* @param content 加密内容
* @return
*/
public static String encryptAES(String encryptKey, String content){
String finalKey = toMakeKey(encryptKey, 16, "0");
SymmetricCrypto aes = getAES(finalKey);
byte[] encryptContent = aes.encrypt(content);
String encode = Base64.encode(encryptContent);
return encode;
}
/** AES解密
* @param encryptKey 密钥
* @param content Base64编码的解密内容
* @return 原文
*/
public static String decryptAES(String encryptKey, String content) {
String finalKey = toMakeKey(encryptKey, 16, "0");
SymmetricCrypto aes = getAES(finalKey);
byte[] decodeBytes = Base64.decode(content);
byte[] decrypt = aes.decrypt(decodeBytes);
return new String(decrypt, Charset.forName("UTF-8"));
}
private static SymmetricCrypto getAES(String encryptKey) {
byte[] encodedKey = SecureUtil.generateKey(SymmetricAlgorithm.AES.getValue(), encryptKey.getBytes(StandardCharsets.UTF_8)).getEncoded();
return new SymmetricCrypto(SymmetricAlgorithm.AES, encodedKey);
}
/**
* 密钥key ,默认补的数字，补全16位数，以保证安全补全至少16位长度,android和ios对接通过
* @param key 密钥key
* @param length 密钥应有的长度
* @param text 默认补的文本
* @return 密钥
*/
private static String toMakeKey(String key, int length, String text) {
// 获取密钥长度
int strLen = key.length();
// 判断长度是否小于应有的长度
if (strLen < length) {
// 补全位数
StringBuilder builder = new StringBuilder();
// 将key添加至builder中
builder.append(key);
// 遍历添加默认文本
for (int i = 0; i < length - strLen; i++) {
builder.append(text);
}
// 赋值
key = builder.toString();
}else {
key = key.substring(0,16);
}
return key;
}
public static void main(String[] args) {
String content = "1";
String key = "appiron";
String encryptAES = encryptAES(key, content);
String decryptAES = decryptAES(key, encryptAES);
System.out.println(decryptAES);
}
}
/**
* @author zqh
*/
public class Sha1Util {
private static final String MAC_NAME = "HmacSHA1";
private static final String ENCODING = "UTF-8";
public static byte[] HmacSHA1Encrypt(String encryptText, String encryptKey) {
byte[] data;
try {
data = encryptKey.getBytes(ENCODING);
// 根据给定的字节数组构造一个密钥,第二参数指定一个密钥算法的名称
SecretKey secretKey = new SecretKeySpec(data, MAC_NAME);
// 生成一个指定 Mac 算法 的 Mac 对象
Mac mac = Mac.getInstance(MAC_NAME);
// 用给定密钥初始化 Mac 对象
mac.init(secretKey);
byte[] text = encryptText.getBytes(ENCODING);
// 完成 Mac 操作
return mac.doFinal(text);
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (InvalidKeyException e) {
e.printStackTrace();
}
return null;
}
}
RSA解密
<dependency>
<groupId>org.bouncycastlegroupId>
<artifactId>bcpkix-jdk15onartifactId>
<version>1.70version>
dependency>
<dependency>
<groupId>org.bouncycastlegroupId>
<artifactId>bcprov-jdk15onartifactId>
<version>1.70version>
dependency>
package com.appiron.emm.mdm.util;
/**
* @author lxs
* @PackageName:com.appiron.emm.job.test
* @ClassName:Pcks7EncryptOrDecryptUtil
* @Description:
* @date 2022/1/6 15:19
*/
public class Pcks7EncryptOrDecryptUtil {
private static final String PRIVATE_KEY_PATH = "C:\\Users\\Administrator\\Desktop\\apple\\1_pri.pem";
private static final String PRIVATE_KEY_PASSWORD="123456";
public static final String PUBLIC_KEY_PATH="C:\\Users\\Administrator\\Desktop\\apple\\1.cer";
private static PrivateKey PRIVATE_KEY = null;
private static RSAPublicKey PUBLIC_KEY = null;
private static final char[] HEX_CHAR = { '0', '1', '2', '3', '4', '5', '6',
'7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f' };
static {
Security.addProvider(new BouncyCastleProvider());
}
public static void main(String[] args) throws Exception {
// String sendConent="3.0 161018173004 764764000001350 R THBPOps180808153209 0.01 E8CCDCDBDBB7428CF0CC9F06AB30B595067F4C89 获取Oauth1.0中的签名oauth_signature
一些认证信息，
{
”consumer_key”: ”CK_00fadb3d36c6094cf479838455321b7c”,
”consumer_secret”: ”CS_5fb17e5676db0cf875211937e5166d0f662ea1f9”,
”access_token”: ”AT_O2109279022Oe03b641fd6f07d7face7894211d521fd8bef09c3O137392”,
”access_secret”: ”AS_837c228d968ff303837086a5a54be645314ef755”
”access_token_expiry”: ”2013-09-09T02:24:28Z”
}
需要发送一个GET请求， 请求头中，有一个oauth_signature=”wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D”
字段， 是需要通过计算得出的。
GET /session HTTP/1.1
Authorization: OAuth realm=”ADM”,
oauth_consumer_key=”CK_00fadb3d36c6094cf479838455321b7c”,
2019-03-25 | Copyright © 2019 Apple Inc. All Rights Reserved.
99
oauth_token=”AT_O2109279022Oe03b641fd6f07d7face7894211d521fd8bef09c3O137392”,
oauth_signature_method=”HMAC-SHA1”,
oauth_signature=”wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D”,
oauth_timestamp=”137131200”,
oauth_nonce=”4572616e48616d6d65724c61686176”,
oauth_version=”1.0”
总体流程：
- 除consumer_secret， access_secret之外，将所有参数字段键值对进行升序排列， 然后拼接"&"
- 以consumer_secret， access_secret拼接， 使用"&"拼接。
- 对 HTTP请求路径 进行URL编码
- . 对参数 进行URL编码
- 拼接加密的基础字符串
- 以签名基本字符串waitSha1EncodeStr作为文本， 消费者密钥和使用者密钥拼接后的字符串作为键，进行 HMAC-SHA1 加密
- base64编码
- 在签名进行 URL编码
private String getOauthSignature(String authTokenUrl, JSONObject abmToken, String nonce, long timeStamp) {
StringBuilder paramBuilder = new StringBuilder();
paramBuilder.append(CodeConstants.OAUTH_CONSUMER_KEY + CodeConstants.EQUAL_STR);
paramBuilder.append(abmToken.getStr(CodeConstants.CONSUMER_KEY));
paramBuilder.append(CodeConstants.AND_STR + CodeConstants.OAUTH_NONCE_KEY + CodeConstants.EQUAL_STR);
paramBuilder.append(nonce);
paramBuilder.append(CodeConstants.AND_STR + CodeConstants.OAUTH_SIGNATURE_METHOD_KEY + CodeConstants.EQUAL_STR);
paramBuilder.append(CodeConstants.OAUTH_SIGNATURE_METHOD);
paramBuilder.append(CodeConstants.AND_STR + CodeConstants.OAUTH_TIMESTAMP_KEY +CodeConstants.EQUAL_STR);
paramBuilder.append(timeStamp);
paramBuilder.append(CodeConstants.AND_STR + CodeConstants.OAUTH_TOKEN_KEY + CodeConstants.EQUAL_STR);
paramBuilder.append(abmToken.getStr(CodeConstants.ACCESS_TOKEN));
paramBuilder.append(CodeConstants.AND_STR + CodeConstants.OAUTH_VERSION_KEY + CodeConstants.EQUAL_STR);
paramBuilder.append(CodeConstants.OAUTH_VERSION);
String encodeKey = abmToken.getStr(CodeConstants.CONSUMER_SECRET) + CodeConstants.AND_STR + abmToken.getStr(CodeConstants.ACCESS_SECRET);
try {
//1.对 HTTP请求路径 进行URL编码
String encodeUrl = URLEncoder.encode(authTokenUrl, CodeConstants.CHARSET_UTF_8);
//2. 对参数 进行URL编码
String encodeParam = URLEncoder.encode(paramBuilder.toString(), CodeConstants.CHARSET_UTF_8);
//3 拼接加密的基础字符串
String waitSha1EncodeStr = CodeConstants.METHOD_OF_GET + CodeConstants.AND_STR + encodeUrl + CodeConstants.AND_STR + encodeParam;
//4. 以签名基本字符串waitSha1EncodeStr作为文本， 消费者密钥和使用者密钥拼接后的字符串作为键，进行 HMAC-SHA1 加密
byte[] signBytes = Sha1Util.HmacSHA1Encrypt(waitSha1EncodeStr, encodeKey);
//5.base64编码
String encode = Base64.encode(signBytes);
//6. 在签名进行 URL编码
String result = URLEncoder.encode(encode, CodeConstants.CHARSET_UTF_8);
return result;
} catch (UnsupportedEncodingException e) {
LogUtils.error(log,"URL编码失败， 异常原因 ： {}",e.getMessage());
}
return null;
}
//getOauthSignature
public final static String AND_STR = "&";
public final static String EQUAL_STR = "=";
public final static String OAUTH_CONSUMER_KEY = "oauth_consumer_key";
public final static String OAUTH_NONCE_KEY = "oauth_nonce";
public final static String OAUTH_SIGNATURE_METHOD_KEY = "oauth_signature_method";
public final static String OAUTH_SIGNATURE_KEY = "oauth_signature";
public final static String OAUTH_TIMESTAMP_KEY = "oauth_timestamp";
public final static String OAUTH_TOKEN_KEY = "oauth_token";
public final static String OAUTH_VERSION_KEY = "oauth_version";
public final static String CHARSET_UTF_8 = "UTF-8";
public final static String METHOD_OF_GET = "GET";