sunjianxi
2 years ago
parent
a3d3e24330
commit
77f169e177
14 changed files with 746 additions and 4 deletions
@ -0,0 +1,105 @@ |
||||
package org.springblade.common.config; |
||||
|
||||
import org.bouncycastle.asn1.gm.GMNamedCurves; |
||||
import org.bouncycastle.asn1.x9.X9ECParameters; |
||||
import org.bouncycastle.crypto.AsymmetricCipherKeyPair; |
||||
import org.bouncycastle.crypto.InvalidCipherTextException; |
||||
import org.bouncycastle.crypto.engines.SM2Engine; |
||||
import org.bouncycastle.crypto.generators.ECKeyPairGenerator; |
||||
import org.bouncycastle.crypto.params.*; |
||||
import org.bouncycastle.math.ec.ECPoint; |
||||
import org.bouncycastle.pqc.math.linearalgebra.ByteUtils; |
||||
import org.bouncycastle.util.encoders.Hex; |
||||
import org.springblade.common.constant.KeyConstant; |
||||
import org.springblade.common.enums.ModeTypeEnum; |
||||
|
||||
import java.io.IOException; |
||||
import java.io.UnsupportedEncodingException; |
||||
import java.math.BigInteger; |
||||
import java.security.NoSuchAlgorithmException; |
||||
import java.security.SecureRandom; |
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
/** |
||||
* SM2公钥密码算法（非对称算法） |
||||
* SM2椭圆曲线公钥密码算法是我国自主设计的公钥密码算法。 |
||||
* 包括SM2-1椭圆曲线数字签名算法；SM2-2椭圆曲线密钥交换协议；SM2-3椭圆曲线公钥加密算法，分别用于实现数字签名密钥协商和数据加密等功能。 |
||||
* SM2算法与RSA算法不同的是，SM2算法是基于椭圆曲线上点群离散对数难题，相对于RSA算法，256位的SM2密码强度已经比2048位的RSA密码强度要高。 |
||||
*/ |
||||
public class SecretCommon { |
||||
//获取椭圆曲线
|
||||
public static synchronized ECDomainParameters getECDomainParameters() { |
||||
X9ECParameters sm2ECParameters = GMNamedCurves.getByName(KeyConstant.GM_NAME_CURVE); |
||||
return new ECDomainParameters(sm2ECParameters.getCurve(), sm2ECParameters.getG(), sm2ECParameters.getN()); |
||||
} |
||||
|
||||
/** |
||||
* get key pair |
||||
*/ |
||||
public static Map<String, String> createKeyPair() throws NoSuchAlgorithmException { |
||||
ECKeyPairGenerator keyPairGenerator = new ECKeyPairGenerator(); |
||||
keyPairGenerator.init(new ECKeyGenerationParameters(getECDomainParameters(), SecureRandom.getInstance(KeyConstant.ALGORITHM))); |
||||
AsymmetricCipherKeyPair asymmetricCipherKeyPair = keyPairGenerator.generateKeyPair(); |
||||
Map<String, String> map = new HashMap<>(); |
||||
BigInteger bigInteger = ((ECPrivateKeyParameters) asymmetricCipherKeyPair.getPrivate()).getD(); |
||||
map.put(KeyConstant.PRIVATE_KEY, ByteUtils.toHexString(bigInteger.toByteArray())); |
||||
// 把公钥放入map中,默认压缩公钥
|
||||
// 公钥前面的02或者03表示是压缩公钥,04表示未压缩公钥,04的时候,可以去掉前面的04
|
||||
ECPoint ecPoint = ((ECPublicKeyParameters) asymmetricCipherKeyPair.getPublic()).getQ(); |
||||
map.put(KeyConstant.PUBLIC_KEY, ByteUtils.toHexString(ecPoint.getEncoded(false))); |
||||
return map; |
||||
} |
||||
|
||||
/** |
||||
* 加密 |
||||
* @param plainText 需加密的明文字符串 |
||||
* @param publicKey 公钥 |
||||
* @param modeType base:标准；bc：BC模式 |
||||
*/ |
||||
public static String encrypt(String plainText, String publicKey, ModeTypeEnum modeType) throws IOException, InvalidCipherTextException { |
||||
return encrypt(plainText.getBytes(), publicKey, modeType.getMode()); |
||||
} |
||||
|
||||
/** |
||||
* 加密 |
||||
* @param plainByte 需加密的明文字节数组 |
||||
* @param publicKey 公钥 |
||||
* @param mode 加密模式 ModeTypeEnum |
||||
*/ |
||||
public static String encrypt(byte[] plainByte, String publicKey, SM2Engine.Mode mode) throws IOException, InvalidCipherTextException { |
||||
ECDomainParameters domainParameters = getECDomainParameters(); |
||||
//提取公钥点
|
||||
ECPoint ecPoint = domainParameters.getCurve().decodePoint(ByteUtils.fromHexString(publicKey)); |
||||
// 公钥前面的02或者03表示是压缩公钥，04表示未压缩公钥, 04的时候，可以去掉前面的04
|
||||
ECPublicKeyParameters publicKeyParameters = new ECPublicKeyParameters(ecPoint, domainParameters); |
||||
SM2Engine sm2Engine = new SM2Engine(mode); |
||||
sm2Engine.init(true, new ParametersWithRandom(publicKeyParameters, new SecureRandom())); |
||||
return ByteUtils.toHexString(sm2Engine.processBlock(plainByte, 0, plainByte.length)); |
||||
} |
||||
|
||||
/** |
||||
* 解密 |
||||
* @param cipherText 需加密的字符串 |
||||
* @param privateKey 私钥 |
||||
* @param modeType base:标准；bc：BC模式 |
||||
*/ |
||||
public static String decrypt(String cipherText, String privateKey, ModeTypeEnum modeType) throws InvalidCipherTextException, UnsupportedEncodingException { |
||||
return decrypt(Hex.decode(cipherText), privateKey, modeType.getMode()); |
||||
} |
||||
|
||||
/** |
||||
* 解密 |
||||
* @param cipherDataByte 密文字节数组 |
||||
* @param privateKeyHex 私钥 |
||||
* @param mode 解密模式 ModeTypeEnum |
||||
*/ |
||||
public static String decrypt(byte[] cipherDataByte, String privateKeyHex, SM2Engine.Mode mode) throws InvalidCipherTextException, UnsupportedEncodingException { |
||||
BigInteger bigInteger = new BigInteger(privateKeyHex, 16); |
||||
ECPrivateKeyParameters privateKeyParameters = new ECPrivateKeyParameters(bigInteger, getECDomainParameters()); |
||||
SM2Engine sm2Engine = new SM2Engine(mode); |
||||
sm2Engine.init(false, privateKeyParameters); |
||||
return new String(sm2Engine.processBlock(cipherDataByte, 0, cipherDataByte.length), "utf-8"); |
||||
} |
||||
|
||||
} |
||||
@ -0,0 +1,115 @@ |
||||
package org.springblade.common.config; |
||||
|
||||
import org.springframework.boot.context.properties.ConfigurationProperties; |
||||
import org.springframework.stereotype.Component; |
||||
|
||||
|
||||
@ConfigurationProperties( |
||||
prefix = "sm2.privatekey" |
||||
) |
||||
@Component |
||||
public class Sm2PrivatekeyProperties { |
||||
private String listHospital; |
||||
private String detailPublish; |
||||
private String userBlacklist; |
||||
private String alreadyConfigDay; |
||||
private String detailForApm; |
||||
private String save; |
||||
private String page; |
||||
private String cancel; |
||||
private String getSystemDatetime; |
||||
private String saveCupImg; |
||||
|
||||
public Sm2PrivatekeyProperties() { |
||||
this.listHospital = ""; |
||||
this.detailPublish = ""; |
||||
this.userBlacklist = ""; |
||||
this.alreadyConfigDay = ""; |
||||
this.detailForApm = ""; |
||||
this.save = ""; |
||||
this.page = ""; |
||||
this.cancel = ""; |
||||
this.getSystemDatetime = ""; |
||||
this.saveCupImg = ""; |
||||
} |
||||
|
||||
public String getListHospital() { |
||||
return listHospital; |
||||
} |
||||
|
||||
public void setListHospital(String listHospital) { |
||||
this.listHospital = listHospital; |
||||
} |
||||
|
||||
public String getDetailPublish() { |
||||
return detailPublish; |
||||
} |
||||
|
||||
public void setDetailPublish(String detailPublish) { |
||||
this.detailPublish = detailPublish; |
||||
} |
||||
|
||||
public String getUserBlacklist() { |
||||
return userBlacklist; |
||||
} |
||||
|
||||
public void setUserBlacklist(String userBlacklist) { |
||||
this.userBlacklist = userBlacklist; |
||||
} |
||||
|
||||
public String getAlreadyConfigDay() { |
||||
return alreadyConfigDay; |
||||
} |
||||
|
||||
public void setAlreadyConfigDay(String alreadyConfigDay) { |
||||
this.alreadyConfigDay = alreadyConfigDay; |
||||
} |
||||
|
||||
public String getDetailForApm() { |
||||
return detailForApm; |
||||
} |
||||
|
||||
public void setDetailForApm(String detailForApm) { |
||||
this.detailForApm = detailForApm; |
||||
} |
||||
|
||||
public String getSave() { |
||||
return save; |
||||
} |
||||
|
||||
public void setSave(String save) { |
||||
this.save = save; |
||||
} |
||||
|
||||
public String getPage() { |
||||
return page; |
||||
} |
||||
|
||||
public void setPage(String page) { |
||||
this.page = page; |
||||
} |
||||
|
||||
public String getCancel() { |
||||
return cancel; |
||||
} |
||||
|
||||
public void setCancel(String cancel) { |
||||
this.cancel = cancel; |
||||
} |
||||
|
||||
public String getGetSystemDatetime() { |
||||
return getSystemDatetime; |
||||
} |
||||
|
||||
public void setGetSystemDatetime(String getSystemDatetime) { |
||||
this.getSystemDatetime = getSystemDatetime; |
||||
} |
||||
|
||||
public String getSaveCupImg() { |
||||
return saveCupImg; |
||||
} |
||||
|
||||
public void setSaveCupImg(String saveCupImg) { |
||||
this.saveCupImg = saveCupImg; |
||||
} |
||||
} |
||||
@ -0,0 +1,115 @@ |
||||
package org.springblade.common.config; |
||||
|
||||
import org.springframework.boot.context.properties.ConfigurationProperties; |
||||
import org.springframework.stereotype.Component; |
||||
|
||||
|
||||
@ConfigurationProperties( |
||||
prefix = "sm2.publickey" |
||||
) |
||||
@Component |
||||
public class Sm2PublickeyProperties { |
||||
private String listHospital; |
||||
private String detailPublish; |
||||
private String userBlacklist; |
||||
private String alreadyConfigDay; |
||||
private String detailForApm; |
||||
private String save; |
||||
private String page; |
||||
private String cancel; |
||||
private String getSystemDatetime; |
||||
private String saveCupImg; |
||||
|
||||
public Sm2PublickeyProperties() { |
||||
this.listHospital = ""; |
||||
this.detailPublish = ""; |
||||
this.userBlacklist = ""; |
||||
this.alreadyConfigDay = ""; |
||||
this.detailForApm = ""; |
||||
this.save = ""; |
||||
this.page = ""; |
||||
this.cancel = ""; |
||||
this.getSystemDatetime = ""; |
||||
this.saveCupImg = ""; |
||||
} |
||||
|
||||
public String getListHospital() { |
||||
return listHospital; |
||||
} |
||||
|
||||
public void setListHospital(String listHospital) { |
||||
this.listHospital = listHospital; |
||||
} |
||||
|
||||
public String getDetailPublish() { |
||||
return detailPublish; |
||||
} |
||||
|
||||
public void setDetailPublish(String detailPublish) { |
||||
this.detailPublish = detailPublish; |
||||
} |
||||
|
||||
public String getUserBlacklist() { |
||||
return userBlacklist; |
||||
} |
||||
|
||||
public void setUserBlacklist(String userBlacklist) { |
||||
this.userBlacklist = userBlacklist; |
||||
} |
||||
|
||||
public String getAlreadyConfigDay() { |
||||
return alreadyConfigDay; |
||||
} |
||||
|
||||
public void setAlreadyConfigDay(String alreadyConfigDay) { |
||||
this.alreadyConfigDay = alreadyConfigDay; |
||||
} |
||||
|
||||
public String getDetailForApm() { |
||||
return detailForApm; |
||||
} |
||||
|
||||
public void setDetailForApm(String detailForApm) { |
||||
this.detailForApm = detailForApm; |
||||
} |
||||
|
||||
public String getSave() { |
||||
return save; |
||||
} |
||||
|
||||
public void setSave(String save) { |
||||
this.save = save; |
||||
} |
||||
|
||||
public String getPage() { |
||||
return page; |
||||
} |
||||
|
||||
public void setPage(String page) { |
||||
this.page = page; |
||||
} |
||||
|
||||
public String getCancel() { |
||||
return cancel; |
||||
} |
||||
|
||||
public void setCancel(String cancel) { |
||||
this.cancel = cancel; |
||||
} |
||||
|
||||
public String getGetSystemDatetime() { |
||||
return getSystemDatetime; |
||||
} |
||||
|
||||
public void setGetSystemDatetime(String getSystemDatetime) { |
||||
this.getSystemDatetime = getSystemDatetime; |
||||
} |
||||
|
||||
public String getSaveCupImg() { |
||||
return saveCupImg; |
||||
} |
||||
|
||||
public void setSaveCupImg(String saveCupImg) { |
||||
this.saveCupImg = saveCupImg; |
||||
} |
||||
} |
||||
@ -0,0 +1,11 @@ |
||||
package org.springblade.common.constant; |
||||
|
||||
public class KeyConstant { |
||||
|
||||
public static final String PRIVATE_KEY = "pveky"; // 私钥
|
||||
public static final String PUBLIC_KEY = "pbcky"; // 公钥
|
||||
|
||||
public static final String GM_NAME_CURVE = "sm2p256v1"; |
||||
public static final String ALGORITHM = "SHA1PRNG"; |
||||
|
||||
} |
||||
@ -0,0 +1,19 @@ |
||||
package org.springblade.common.constant; |
||||
|
||||
import org.bouncycastle.crypto.engines.SM2Engine; |
||||
import org.springblade.common.enums.ModeTypeEnum; |
||||
|
||||
public class ModeTypeConstant { |
||||
public static final String BASE = "base"; |
||||
public static final String BC = "bc"; |
||||
|
||||
@Deprecated |
||||
public static final SM2Engine.Mode BASE_MODE = SM2Engine.Mode.C1C3C2; |
||||
@Deprecated |
||||
public static final SM2Engine.Mode BC_MODE = SM2Engine.Mode.C1C2C3; |
||||
|
||||
public static ModeTypeEnum getMode(String modeType){ |
||||
if (ModeTypeEnum.BASE_MODE.getType().equals(modeType)) return ModeTypeEnum.BASE_MODE; |
||||
return ModeTypeEnum.BC_MODE; |
||||
} |
||||
} |
||||
@ -0,0 +1,25 @@ |
||||
package org.springblade.common.enums; |
||||
|
||||
import org.bouncycastle.crypto.engines.SM2Engine; |
||||
import org.springblade.common.constant.ModeTypeConstant; |
||||
|
||||
public enum ModeTypeEnum { |
||||
BASE_MODE(ModeTypeConstant.BASE, SM2Engine.Mode.C1C3C2), |
||||
BC_MODE(ModeTypeConstant.BC, SM2Engine.Mode.C1C2C3); |
||||
|
||||
private String type; |
||||
private SM2Engine.Mode mode; |
||||
|
||||
ModeTypeEnum(String type, SM2Engine.Mode mode) { |
||||
this.type = type; |
||||
this.mode = mode; |
||||
} |
||||
|
||||
public String getType(){ |
||||
return type; |
||||
} |
||||
|
||||
public SM2Engine.Mode getMode(){ |
||||
return mode; |
||||
} |
||||
} |
||||
@ -0,0 +1,57 @@ |
||||
package org.springblade.common.utils; |
||||
|
||||
import org.bouncycastle.crypto.InvalidCipherTextException; |
||||
import org.springblade.common.config.SecretCommon; |
||||
import org.springblade.common.constant.ModeTypeConstant; |
||||
|
||||
import java.io.IOException; |
||||
import java.io.UnsupportedEncodingException; |
||||
import java.security.NoSuchAlgorithmException; |
||||
import java.util.Map; |
||||
|
||||
public class Sm2Utils { |
||||
/** |
||||
* get key pair |
||||
*/ |
||||
public static Map<String, String> createKeyPair() throws NoSuchAlgorithmException { |
||||
return SecretCommon.createKeyPair(); |
||||
} |
||||
|
||||
/** |
||||
* encrypt |
||||
* @param plainText 需加密的明文字符串 |
||||
* @param publicKey 公钥 |
||||
*/ |
||||
public static String encrypt(String plainText, String publicKey) throws IOException, InvalidCipherTextException { |
||||
return encrypt(plainText, publicKey, ModeTypeConstant.BASE); |
||||
} |
||||
|
||||
/** |
||||
* encrypt |
||||
* @param plainText 需加密的明文字符串 |
||||
* @param publicKey 公钥 |
||||
* @param modeType base:标准；bc：BC模式 |
||||
*/ |
||||
public static String encrypt(String plainText, String publicKey, String modeType) throws IOException, InvalidCipherTextException { |
||||
return SecretCommon.encrypt(plainText, publicKey, ModeTypeConstant.getMode(modeType)); |
||||
} |
||||
|
||||
/** |
||||
* decrypt |
||||
* @param cipherText 需加密的字符串 |
||||
* @param privateKey 私钥 |
||||
*/ |
||||
public static String decrypt(String cipherText, String privateKey) throws InvalidCipherTextException, UnsupportedEncodingException { |
||||
return decrypt(cipherText, privateKey, ModeTypeConstant.BASE); |
||||
} |
||||
|
||||
/** |
||||
* decrypt |
||||
* @param cipherText 需加密的字符串 |
||||
* @param privateKey 私钥 |
||||
* @param modeType base:标准；bc：BC模式 |
||||
*/ |
||||
public static String decrypt(String cipherText, String privateKey, String modeType) throws InvalidCipherTextException, UnsupportedEncodingException { |
||||
return SecretCommon.decrypt(cipherText, privateKey, ModeTypeConstant.getMode(modeType)); |
||||
} |
||||
} |
||||
Loading…
Reference in new issue