RSA算法简介
RSA公开密钥密码体制是一种使用不同的加密密钥与解密密钥，“由已知加密密钥推导出解密密钥在计算上是不可行的”密码体制。
在公开密钥密码体制中，加密密钥（即公开密钥）PK是公开信息，而解密密钥（即秘密密钥）SK是需要保密的。加密算法E和解密算法D也都是公开的。虽然解密密钥SK是由公开密钥PK决定的，但却不能根据PK计算出SK。
RSA允许你选择公钥的大小。512位的密钥被视为不安全的；768位的密钥不用担心受到除了国家安全管理（NSA）外的其他事物的危害；1024位的密钥几乎是安全的。
关于RSA概念性的内容不做过多介绍，大家可以自行百度。
Maven 依赖
工具类对于加密后使用Base64进行编码，所以需要依赖Apache Commons Codec。
<dependency>
<groupId>commons-codec</groupId>
<artifactId>commons-codec</artifactId>
<version>1.9</version>
</dependency>
<dependency>
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
<version>1.2.17</version>
</dependency>工具类实现
RSAUtil提供了针对文本内容、字节数组内容的加解密实现，RSAUtil工具类可以直接复制使用，代码如下：
package com.arhorchin.securitit.enordecryption.rsa;
import java.io.ByteArrayOutputStream;
import java.security.Key;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.HashMap;
import java.util.Map;
import javax.crypto.Cipher;
import org.apache.commons.codec.binary.Base64;
import org.apache.log4j.Logger;
/**
* @author Securitit.
* @note RSA加密算法实现.
*/
public class RSAUtil {
/**
* logger.
*/
private static Logger logger = Logger.getLogger(RSAUtil.class);
/**
* 数据编码.
*/
private static final String CHARSET_UTF8 = "UTF-8";
/**
* 加密算法RSA.
*/
public static final String RSA_NAME = "RSA";
/**
* 获取公钥的key.
*/
public static final String PUBLIC_KEY = "RSAPublicKey";
/**
* 获取私钥的key.
*/
public static final String PRIVATE_KEY = "RSAPrivateKey";
/**
* RSA最大加密明文大小.
*/
public static final int MAX_ENCRYPT_BLOCK = 117;
/**
* RSA最大解密密文大小.
*/
public static final int MAX_DECRYPT_BLOCK = 128;
/**
* RSA密钥长度必须是64的倍数，在512~65536之间。默认是1024.
*/
public static final int KEY_SIZE = 1024;
/**
* 生成RSA算法的密钥对.
* @return 返回存储密钥对的Map.
* @throws Exception 可能的异常.
*/
public static Map<String, String> generateDesKey() throws Exception {
Map<String, String> keysMap = null;
KeyPair keyPair = null;
RSAPublicKey publicKey = null;
RSAPrivateKey privateKey = null;
KeyPairGenerator keyPairGenerator = null;
// Key存储Map.
keysMap = new HashMap<String, String>(2);
// 生成RSA秘钥对.
keyPairGenerator = KeyPairGenerator.getInstance(RSA_NAME);
keyPairGenerator.initialize(KEY_SIZE);
keyPair = keyPairGenerator.generateKeyPair();
publicKey = (RSAPublicKey) keyPair.getPublic();
privateKey = (RSAPrivateKey) keyPair.getPrivate();
// 放置到存储Map.
keysMap.put(PUBLIC_KEY, Base64.encodeBase64String(publicKey.getEncoded()));
keysMap.put(PRIVATE_KEY, Base64.encodeBase64String(privateKey.getEncoded()));
return keysMap;
}
/**
* RAS基于Private密钥加密.
* @param plainText 原文内容.
* @param privateKey 私钥.
* @return 加密后内容.
* @throws Exception 可能的异常.
*/
public static String encodeTextByPrivateKey(String plainText, String privateKey) throws Exception {
byte[] privateKeyBytes = null;
byte[] cipherBytes = null;
try {
privateKeyBytes = Base64.decodeBase64(privateKey);
cipherBytes = encodeByRsa(plainText.getBytes(CHARSET_UTF8), privateKeyBytes, true);
return Base64.encodeBase64String(cipherBytes);
} catch (Exception ex) {
logger.error("RSAUtil.encodeTextByPrivateKey.", ex);
return "";
}
}
/**
* RAS基于Private密钥解密.
* @param cipherText 密文内容.
* @param privateKey 私钥.
* @return 解密后内容.
* @throws Exception 可能的异常.
*/
public static String decodeTextByPrivateKey(String cipherText, String privateKey) throws Exception {
byte[] privateKeyBytes = null;
byte[] plainBytes = null;
try {
privateKeyBytes = Base64.decodeBase64(privateKey);
plainBytes = decodeByRsa(Base64.decodeBase64(cipherText), privateKeyBytes, true);
return new String(plainBytes, CHARSET_UTF8);
} catch (Exception ex) {
logger.error("RSAUtil.decodeTextByPrivateKey.", ex);
return "";
}
}
/**
* RAS基于Public密钥加密.
* @param plainText 原文内容.
* @param PublicKey 公钥.
* @return 加密后内容.
* @throws Exception 可能的异常.
*/
public static String encodeTextByPublicKey(String plainText, String publicKey) throws Exception {
byte[] publicKeyBytes = null;
byte[] cipherBytes = null;
try {
publicKeyBytes = Base64.decodeBase64(publicKey);
cipherBytes = encodeByRsa(plainText.getBytes(CHARSET_UTF8), publicKeyBytes, false);
return Base64.encodeBase64String(cipherBytes);
} catch (Exception ex) {
logger.error("RSAUtil.encodeTextByPublicKey.", ex);
return "";
}
}
/**
* RAS基于Public密钥解密.
* @param cipherText 密文内容.
* @param publicKey 公钥.
* @return 解密后内容.
* @throws Exception 可能的异常.
*/
public static String decodeTextByPublicKey(String cipherText, String publicKey) throws Exception {
byte[] publicKeyBytes = null;
byte[] plainBytes = null;
try {
publicKeyBytes = Base64.decodeBase64(publicKey);
plainBytes = decodeByRsa(Base64.decodeBase64(cipherText), publicKeyBytes, false);
return new String(plainBytes, CHARSET_UTF8);
} catch (Exception ex) {
logger.error("RSAUtil.decodeTextByPublicKey.", ex);
return "";
}
}
/**
* RAS基于Private密钥加密.
* @param plainBytes 原文内容.
* @param privateKey 私钥.
* @return 加密后内容.
* @throws Exception 可能的异常.
*/
public static byte[] encodeBytesByPrivateKey(byte[] plainBytes, String privateKey) throws Exception {
byte[] privateKeyBytes = null;
byte[] cipherBytes = null;
try {
privateKeyBytes = Base64.decodeBase64(privateKey);
cipherBytes = encodeByRsa(plainBytes, privateKeyBytes, true);
return cipherBytes;
} catch (Exception ex) {
logger.error("RSAUtil.encodeTextByPrivateKey.", ex);
return new byte[0];
}
}
/**
* RAS基于Private密钥解密.
* @param cipherBytes 密文内容.
* @param privateKey 私钥.
* @return 解密后内容.
* @throws Exception 可能的异常.
*/
public static byte[] decodeBytesByPrivateKey(byte[] cipherBytes, String privateKey) throws Exception {
byte[] privateKeyBytes = null;
byte[] plainBytes = null;
try {
privateKeyBytes = Base64.decodeBase64(privateKey);
plainBytes = decodeByRsa(cipherBytes, privateKeyBytes, true);
return plainBytes;
} catch (Exception ex) {
logger.error("RSAUtil.decodeTextByPrivateKey.", ex);
return new byte[0];
}
}
/**
* RAS基于Public密钥加密.
* @param plainBytes 原文内容.
* @param PublicKey 公钥.
* @return 加密后内容.
* @throws Exception 可能的异常.
*/
public static byte[] encodeBytesByPublicKey(byte[] plainBytes, String publicKey) throws Exception {
byte[] publicKeyBytes = null;
byte[] cipherBytes = null;
try {
publicKeyBytes = Base64.decodeBase64(publicKey);
cipherBytes = encodeByRsa(plainBytes, publicKeyBytes, false);
return cipherBytes;
} catch (Exception ex) {
logger.error("RSAUtil.encodeTextByPublicKey.", ex);
return new byte[0];
}
}
/**
* RAS基于Public密钥解密.
* @param cipherBytes 密文内容.
* @param publicKey 公钥.
* @return 解密后内容.
* @throws Exception 可能的异常.
*/
public static byte[] decodeBytesByPublicKey(byte[] cipherBytes, String publicKey) throws Exception {
byte[] publicKeyBytes = null;
byte[] plainBytes = null;
try {
publicKeyBytes = Base64.decodeBase64(publicKey);
plainBytes = decodeByRsa(cipherBytes, publicKeyBytes, false);
return plainBytes;
} catch (Exception ex) {
logger.error("RSAUtil.decodeTextByPublicKey.", ex);
return new byte[0];
}
}
/**
* 利用RSA进行加密，支持公钥和私钥.
* @param plainBytes 待加密原文内容.
* @param rsaKeyBytes RSA密钥.
* @param isPrivateKey 是否私钥.
* @return 加密结果.
* @throws Exception 可能的异常.
*/
public static byte[] encodeByRsa(byte[] plainBytes, byte[] rsaKeyBytes, boolean isPrivateKey) throws Exception {
KeyFactory keyFactory = null;
Key rsaKeyObj = null;
Cipher cipher = null;
PKCS8EncodedKeySpec pkcs8KeySpec = null;
X509EncodedKeySpec x509KeySpec = null;
int plainLength = plainBytes.length;
byte[] cipherCacheBytes = null;
int cipherPartTotal = 0;
ByteArrayOutputStream baos = null;
baos = new ByteArrayOutputStream();
// 生成密钥算法对象.
keyFactory = KeyFactory.getInstance(RSA_NAME);
// 处理加密使用的Key.
if (isPrivateKey) {
pkcs8KeySpec = new PKCS8EncodedKeySpec(rsaKeyBytes);
rsaKeyObj = keyFactory.generatePrivate(pkcs8KeySpec);
} else {
x509KeySpec = new X509EncodedKeySpec(rsaKeyBytes);
rsaKeyObj = keyFactory.generatePublic(x509KeySpec);
}
cipher = Cipher.getInstance(keyFactory.getAlgorithm());
// 初始化算法密钥.
cipher.init(Cipher.ENCRYPT_MODE, rsaKeyObj);
// 计算分组，对报文进行分段加密.
plainLength = plainBytes.length;
cipherPartTotal = (int) Math.ceil((float) plainLength / MAX_ENCRYPT_BLOCK);
for (int partIndex = 0; partIndex < cipherPartTotal; partIndex++) {
if (partIndex == cipherPartTotal - 1) {
cipherCacheBytes = cipher.doFinal(plainBytes, MAX_ENCRYPT_BLOCK * partIndex, plainLength);
} else {
cipherCacheBytes = cipher.doFinal(plainBytes, MAX_ENCRYPT_BLOCK * partIndex,
MAX_ENCRYPT_BLOCK * (partIndex + 1));
}
baos.write(cipherCacheBytes, 0, cipherCacheBytes.length);
}
return baos.toByteArray();
}
/**
* 利用RSA进行解密，支持公钥和私钥.
* @param cipherBytes 待解密原文内容.
* @param rsaKeyBytes RSA密钥.
* @param isPrivateKey 是否私钥.
* @return 加密结果.
* @throws Exception 可能的异常.
*/
public static byte[] decodeByRsa(byte[] cipherBytes, byte[] rsaKeyBytes, boolean isPrivateKey) throws Exception {
KeyFactory keyFactory = null;
Key rsaKeyObj = null;
Cipher cipher = null;
PKCS8EncodedKeySpec pkcs8KeySpec = null;
X509EncodedKeySpec x509KeySpec = null;
int plainLength = cipherBytes.length;
byte[] cipherCacheBytes = null;
int cipherPartTotal = 0;
ByteArrayOutputStream baos = null;
baos = new ByteArrayOutputStream();
// 生成密钥算法对象.
keyFactory = KeyFactory.getInstance(RSA_NAME);
// 处理加密使用的Key.
if (isPrivateKey) {
pkcs8KeySpec = new PKCS8EncodedKeySpec(rsaKeyBytes);
rsaKeyObj = keyFactory.generatePrivate(pkcs8KeySpec);
} else {
x509KeySpec = new X509EncodedKeySpec(rsaKeyBytes);
rsaKeyObj = keyFactory.generatePublic(x509KeySpec);
}
cipher = Cipher.getInstance(keyFactory.getAlgorithm());
// 初始化算法密钥.
cipher.init(Cipher.DECRYPT_MODE, rsaKeyObj);
// 计算分组，对报文进行分段解密.
plainLength = cipherBytes.length;
cipherPartTotal = (int) ((float) plainLength / MAX_ENCRYPT_BLOCK);
for (int partIndex = 0; partIndex < cipherPartTotal; partIndex++) {
if (partIndex == cipherPartTotal - 1) {
cipherCacheBytes = cipher.doFinal(cipherBytes, MAX_ENCRYPT_BLOCK * partIndex, plainLength);
} else {
cipherCacheBytes = cipher.doFinal(cipherBytes, MAX_ENCRYPT_BLOCK * partIndex,
MAX_ENCRYPT_BLOCK * (partIndex + 1));
}
baos.write(cipherCacheBytes, 0, cipherCacheBytes.length);
}
return baos.toByteArray();
}
}工具类测试
package com.arhorchin.securitit.enordecryption.rsa;
import java.util.Map;
import org.apache.commons.codec.binary.Base64;
/**
* @author Securitit.
* @note RSAUtil测试类.
*/
public class RSAUtilTester {
public static void main(String[] args) throws Exception {
Map<String, String> keyMap = null;
String publicKey = null;
String privateKey = null;
String plaintext = null;
String ciphertext = null;
byte[] cipherBytes = null;
String dePlaintext = null;
byte[] dePlainBytes = null;
System.out.println("----------------------- 获取RSA密钥对 -------------------------");
keyMap = RSAUtil.generateDesKey();
publicKey = keyMap.get(RSAUtil.PUBLIC_KEY);
privateKey = keyMap.get(RSAUtil.PRIVATE_KEY);
System.out.println("公钥：" + publicKey);
System.out.println("私钥：" + privateKey);
System.out.println();
System.out.println("----------------------- 字符串 公钥加密、私钥解密 -------------------------");
plaintext = "这是一段数据原文-公钥加密的原文.";
// 公钥进行加密示例.
ciphertext = RSAUtil.encodeTextByPublicKey(plaintext, publicKey);
System.out.println("公钥加密密文：" + ciphertext);
// 私钥进行解密示例.
dePlaintext = RSAUtil.decodeTextByPrivateKey(ciphertext, privateKey);
System.out.println("私钥解密明文：" + dePlaintext);
System.out.println();
System.out.println("----------------------- 字符串 私钥加密、公钥解密 -------------------------");
plaintext = "这是一段数据原文-私钥加密的原文.";
// 私钥进行加密示例.
ciphertext = RSAUtil.encodeTextByPrivateKey(plaintext, privateKey);
System.out.println("私钥加密密文：" + ciphertext);
// 公钥进行解密示例.
dePlaintext = RSAUtil.decodeTextByPublicKey(ciphertext, publicKey);
System.out.println("公钥解密明文：" + dePlaintext);
System.out.println("----------------------- 字节数组 公钥加密、私钥解密 -------------------------");
plaintext = "这是一段数据原文-公钥加密的原文.";
// 公钥进行加密示例.
cipherBytes = RSAUtil.encodeBytesByPublicKey(plaintext.getBytes("UTF-8"), publicKey);
ciphertext = Base64.encodeBase64String(cipherBytes);
System.out.println("公钥加密密文：" + ciphertext);
// 私钥进行解密示例.
dePlainBytes = RSAUtil.decodeBytesByPrivateKey(Base64.decodeBase64(ciphertext), privateKey);
dePlaintext = new String(dePlainBytes, "UTF-8");
System.out.println("私钥解密明文：" + dePlaintext);
System.out.println();
System.out.println("----------------------- 字节数组 私钥加密、公钥解密 -------------------------");
plaintext = "这是一段数据原文-私钥加密的原文.";
// 私钥进行加密示例.
cipherBytes = RSAUtil.encodeBytesByPrivateKey(plaintext.getBytes("UTF-8"), privateKey);
ciphertext = Base64.encodeBase64String(cipherBytes);
System.out.println("私钥加密密文：" + ciphertext);
// 公钥进行解密示例.
dePlainBytes = RSAUtil.decodeBytesByPublicKey(Base64.decodeBase64(ciphertext), publicKey);
dePlaintext = new String(dePlainBytes, "UTF-8");
System.out.println("公钥解密明文：" + dePlaintext);
}
}控制台输出
查看Console中的控制台内容，明文和解密后明文对比，可以确认RSAUtil可以正常工作，控制台如下图：
----------------------- 获取RSA密钥对 -------------------------
公钥：MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQAJFIhf5nNviRgssUabOvM8iqcrXCYmPBX9s37y9z41THaF3B+7Au1+jhGl482LFBRivVl6yeBpfHGT/uNyO9ld9oBo5qbIx7hEApkxHtfd6P4i2zWxlDyqcSxy5QyrZclH7wci8UFzrbQBKD/wKFu80Tft3Neu03HnbD70zOjQIDAQAB
私钥：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
----------------------- 字符串 公钥加密、私钥解密 -------------------------
公钥加密密文：f0T4XxT6L2/t10/hhFD1NWriDgdAQNe9wLp34+Dkyn+w568GUDb8WZPbelmLoARzfz0DXI5fRFyRmbb9Zq5zqrxW1i/Ea0bs7cNnDQ23okPUNyIRdguMneAlrfi+WQgFJWXu9GUSMmFWMVgCAdtAX2I4YPXSmKuS3JX7fIslDxw=
私钥解密明文：这是一段数据原文-公钥加密的原文.
----------------------- 字符串 私钥加密、公钥解密 -------------------------
私钥加密密文：BYI5K56BuSuXp/0Thxc94Tck4W92+bDkeJEIP2qxjyQFst2RB+J6YXWp6LQBCMqEpwwEWgMDBv+U42V9nVMDCTDmugx2oqzT2xys7mMOIhQQsrccISCDzF/lk+CfrxY0hdEc4PJGrqn7vvCoKslBuJEgTL0uUxQirlJ6EVXc76g=
公钥解密明文：这是一段数据原文-私钥加密的原文.
----------------------- 字节数组 公钥加密、私钥解密 -------------------------
公钥加密密文：hvITbYLCnOhrCWDX/DgJNbuJTQWXXFzdPK6bVgep1MH99UyLO7nGKhqNViuVxuTqdVn1nh28Oz1ueA/PMNtiWCXHRUpVYgU957jfvoL17Eugyn9If81EJMpelBP9tdAb7lZJJiECkoUZpQvGImTNIYtONZA9dXGrakT15xO5m+I=
私钥解密明文：这是一段数据原文-公钥加密的原文.
----------------------- 字节数组 私钥加密、公钥解密 -------------------------
私钥加密密文：BYI5K56BuSuXp/0Thxc94Tck4W92+bDkeJEIP2qxjyQFst2RB+J6YXWp6LQBCMqEpwwEWgMDBv+U42V9nVMDCTDmugx2oqzT2xys7mMOIhQQsrccISCDzF/lk+CfrxY0hdEc4PJGrqn7vvCoKslBuJEgTL0uUxQirlJ6EVXc76g=
公钥解密明文：这是一段数据原文-私钥加密的原文.总结
算法实现都很类似，本文只是对算法实现做了整理，在Maven依赖引入的情况下，RSAUtil已经做了简单测试，可以直接使用。
若文中存在错误和不足，欢迎指正！
本文章为转载内容，我们尊重原作者对文章享有的著作权。如有内容错误或侵权问题，欢迎原作者联系我们进行内容更正或删除文章。
