java密鑰交換算法DH定義與應用實例分析

更新時間：2019年09月05日 10:33:57 作者：cakincqm

這篇文章主要介紹了java密鑰交換算法DH定義與應用,結合實例形式分析了Java密鑰交換算法DH的原理、定義、使用方法及相關操作注意事項,需要的朋友可以參考下

本文實例講述了java密鑰交換算法DH定義與應用。分享給大家供大家參考，具體如下：

一對稱加密缺點

密鑰傳遞過程復雜，這是對稱加密帶來的困擾。

二 DH密鑰交換算法特點

構建本地密鑰
雙方密鑰一致

三 DH相關參數(shù)

四 DH算法實現(xiàn)過程

1、初始化發(fā)送方的密鑰（KeyPairGenerator、KeyPair、PublicKey）
2、初始化接受方的密鑰（KeyFactory、X509EncodedKeySpec、DHPublicKey、DHParameterSpec、KeyPairGenerator、PrivateKey）
3、密鑰構建（KeyAgeement、SecretKey、KeyFactory、X509EncodeKeySpec、PublicKey）
4、加密和解密（Cipher）

五 DH代碼實現(xiàn)過程

package com.imooc.security.dh;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.spec.X509EncodedKeySpec;
import javax.crypto.Cipher;
import javax.crypto.KeyAgreement;
import javax.crypto.SecretKey;
import javax.crypto.interfaces.DHPublicKey;
import javax.crypto.spec.DHParameterSpec;
import org.apache.commons.codec.binary.Base64;
//import com.sun.org.apache.xalan.internal.utils.Objects;
public class ImoocDH {
    private static String src = "cakin24 security dh";
    public static void main(String[] args) {
        jdkDH();
    }
    public static void jdkDH() {
        try {
            //1.初始化發(fā)送方密鑰
            KeyPairGenerator senderKeyPairGenerator = KeyPairGenerator.getInstance("DH");
            senderKeyPairGenerator.initialize(512);
            KeyPair senderKeyPair = senderKeyPairGenerator.generateKeyPair();
            byte[] senderPublicKeyEnc = senderKeyPair.getPublic().getEncoded();//發(fā)送方公鑰，發(fā)送給接收方（網(wǎng)絡、文件。。。）
            //2.初始化接收方密鑰
            KeyFactory receiverKeyFactory = KeyFactory.getInstance("DH");
            X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(senderPublicKeyEnc);
            PublicKey receiverPublicKey = receiverKeyFactory.generatePublic(x509EncodedKeySpec);
            DHParameterSpec dhParameterSpec = ((DHPublicKey)receiverPublicKey).getParams();
            KeyPairGenerator receiverKeyPairGenerator = KeyPairGenerator.getInstance("DH");
            receiverKeyPairGenerator.initialize(dhParameterSpec);
            KeyPair receiverKeypair = receiverKeyPairGenerator.generateKeyPair();
            PrivateKey receiverPrivateKey = receiverKeypair.getPrivate();
            byte[] receiverPublicKeyEnc = receiverKeypair.getPublic().getEncoded();
            //3.密鑰構建
            KeyAgreement receiverKeyAgreement = KeyAgreement.getInstance("DH");
            receiverKeyAgreement.init(receiverPrivateKey);
            receiverKeyAgreement.doPhase(receiverPublicKey, true);
            SecretKey receiverDesKey = receiverKeyAgreement.generateSecret("DES");
            KeyFactory senderKeyFactory = KeyFactory.getInstance("DH");
            x509EncodedKeySpec = new X509EncodedKeySpec(receiverPublicKeyEnc);
            PublicKey senderPublicKey = senderKeyFactory.generatePublic(x509EncodedKeySpec);
            KeyAgreement senderKeyAgreement = KeyAgreement.getInstance("DH");
            senderKeyAgreement.init(senderKeyPair.getPrivate());
            senderKeyAgreement.doPhase(senderPublicKey, true);
            SecretKey senderDesKey = senderKeyAgreement.generateSecret("DES");
            //if (Objects.equals(receiverDesKey, senderDesKey)) {
            if(receiverDesKey.equals(senderDesKey)){
                System.out.println("雙方密鑰相同");
            }
            //4.加密
            Cipher cipher = Cipher.getInstance("DES");
            cipher.init(Cipher.ENCRYPT_MODE, senderDesKey);
            byte[] result = cipher.doFinal(src.getBytes());
            System.out.println("jdk dh encrypt : " + Base64.encodeBase64String(result));
            //5.解密
            cipher.init(Cipher.DECRYPT_MODE, receiverDesKey);
            result = cipher.doFinal(result);
            System.out.println("jdk dh decrypt : " + new String(result));
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

六實現(xiàn)效果