<em>/**
 * 對稱加密-3DES算法，取代舊的DES
 */</em>
SecretKey desKey = KeyGenerator.getInstance("DESede").generateKey();

<em>/**
* 生成AES算法的密鑰
*/</em>
SecretKey aesKey = KeyGenerator.getInstance("AES").generateKey();

SecretKey desKey = KeyGenerator.getInstance("DESede").generateKey();
<em>// 二進制密鑰</em>
byte[] bkey = desKey.getEncoded();
<em>// 轉成十六進制</em>
String keyStr = Hex.byteCoverToString(bkey);

<em>// bkey是byte數(shù)組</em>
DESedeKeySpec keySpec = new DESedeKeySpec(bkey);
<em>// 讀取AES密鑰</em>
SecretKey srtKey = SecretKeyFactory.getInstance("AES").generateSecret(keySpec);

<em>/**
 * 可以傳RSA或DSA算法
 */</em>
KeyPair keyPair = KeyPairGenerator.getInstance("RSA").generateKeyPair();
<em>// 私鑰</em>
PrivateKey prvKey = keyPair.getPrivate();
<em>// 公鑰</em>
PublicKey pubKey = keyPair.getPublic();

<em>// 私鑰串</em>
String prvKeyStr = Base64.getEncoder().encodeToString(prvKey.getEncoded());
<em>// 公鑰串</em>
String pubKeyStr = Base64.getEncoder().encodeToString(pubKey.getEncoded());

<em>// 從二進制中讀取私鑰</em>
byte[] bPrvKey = Base64.getDecoder().decode(prvKeyStr);
PKCS8EncodedKeySpec rsaKeySpec = new PKCS8EncodedKeySpec(bPrvKey);
PrivateKey prvKey = KeyFactory.getInstance("RSA").generatePrivate(rsaKeySpec);

<em>// 從二進制中讀取公鑰</em>
byte[] bPubKey = Base64.getDecoder().decode(pubKeyStr);
X509EncodedKeySpec rsaKeySpec1 = new X509EncodedKeySpec(bPubKey);
PublicKey pubKey = KeyFactory.getInstance("RSA").generatePublic(rsaKeySpec1);

<em>// keyFilePath是證書文件</em>
try (InputStream fin = new FileInputStream(keyFilePath)) {
    CertificateFactory f = CertificateFactory.getInstance("X.509");
    X509Certificate certificate = (X509Certificate) f.generateCertificate(fin);
    PublicKey pubKey = certificate.getPublicKey();
} catch (IOException | CertificateException e) {
    e.printStackTrace();
}

try (InputStream is = new FileInputStream(keyFilePath)) {
    <em>// pkcs12或jks</em>
    KeyStore store = KeyStore.getInstance("pkcs12");
    <em>// 密碼</em>
    store.load(is, "密碼".toCharArray());
    <em>// 獲取所有密鑰別名列表</em>
    Enumeration<String> e = store.aliases();
    <em>// 如果有，讀取第一個密鑰</em>
    if (e.hasMoreElements()) {
        String alias = e.nextElement();
        <em>// 私鑰</em>
        PrivateKey prvKey = (PrivateKey) store.getKey(alias, password.toCharArray());
        <em>// 公鑰</em>
        PublicKey pubKey = store.getCertificate(alias).getPublicKey();
        <em>// 創(chuàng)建密鑰對</em>
        KeyPair keyPare = new KeyPair(pubKey, prvKey);
    }

} catch (IOException | KeyStoreException | CertificateException | NoSuchAlgorithmException | UnrecoverableKeyException e) {
    e.printStackTrace();
}

<em>// 密文</em>
String ciphertext = null;

{
    String plaintext = "加密內容";
    <em>// 密鑰算法，RSA/DAS/AESDESed</em>
    Cipher cipher = Cipher.getInstance("RSA");
    <em>// 設置加密模式</em>
    cipher.init(Cipher.ENCRYPT_MODE, prvKey);
    <em>// 加密后的byte數(shù)組</em>
    byte[] cipherbyte = cipher.doFinal(plaintext.getBytes());
    <em>// 轉成base64</em>
    ciphertext = Base64.getEncoder().encodeToString(cipherbyte);
    logger.info(ciphertext);
}

{
    <em>// 密鑰算法，RSA/DAS/AESDESed</em>
    Cipher cipher = Cipher.getInstance("RSA");
    <em>// 設置解密模式</em>
    cipher.init(Cipher.DECRYPT_MODE, pubKey);
    <em>// base64解碼獲得密文byte數(shù)組</em>
    byte[] cipherbyte = Base64.getDecoder().decode(ciphertext);
    <em>// 解密后的byte數(shù)組</em>
    byte[] plainbyte = cipher.doFinal(cipherbyte);
    <em>// byte數(shù)組轉字符串</em>
    String plaintext = new String(plainbyte);
    logger.info(plaintext);
}

<em>// 可傳入MD5或SHA算法</em>
MessageDigest md = MessageDigest.getInstance("MD5");
<em>// 對str數(shù)據(jù)簽名</em>
byte[] bSign = md.digest(str.getBytes());
<em>// 轉成十六進制簽名串</em>
String signStr = Hex.byteCoverToString(bSign);

<em>/**
 * 簽名
 * @param key
 * @param algorithm
 * @param data
 * @return
 */</em>
public static byte[] sign(PrivateKey key, String algorithm, byte[] data) {

    try {

        Signature signature = Signature.getInstance(algorithm);
        signature.initSign(key);
        signature.update(data);
        return signature.sign();

    } catch (NoSuchAlgorithmException | SignatureException | InvalidKeyException e) {
        throw new CommonException(e);
    }
}

<em>/**
 * 驗簽
 * @param key
 * @param algorithm
 * @param sign
 * @param data
 * @return
 */</em>
public static boolean verify(PublicKey key, String algorithm, byte[] sign, byte[] data) {

    try {

        Signature signature = Signature.getInstance(algorithm);
        signature.initVerify(key);
        signature.update(data);
        return signature.verify(sign);

    } catch (NoSuchAlgorithmException | SignatureException | InvalidKeyException e) {
        throw new CommonException(e);
    }
}