com.dahuatech.hutool.crypto.BCUtil Maven / Gradle / Ivy

Go to download
package com.dahuatech.hutool.crypto;

import com.dahuatech.hutool.core.io.IORuntimeException;
import com.dahuatech.hutool.core.io.IoUtil;
import com.dahuatech.hutool.core.util.CharsetUtil;
import com.dahuatech.hutool.core.util.StrUtil;
import org.bouncycastle.jcajce.provider.asymmetric.ec.BCECPublicKey;
import org.bouncycastle.jce.ECNamedCurveTable;
import org.bouncycastle.jce.ECPointUtil;
import org.bouncycastle.jce.spec.ECNamedCurveParameterSpec;
import org.bouncycastle.jce.spec.ECNamedCurveSpec;
import org.bouncycastle.math.ec.ECCurve;
import org.bouncycastle.util.io.pem.PemObject;
import org.bouncycastle.util.io.pem.PemReader;

import java.io.IOException;
import java.io.InputStream;
import java.security.*;
import java.security.cert.Certificate;
import java.security.spec.*;

/**
 * Bouncy Castle相关工具类封装
 *
 * @author looly
 * @since 4.5.0
 */
public class BCUtil {
  /**
   * 编码压缩EC公钥（基于BouncyCastle）

   * 见：https://www.cnblogs.com/xinzhao/p/8963724.html
   *
   * @param publicKey {@link
   *     PublicKey}，必须为org.bouncycastle.jcajce.provider.asymmetric.ec.BCECPublicKey
   * @return 压缩得到的X
   * @since 4.4.4
   */
  public static byte[] encodeECPublicKey(PublicKey publicKey) {
    return ((BCECPublicKey) publicKey).getQ().getEncoded(true);
  }

  /**
   * 解码恢复EC压缩公钥,支持Base64和Hex编码,（基于BouncyCastle）

   * 见：https://www.cnblogs.com/xinzhao/p/8963724.html
   *
   * @param encode 压缩公钥
   * @param curveName EC曲线名
   * @return 公钥
   * @since 4.4.4
   */
  public static PublicKey decodeECPoint(String encode, String curveName) {
    return decodeECPoint(SecureUtil.decode(encode), curveName);
  }

  /**
   * 解码恢复EC压缩公钥,支持Base64和Hex编码,（基于BouncyCastle）

   * 见：https://www.cnblogs.com/xinzhao/p/8963724.html
   *
   * @param encodeByte 压缩公钥
   * @param curveName EC曲线名，例如{@link KeyUtil#SM2_DEFAULT_CURVE}
   * @return 公钥
   * @since 4.4.4
   */
  public static PublicKey decodeECPoint(byte[] encodeByte, String curveName) {
    final ECNamedCurveParameterSpec namedSpec = ECNamedCurveTable.getParameterSpec(curveName);
    final ECCurve curve = namedSpec.getCurve();
    final EllipticCurve ecCurve =
        new EllipticCurve( //
            new ECFieldFp(curve.getField().getCharacteristic()), //
            curve.getA().toBigInteger(), //
            curve.getB().toBigInteger());
    // 根据X恢复点Y
    final ECPoint point = ECPointUtil.decodePoint(ecCurve, encodeByte);

    // 根据曲线恢复公钥格式
    ECParameterSpec ecSpec =
        new ECNamedCurveSpec(curveName, curve, namedSpec.getG(), namedSpec.getN());

    final KeyFactory PubKeyGen = KeyUtil.getKeyFactory("EC");
    try {
      return PubKeyGen.generatePublic(new ECPublicKeySpec(point, ecSpec));
    } catch (GeneralSecurityException e) {
      throw new CryptoException(e);
    }
  }

  /**
   * 读取PEM格式的私钥
   *
   * @param pemStream pem流
   * @return {@link PrivateKey}
   * @since 4.5.2
   */
  public static PrivateKey readPrivateKey(InputStream pemStream) {
    return KeyUtil.generateRSAPrivateKey(readKeyBytes(pemStream));
  }

  /**
   * 读取PEM格式的公钥
   *
   * @param pemStream pem流
   * @return {@link PublicKey}
   * @since 4.5.2
   */
  public static PublicKey readPublicKey(InputStream pemStream) {
    final Certificate certificate = KeyUtil.readX509Certificate(pemStream);
    if (null == certificate) {
      return null;
    }
    return certificate.getPublicKey();
  }

  /**
   * 从pem文件中读取公钥或私钥

   * 根据类型返回{@link PublicKey} 或者 {@link PrivateKey}
   *
   * @param keyStream pem流
   * @return {@link Key}
   * @since 4.5.2
   */
  public static Key readKey(InputStream keyStream) {
    final PemObject object = readPemObject(keyStream);
    final String type = object.getType();
    if (StrUtil.isNotBlank(type) && type.endsWith("PRIVATE KEY")) {
      return KeyUtil.generateRSAPrivateKey(object.getContent());
    } else {
      return KeyUtil.readX509Certificate(keyStream).getPublicKey();
    }
  }

  /**
   * 从pem文件中读取公钥或私钥
   *
   * @param keyStream pem流
   * @return 密钥bytes
   * @since 4.5.2
   */
  public static byte[] readKeyBytes(InputStream keyStream) {
    PemObject pemObject = readPemObject(keyStream);
    if (null != pemObject) {
      return pemObject.getContent();
    }
    return null;
  }

  /**
   * 读取pem文件中的信息，包括类型、头信息和密钥内容
   *
   * @param keyStream pem流
   * @return {@link PemObject}
   * @since 4.5.2
   */
  public static PemObject readPemObject(InputStream keyStream) {
    PemReader pemReader = null;
    try {
      pemReader = new PemReader(IoUtil.getReader(keyStream, CharsetUtil.CHARSET_UTF_8));
      return pemReader.readPemObject();
    } catch (IOException e) {
      throw new IORuntimeException(e);
    } finally {
      IoUtil.close(pemReader);
    }
  }
}