目录
一、引入jar包
org.bouncycastle bcprov-jdk15on 1.70 二、生成秘钥对，加解密工具类
import org.apache.tomcat.util.codec.binary.Base64;import org.bouncycastle.crypto.CipherParameters;import org.bouncycastle.crypto.engines.SM2Engine;import org.bouncycastle.crypto.params.ParametersWithRandom;import org.bouncycastle.jcajce.provider.asymmetric.ec.BCECPrivateKey;import org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil;import org.bouncycastle.jce.provider.BouncyCastleProvider;import org.slf4j.Logger;import org.slf4j.LoggerFactory;import java.security.*;import java.security.spec.ECGenParameterSpec;import java.security.spec.PKCS8EncodedKeySpec;import java.security.spec.X509EncodedKeySpec;public class PassUtils { private static Logger logger = LoggerFactory.getLogger(PassUtils.class); private static final SM2Engine.Mode DIGEST = SM2Engine.Mode.C1C3C2; public static KeyPair createSm2Key() { try { //使用标准名称创建EC参数生成的参数规范 final ECGenParameterSpec sm2p256v1 = new ECGenParameterSpec("sm2p256v1"); // 获取一个椭圆曲线类型的密钥对生成器 final KeyPairGenerator kpg = KeyPairGenerator.getInstance("EC", new BouncyCastleProvider()); // 使用SM2的算法区域初始化密钥生成器 kpg.initialize(sm2p256v1, new SecureRandom()); // 获取密钥对 return kpg.generateKeyPair(); } catch (Exception e) { logger.error("生成秘钥对失败{}", e.getMessage()); return null; } } public static String encryptSm2(String publicKeyStr, String data) { try { //算法工具包 Security.addProvider(new BouncyCastleProvider()); //将公钥字符串转为公钥字节 byte[] bytes = Base64.decodeBase64(publicKeyStr); KeyFactory keyFactory = KeyFactory.getInstance("EC", BouncyCastleProvider.PROVIDER_NAME); X509EncodedKeySpec keySpec = new X509EncodedKeySpec(bytes); logger.info("获取转换后的公钥"); PublicKey publicKey = keyFactory.generatePublic(keySpec); logger.info("开始加密"); CipherParameters pubKeyParameters = new ParametersWithRandom(ECUtil.generatePublicKeyParameter(publicKey), new SecureRandom()); SM2Engine sm2Engine = new SM2Engine(); sm2Engine.init(true, pubKeyParameters); byte[] arrayBytes = sm2Engine.processBlock(data.getBytes(), 0, data.getBytes().length); return Base64.encodeBase64String(arrayBytes); //开始加密 } catch (Exception e) { logger.error("加密失败{}", e.getMessage()); } return null; } public static String decryptSm2(String privateStr, String data) { try { logger.info("私钥转换"); byte[] bytes = Base64.decodeBase64(privateStr); KeyFactory keyFactory = KeyFactory.getInstance("EC", BouncyCastleProvider.PROVIDER_NAME); PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(bytes); PrivateKey privateKey = keyFactory.generatePrivate(keySpec); logger.info("sm2开始解密"); CipherParameters privateKeyParameters = ECUtil.generatePrivateKeyParameter((BCECPrivateKey) privateKey); SM2Engine engine = new SM2Engine(); engine.init(false, privateKeyParameters); byte[] byteDate = engine.processBlock(Base64.decodeBase64(data), 0, Base64.decodeBase64(data).length); return new String(byteDate); } catch (Exception e) { logger.error("sm2解密失败{}", e.getMessage()); return null; } } public static void main(String[] args) throws Exception { //定义需要加密的字符串 String str = "aaaaa"; //生成秘钥对 KeyPair sm2Key = createSm2Key(); //获取公钥 PublicKey publicKey = sm2Key.getPublic(); //获取公钥base加密后字符串 String publicStr = Base64.encodeBase64String(publicKey.getEncoded()); logger.info("公钥为：{}", publicStr); //获取私钥 PrivateKey privateKey = sm2Key.getPrivate(); //获取私钥base加密后字符串 String privateStr = Base64.encodeBase64String(privateKey.getEncoded()); logger.info("私钥为：{}", privateStr); //公钥加密 String passStr = encryptSm2(publicStr, str); logger.info("加密后为{}", passStr); //私钥解密 String deStr = decryptSm2(privateStr, passStr); logger.info("解密后为{}", deStr); }}来源地址：https://blog.csdn.net/weixin_51613454/article/details/127861884
