我正在尝试使用ES256_P-256椭圆曲线密钥读取JSON Web密钥（JWK），并在Java中将它们打印为铠装ASCII。理想情况下，我想在没有任何第三方库的情况下执行此操作，但是bouncycastle和本机Java库都遇到问题。不知道我在做什么错。这是JWK：
{
"kty": "EC",
"d": "STNVdgaTJ7Lc7dpFShEPFVgYusUKzbYmb6492BknZFI",
"use": "sig",
"crv": "P-256",
"kid": "1234",
"x": "TrMA2sZ9CaNS3TWZRpjlLg1GB-AdAItozKSJe-83yHg",
"y": "oeBo61jYweaEbIiMLF8r-ndDuQG73WmL2sGyqqUt8b4",
"alg": "ES256"
}
和代码
import java.math.BigInteger;
import java.security.AlgorithmParameters;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.NoSuchAlgorithmException;
import java.security.interfaces.ECPrivateKey;
import java.security.interfaces.ECPublicKey;
import java.security.spec.ECGenParameterSpec;
import java.security.spec.ECParameterSpec;
import java.security.spec.ECPoint;
import java.security.spec.ECPrivateKeySpec;
import java.security.spec.ECPublicKeySpec;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.InvalidParameterSpecException;
import java.util.Base64;
import java.util.Base64.Decoder;
import java.util.Base64.Encoder;
import org.junit.Test;
public class KeyGenerator {
@Test
public void testGenerateECKey() {
try {
final Decoder decoder = Base64.getUrlDecoder();
final Encoder encoder = Base64.getUrlEncoder();
final byte[] secret = decoder
.decode("STNVdgaTJ7Lc7dpFShEPFVgYusUKzbYmb6492BknZFI");
final byte[] x_coord = decoder
.decode("TrMA2sZ9CaNS3TWZRpjlLg1GB-AdAItozKSJe-83yHg");
final byte[] y_coord = decoder
.decode("oeBo61jYweaEbIiMLF8r-ndDuQG73WmL2sGyqqUt8b4");
final BigInteger d = new BigInteger(1, secret);
final BigInteger x = new BigInteger(1, x_coord);
final BigInteger y = new BigInteger(1, y_coord);
final AlgorithmParameters parameters = AlgorithmParameters
.getInstance("EC");
parameters.init(new ECGenParameterSpec("secp256r1"));
final ECParameterSpec ecParameterSpec = parameters
.getParameterSpec(ECParameterSpec.class);
final KeyFactory keyFactory = KeyFactory.getInstance("EC");
final ECPoint ecPoint = new ECPoint(x, y);
final ECPublicKeySpec keySpec = new ECPublicKeySpec(ecPoint,
ecParameterSpec);
final ECPublicKey publicKey = (ECPublicKey) keyFactory
.generatePublic(keySpec);
final ECPrivateKeySpec ecPrivateKeySpec = new ECPrivateKeySpec(d,
ecParameterSpec);
final ECPrivateKey privateKey = (ECPrivateKey) keyFactory
.generatePrivate(ecPrivateKeySpec);
final KeyPair keyPair = new KeyPair(publicKey, privateKey);
// final X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(
// keyPair.getPublic().getEncoded());
// final PKCS8EncodedKeySpec pKCS8EncodedKeySpec = new
// PKCS8EncodedKeySpec(
// keyPair.getPrivate().getEncoded());
System.out.println("-----BEGIN PUBLIC KEY-----");
System.out.println(keyPair.getPublic().getEncoded());
System.out.println("-----END PUBLIC KEY-----");
System.out.println("-----BEGIN PRIVATE KEY-----");
System.out.println(keyPair.getPrivate().getEncoded());
System.out.println("-----END PRIVATE KEY-----");
} catch (final NoSuchAlgorithmException | InvalidKeySpecException
| InvalidParameterSpecException ex) {
ex.printStackTrace();
}
}
}
正在输出：
-----BEGIN PUBLIC KEY-----
[B@34340fab
-----END PUBLIC KEY-----
-----BEGIN PRIVATE KEY-----
[B@2aafb23c
-----END PRIVATE KEY-----
为什么PEM密钥这么小？我究竟做错了什么？
[B@34340fab是toString您尝试打印数组时隐式调用的字节数组方法的结果。
PrivateKey::getEncoded和PublicKey::getEncoded将返回byte代表那些键的DER格式阵列。如果要获取PEM格式，请用base64编码结果字节数组，然后添加PEM标头/页脚：
String publicKeyBase64 = Base64.getEncoder().encodeToString(keyPair.getPublic().getEncoded());
String privateKeyBase64 = Base64.getEncoder().encodeToString(keyPair.getPrivate().getEncoded());
System.out.println("-----BEGIN PUBLIC KEY-----");
System.out.println(publicKeyBase64);
System.out.println("-----END PUBLIC KEY-----");
System.out.println("-----BEGIN PRIVATE KEY-----");
System.out.println(privateKeyBase64);
System.out.println("-----END PRIVATE KEY-----");
本文收集自互联网，转载请注明来源。
如有侵权，请联系 [email protected] 删除。
我来说两句