在 Java 中加载加密的 PCKS8 PEM 私钥 [英] Load an Encrypted PCKS8 PEM Private Key In Java

查看：228 发布时间：2021/6/21 19:34:08 java rsa public-key-encryption private-key

本文介绍了在 Java 中加载加密的 PCKS8 PEM 私钥的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

我希望加载/使用在 Java 应用程序中提供给我的加密私钥.请找到密钥(加密私钥、解密私钥和公钥如下所示).

I wish to load/use an Encrypted Private Key provided to me in a Java application. Please find the keys (Encrypted Private, Decrypted Private and Public keys shown below).

加密的私钥密码:aWCTJPET9fL7UBTp97hX99gdofeWKUf5tuxSuJeST2sEkyvkyinrfrj6EiSUTErF"

The Encrypted Private key password: "aWCTJPET9fL7UBTp97hX99gdofeWKUf5tuxSuJeST2sEkyvkyinrfrj6EiSUTErF"

密钥是通过在 NodeJS 中使用 Crypto 生成的:

The keys were generated by using Crypto in NodeJS using:

generateKeyPairSync( "rsa", {
        modulusLength: 4096,
        publicKeyEncoding: {
          type: "spki",
          format: "pem"
        },
        privateKeyEncoding: {
          type: "pkcs8",
          format: "pem",
          cipher: "aes-256-cbc",
          passphrase: "aWCTJPET9fL7UBTp97hX99gdofeWKUf5tuxSuJeST2sEkyvkyinrfrj6EiSUTErF"
        }
      } )

Note: enforcing padding in encrypt and decrypt padding: RSA_PKCS1_PADDING

我正在使用:运行时版本:11.0.7+10-b765.64 amd64，OpenJDK 64 位

I am running using: Runtime version: 11.0.7+10-b765.64 amd64, OpenJDK 64-Bit

我发现的最好/最接近的参考是:How用java读取密码加密密钥?

The best/closest reference I have found is: How to read a password encrypted key with java?

我正在使用:IDE:IntelliJ IDEA 2020.1.3(社区版)Build #IC-201.8538.31，建于 2020 年 7 月 7 日运行时版本:11.0.7+10-b765.64 amd64VM:JetBrains s.r.o. 的 OpenJDK 64 位服务器 VM.Linux 5.4.0-65-通用GC:ParNew、ConcurrentMarkSweep内存:943M核心数:8当前桌面:KDE

I am running using: IDE: IntelliJ IDEA 2020.1.3 (Community Edition) Build #IC-201.8538.31, built on July 7, 2020 Runtime version: 11.0.7+10-b765.64 amd64 VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o. Linux 5.4.0-65-generic GC: ParNew, ConcurrentMarkSweep Memory: 943M Cores: 8 Current Desktop: KDE

java --version:openjdk 14.0.2 2020-07-14OpenJDK 运行时环境(构建 14.0.2+12-Ubuntu-120.04)OpenJDK 64 位服务器 VM(构建 14.0.2+12-Ubuntu-120.04，混合模式，共享)

java --version: openjdk 14.0.2 2020-07-14 OpenJDK Runtime Environment (build 14.0.2+12-Ubuntu-120.04) OpenJDK 64-Bit Server VM (build 14.0.2+12-Ubuntu-120.04, mixed mode, sharing)

下面提供的代码示例将失败:

The code example provided below will fail with :

java.security.NoSuchAlgorithmException: Cannot find any provider supporting 1.2.840.113549.1.5.13

我发现号码是 OID http://oid-info.com/get/1.2.840.113549.1.5.13

I found the number to be OID http://oid-info.com/get/1.2.840.113549.1.5.13

实际上似乎意味着:基于密码的加密方案 2 (PBES2)

Which effectively seems to mean: Password-Based Encryption Scheme 2 (PBES2)

我发现一个错误报告说它已经解决:https://bugs.openjdk.java.net/browse/JDK-8076999 于 2020-10-30 09:27

I found a bug report which says it has been resolved: https://bugs.openjdk.java.net/browse/JDK-8076999 on the 2020-10-30 09:27

那么问题如何将给定的加密私钥 (PEM) 加载到 Java 应用程序中以便使用?有解决办法吗?

So the question How do you load a given Encrypted Private Key (PEM) into a Java application so it can be used ? Is there a work around ?

网上有很多关于使用 Bouncy Castle 库的资料，但我也找不到一个有效的例子.我对代码没有限制.如果可能，请提供示例.

There is a lot of stuff online about using the Bouncy Castle libs but I could not find a working example either. I have no restrictions code wise. Please provide an example if possible.

例如，可以通过从密钥本身中提取 IV 来使用 AES 解密密钥吗?

For example can the key be decrypted using AES by extracting the IV from the key itself ?

String privKeyStrBase64Encoded = "THE ENCRYPTED PRIVATE KEY SHOWN FURTHER DOWN"
        privKeyStrBase64Encoded = privKeyStrBase64Encoded.replace("-----BEGIN ENCRYPTED PRIVATE KEY-----", "");
        privKeyStrBase64Encoded = privKeyStrBase64Encoded.replaceAll(System.lineSeparator(), "");
        privKeyStrBase64Encoded = privKeyStrBase64Encoded.replace("-----END ENCRYPTED PRIVATE KEY-----", "");

        byte[] encryptedPKInfo =  Base64.getDecoder().decode(privKeyStrBase64Encoded);
        EncryptedPrivateKeyInfo ePKInfo = new EncryptedPrivateKeyInfo(encryptedPKInfo);
        char[] password = "aWCTJPET9fL7UBTp97hX99gdofeWKUf5tuxSuJeST2sEkyvkyinrfrj6EiSUTErF".toCharArray();
        
        Cipher cipher = Cipher.getInstance(ePKInfo.getAlgName()); //Cannot find any provider supporting 1.2.840.113549.1.5.13
        PBEKeySpec pbeKeySpec = new PBEKeySpec(password);
        // Now create the Key from the PBEKeySpec
        SecretKeyFactory skFac = SecretKeyFactory.getInstance(ePKInfo.getAlgName());
        Key pbeKey = skFac.generateSecret(pbeKeySpec);
        // Extract the iteration count and the salt
        AlgorithmParameters algParams = ePKInfo.getAlgParameters();
        cipher.init(Cipher.DECRYPT_MODE, pbeKey, algParams);
        // Decrypt the encryped private key into a PKCS8EncodedKeySpec
        KeySpec pkcs8KeySpec = ePKInfo.getKeySpec(cipher);
        // Now retrieve the RSA Public and private keys by using an
        // RSA keyfactory.
        KeyFactory rsaKeyFac = KeyFactory.getInstance("RSA");
        // First get the private key
        RSAPrivateCrtKey rsaPriv = (RSAPrivateCrtKey) rsaKeyFac.generatePrivate(pkcs8KeySpec);
        // Now derive the RSA public key from the private key
        RSAPublicKeySpec rsaPubKeySpec = new RSAPublicKeySpec(rsaPriv.getModulus(), rsaPriv.getPublicExponent());
        RSAPublicKey rsaPubKey = (RSAPublicKey) rsaKeyFac.generatePublic(rsaPubKeySpec);
    }

参考解密时的密钥如下:

For reference the key when decrypted looks like:

关联的公钥用于测试:

推荐答案

https://bugs.openjdk.java.net/browse/JDK-8076999 不适用于您的问题；它是关于解析 PBES2 参数而不是实现 PBES2 算法.根据底部的链接 https://bugs.openjdk.java.net/浏览/JDK-8202837 该问题实际上已在 2018 年 11.0.1 版中解决(至少对于使用 AES 的 PBES2，这是您需要的)，其中包括您的 14.0.2，事实证明您的 new EncryptedPrivateKeyInfo 没有失败.

https://bugs.openjdk.java.net/browse/JDK-8076999 is not applicable to your problem; it is about parsing PBES2 parameters not about implementing the PBES2 algorithm(s). And per the link at the bottom to https://bugs.openjdk.java.net/browse/JDK-8202837 that problem was actually fixed (at least for PBES2 using AES, which is what you need) in 2018 in 11.0.1 up, which includes your 14.0.2 as evidenced by the fact that your new EncryptedPrivateKeyInfo did NOT fail.

但是 Oracle/OpenJDK(从 14 开始)没有通过名称或 OID 实现通用的 PBES2(keyfactory 和/或密码)，BouncyCastle(从 1.66 开始)也没有实现.前者确实按名称实现了一些特定的 PBES2 AES 方案，包括您需要的方案，但您必须深入参数对象才能找到该名称，如下所示:

But Oracle/OpenJDK (as of 14) does not implement generic PBES2 (keyfactory and/or Cipher) either by name or OID, and neither does BouncyCastle (as of 1.66). The former does implement some specific PBES2 AES schemes by name, including the one you need, but you must dig inside the parameters object to find that name, like this:

public static void main (String[] args) throws Exception {
    //String file = args[0], pw = args[1];
    String file = "n:66286457.pem", pw = "aWCTJPET9fL7UBTp97hX99gdofeWKUf5tuxSuJeST2sEkyvkyinrfrj6EiSUTErF";
    String pem = new String(Files.readAllBytes(Paths.get(file)));
    String b64 = pem.replaceAll("-----(BEGIN|END) ENCRYPTED PRIVATE KEY-----|\r?\n","");
    byte[] der = Base64.getDecoder().decode(b64);
    
    // Oracle/OpenJDK param parsing for PBES2 only works in 11.0.1 up 
    // and currently only for AES-128,256 see JDK-8076999,JDK-8202837
    EncryptedPrivateKeyInfo eki = new EncryptedPrivateKeyInfo(der);
    if( !eki.getAlgName().equals("1.2.840.113549.1.5.13") ) 
        throw new Exception ("not PBES2"); // or other handling 
    AlgorithmParameters top = eki.getAlgParameters();
    // hack to get nonpublic field and class, may break if Java keeps getting stricter
    Class<?> clazz = top.getClass();
    Object spi = access(clazz,"paramSpi").get(top);
    clazz = Class.forName("com.sun.crypto.provider.PBES2Parameters");
    String spiname = (String) access(clazz,"pbes2AlgorithmName").get(spi);

    SecretKeyFactory fact = SecretKeyFactory.getInstance(spiname);
    SecretKey skey = fact.generateSecret(new PBEKeySpec(pw.toCharArray()));
    Cipher ciph = Cipher.getInstance(spiname); 
    ciph.init(Cipher.DECRYPT_MODE, skey, eki.getAlgParameters());

    KeyFactory fac2 = KeyFactory.getInstance("RSA");
    PrivateKey pkey = fac2.generatePrivate(eki.getKeySpec(ciph));

    System.out.println ( ((RSAPrivateKey)pkey).getModulus() ); // for test
}
static Field access (Class<?> clazz, String name) throws Exception {
    Field f = clazz.getDeclaredField(name); 
    f.setAccessible(true);
    return f;
}

顺便说一句:IV 不是问题；本案例的 AlgorithmParameters 包装了 com.sun.crypto.provider.PBES2Parameters，其中包括 PBKDF2 参数(salt 和 itercount)和加密参数 (IV).

BTW: IV is not a problem; the AlgorithmParameters for this case wraps com.sun.crypto.provider.PBES2Parameters which includes both the PBKDF2 parameters (salt and itercount) and the encryption parameter (IV).

BouncyCastle(bcpkix 加 bcprov)确实是一种简单且完全受支持的方式；您可以直接解析 PEM(无需调整和 base64 解码)或解析(dePEMified 或其他)DER，然后使用 PKCS8EncryptedPrivateKeyInfo.decryptPrivateKeyInfo 和 JceOpenSSLPKCS8DecryptorProviderBuilder, 和 JcaPEMKeyConverter(它只是通过合适的 KeyFactory 运行它，如果你愿意，你可以手动执行).对于 PEM，请参阅以 PEM 格式读取 PKCS8:找不到提供者或对于 DER 如何读取同样用 bouncycastle 编码在 DER 中的 PKCS8 加密私钥?(披露:都是我的).

BouncyCastle (bcpkix plus bcprov) is indeed an easy and fully supported way; you can parse the PEM directly (without adjusting and base64-decoding it) or else parse the (dePEMified or otherwise) DER, and either way then use PKCS8EncryptedPrivateKeyInfo.decryptPrivateKeyInfo with JceOpenSSLPKCS8DecryptorProviderBuilder, and JcaPEMKeyConverter (which just runs it through a suitable KeyFactory, which you can do manually if you prefer). For PEM see Reading PKCS8 in PEM format: Cannot find provider or for DER How read a PKCS8 encrypted Private key which is also encoded in DER with bouncycastle? (disclosure: both mine).

这篇关于在 Java 中加载加密的 PCKS8 PEM 私钥的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！

查看全文

在 Java 中加载加密的 PCKS8 PEM 私钥 [英] Load an Encrypted PCKS8 PEM Private Key In Java

问题描述

推荐答案

相关文章

Java开发最新文章

热门教程

热门工具

登录关闭

在 Java 中加载加密的 PCKS8 PEM 私钥 [英] Load an Encrypted PCKS8 PEM Private Key In Java

问题描述

推荐答案

相关文章

Java开发最新文章

热门教程

热门工具

登录 关闭

登录关闭