時(shí)間：2017年4月13日星期四
說(shuō)明：本文部分內(nèi)容均來(lái)自慕課網(wǎng)。@慕課網(wǎng)：http://www.imooc.com
教學(xué)示例源碼：https://github.com/zccodere/s...
個(gè)人學(xué)習(xí)源碼：https://github.com/zccodere/s...

數(shù)字簽名算法

簽名-安全性，抗否認(rèn)性
數(shù)字簽名：帶有密鑰（公鑰、私鑰）的消息摘要算法
驗(yàn)證數(shù)據(jù)完整性、認(rèn)證數(shù)據(jù)來(lái)源、抗否認(rèn)
OSI參考模型
私鑰簽名、公鑰驗(yàn)證
RSA、DSA、ECDSA

數(shù)字簽名算法：RSA

經(jīng)典算法
MD、SHA兩類(lèi)

算法實(shí)現(xiàn)：

代碼演示：

package com.myimooc.security.rsa2;

import org.apache.commons.codec.binary.Hex;

import java.security.*;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * RSA數(shù)字簽名算法演示
 * Created by ZC on 2017/4/13.
 */
public class DemoRSA {

    /** 待加密字符串 */
    private static String src="imooc security rsa";

    public static void main(String[] args)throws Exception{
        jdkRSA();
    }

    /** 使用 JDK 實(shí)現(xiàn) RSA 數(shù)字簽名  */
    public static void jdkRSA() throws Exception{

        // 1.初始化密鑰
        KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
        keyPairGenerator.initialize(512);
        KeyPair keyPair = keyPairGenerator.generateKeyPair();
        RSAPublicKey rsaPublicKey = (RSAPublicKey)keyPair.getPublic();
        RSAPrivateKey rsaPrivateKey = (RSAPrivateKey)keyPair.getPrivate();

        // 2.執(zhí)行簽名
        PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(rsaPrivateKey.getEncoded());
        KeyFactory keyFactory = KeyFactory.getInstance("RSA");
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
        Signature signature = Signature.getInstance("MD5withRSA");
        signature.initSign(privateKey);
        signature.update(src.getBytes());
        byte[] result = signature.sign();
        System.out.println("jdk ras sign:"+ Hex.encodeHexString(result));

        // 3.驗(yàn)證簽名
        X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(rsaPublicKey.getEncoded());
        keyFactory = KeyFactory.getInstance("RSA");
        PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
        signature = Signature.getInstance("MD5withRSA");
        signature.initVerify(publicKey);
        signature.update(src.getBytes());
        boolean bool = signature.verify(result);
        System.out.println("jdk rsa verify:"+bool);
    }

}

流程演示：

數(shù)字簽名算法：DSA

DSS（Digital Signature Standard）數(shù)字簽名標(biāo)準(zhǔn)
DSA（Digital Signature Algorithm）數(shù)字簽名算法
DSA僅包含數(shù)字簽名

算法實(shí)現(xiàn)：

代碼演示：

package com.myimooc.security.dsa;

import org.apache.commons.codec.binary.Hex;

import java.security.*;
import java.security.interfaces.DSAPrivateKey;
import java.security.interfaces.DSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * DSA數(shù)字簽名算法演示
 * Created by ZC on 2017/4/13.
 */
public class DemoDSA {

    /** 待加密字符串 */
    private static String src="imooc security dsa";

    public static void main(String[] args)throws Exception{
        jdkDSA();
    }

    /** 使用 JDK 實(shí)現(xiàn) DSA 數(shù)字簽名  */
    public static void jdkDSA() throws Exception{

        // 1.初始化密鑰
        KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("DSA");
        keyPairGenerator.initialize(512);
        KeyPair keyPair = keyPairGenerator.generateKeyPair();
        DSAPublicKey dsaPublicKey = (DSAPublicKey)keyPair.getPublic();
        DSAPrivateKey dsaPrivateKey = (DSAPrivateKey)keyPair.getPrivate();

        // 2.執(zhí)行簽名
        PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(dsaPrivateKey.getEncoded());
        KeyFactory keyFactory = KeyFactory.getInstance("DSA");
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
        Signature signature = Signature.getInstance("SHA1withDSA");
        signature.initSign(privateKey);
        signature.update(src.getBytes());
        byte[] result = signature.sign();
        System.out.println("jdk dsa sign:"+ Hex.encodeHexString(result));

        // 3.驗(yàn)證簽名
        X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(dsaPublicKey.getEncoded());
        keyFactory = KeyFactory.getInstance("DSA");
        PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
        signature = Signature.getInstance("SHA1withDSA");
        signature.initVerify(publicKey);
        signature.update(src.getBytes());
        boolean bool = signature.verify(result);
        System.out.println("jdk dsa verify:"+bool);
    }
}

流程演示：

數(shù)字簽名算法：ECDSA

微軟：安裝office或系統(tǒng)需提供的序列號(hào)就是ECDSA算法
Elliptic Curve Digital Signature Algorithm，橢圓曲線(xiàn)數(shù)字簽名算法
速度快、強(qiáng)度高、簽名短

算法實(shí)現(xiàn)：

代碼演示：

package com.myimooc.security.ecdsa;

import org.apache.commons.codec.binary.Hex;

import java.security.*;
import java.security.interfaces.ECPrivateKey;
import java.security.interfaces.ECPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * ECDSA數(shù)字簽名算法演示
 * Created by ZC on 2017/4/13.
 */
public class DemoECDSA {

    /** 待加密字符串 */
    private static String src="imooc security ecdsa";

    public static void main(String[] args)throws Exception{
        jdkECDSA();
    }

    /** 使用 JDK 實(shí)現(xiàn) ECDSA 數(shù)字簽名  */
    public static void jdkECDSA() throws Exception{

        // 1.初始化密鑰
        KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("EC");
        keyPairGenerator.initialize(256);
        KeyPair keyPair = keyPairGenerator.generateKeyPair();
        ECPublicKey ecPublicKey = (ECPublicKey)keyPair.getPublic();
        ECPrivateKey ecPrivateKey = (ECPrivateKey)keyPair.getPrivate();

        // 2.執(zhí)行簽名
        PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(ecPrivateKey.getEncoded());
        KeyFactory keyFactory =  KeyFactory.getInstance("EC");
        PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
        Signature signature = Signature.getInstance("SHA1withECDSA");
        signature.initSign(privateKey);
        signature.update(src.getBytes());
        byte[] result = signature.sign();
        System.out.println("jdk ecdsa sign:"+ Hex.encodeHexString(result));

        // 3.驗(yàn)證簽名
        X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(ecPublicKey.getEncoded());
        keyFactory = KeyFactory.getInstance("EC");
        PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
        signature = Signature.getInstance("SHA1withECDSA");
        signature.initVerify(publicKey);
        signature.update(src.getBytes());
        boolean bool = signature.verify(result);
        System.out.println("jdk ecdsa verify:"+ bool);
    }

}

流程演示：

數(shù)字簽名算法：回顧

簽名
數(shù)字簽名：帶有密鑰（公鑰、使用）的消息摘要算法
驗(yàn)證數(shù)據(jù)完整性、認(rèn)證數(shù)據(jù)來(lái)源、抗否認(rèn)
OSI參考模型
私鑰簽名、公鑰驗(yàn)證
RSA、DSA、ECDSA