如何在Java中使用BouncyCastle正确编码DH参数？
|
我试图在Java中以编程方式重现\“ openssl dhparam -out dh1024.pem 1024 \”命令的输出。该代码段如下：-
DHParametersGenerator generator = new DHParametersGenerator();
generator.init(1024, 0, new SecureRandom());
DHParameters params = generator.generateParameters();
// Generator G is set as random in params, but it has to be 2 to conform to openssl
DHParameters realParams = new DHParameters(params.getP(), BigInteger.valueOf(2));
byte[] p = realParams.getP().toByteArray();
byte[] g = realParams.getG().toByteArray();
byte[] l = new byte[(byte) realParams.getL()];
byte[] pgl = new byte[p.length+g.length+l.length];
System.arraycopy(p, 0, pgl, 0, p.length);
System.arraycopy(g, 0, pgl, p.length, g.length);
System.arraycopy(l, 0, pgl, p.length+g.length, l.length);
没有找到相关结果
已邀请:
2 个回复
邵酮
中将确定性参数设置为0，否则不会得到质数！我仅通过查看Bouncycastle源代码（例如，查看PEMWriter类）就知道了大部分代码。import java.math.BigInteger; import java.security.SecureRandom; import org.bouncycastle.asn1.ASN1EncodableVector; import org.bouncycastle.asn1.DERInteger; import org.bouncycastle.asn1.DERSequence; import org.bouncycastle.crypto.generators.DHParametersGenerator; import org.bouncycastle.crypto.params.DHParameters; import org.bouncycastle.util.encoders.Base64; public class OpenSSLDHParamClone { public static void main(String[] args) throws Exception { DHParametersGenerator generator = new DHParametersGenerator(); generator.init(1024, 80, new SecureRandom()); DHParameters params = generator.generateParameters(); // Generator G is set as random in params, but it has to be 2 to conform to openssl DHParameters realParams = new DHParameters(params.getP(), BigInteger.valueOf(2)); ASN1EncodableVector seq = new ASN1EncodableVector(); seq.add(new DERInteger(realParams.getP())); seq.add(new DERInteger(realParams.getG())); byte [] derEncoded = new DERSequence(seq).getDEREncoded(); System.out.println(\"-----BEGIN DH PARAMETERS-----\"); String b64Encoded = new String(Base64.encode(derEncoded), \"US-ASCII\"); while (b64Encoded.length() > 0) { int subStringLength = Math.min(64, b64Encoded.length()); System.out.println(b64Encoded.substring(0, subStringLength)); b64Encoded = b64Encoded.substring(subStringLength); } System.out.println(\"-----END DH PARAMETERS-----\"); } }授巨
import java.io.FileWriter; import java.io.IOException; import java.security.AlgorithmParameterGenerator; import java.security.AlgorithmParameters; import java.security.NoSuchAlgorithmException; import java.security.NoSuchProviderException; import java.security.SecureRandom; import org.bouncycastle.util.io.pem.PemObject; import org.bouncycastle.util.io.pem.PemWriter; public class DHCredentials { public static void main(String[] args) throws NoSuchAlgorithmException, NoSuchProviderException, IOException { DHCredentials dhc = new DHCredentials(); System.out.println(\"This may take a long time ...\"); dhc.saveDHParams(\"C:\\\\xxxDH.txt\", dhc.genDHParams()); System.out.println(\"Done\"); } public byte[] genDHParams() throws IOException { AlgorithmParameterGenerator paramGen = null; try { paramGen = AlgorithmParameterGenerator.getInstance(\"DH\"); paramGen.init(1024, new SecureRandom()); } catch (NoSuchAlgorithmException e) { e.printStackTrace(); } AlgorithmParameters params = paramGen.generateParameters(); return params.getEncoded(); } public void saveDHParams(String filePath, byte[] DEREncodedDHParams) { PemWriter pemWrt; try { pemWrt = new PemWriter(new FileWriter(filePath)); pemWrt.writeObject(new PemObject(\"DH PARAMETERS\", DEREncodedDHParams)); pemWrt.flush(); pemWrt.close(); } catch (IOException e) { e.printStackTrace(); } } }