java KeyFactory.geneatePrivateKey() 报 java.security.InvalidKeyException: IOException : algid parse e

梦里梦外; 2022-05-26 07:30 223阅读 0赞

Exception in thread "main" java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: IOException : algid parse error, not a sequence  
    at sun.security.rsa.RSAKeyFactory.engineGeneratePrivate(RSAKeyFactory.java:217)  
    at java.security.KeyFactory.generatePrivate(KeyFactory.java:372)  
    at test.java.security.TestSignature.test(TestSignature.java:47)  
    at test.java.security.TestSignature.main(TestSignature.java:39)  
Caused by: java.security.InvalidKeyException: IOException : algid parse error, not a sequence  
    at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:351)  
    at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:356)  
    at sun.security.rsa.RSAPrivateCrtKeyImpl.<init>(RSAPrivateCrtKeyImpl.java:91)  
    at sun.security.rsa.RSAPrivateCrtKeyImpl.newKey(RSAPrivateCrtKeyImpl.java:75)  
    at sun.security.rsa.RSAKeyFactory.generatePrivate(RSAKeyFactory.java:316)  
    at sun.security.rsa.RSAKeyFactory.engineGeneratePrivate(RSAKeyFactory.java:213)  
    ... 3 more

**异常解释:**

密钥解析错误,不是符合PKCS8规范的密钥

查api指出:`InvalidKeySpecException` \- 如果给定的密钥规范不适合此密钥工厂生成私钥。

**错误点:**

一开始传入的密钥既有问题,不是正确的rsa私钥,如果传入公钥错误也会报类似的`InvalidKeySpecException` 异常

**修正后的代码**

package test.java.security;
    
    import java.security.InvalidKeyException;
    import java.security.KeyFactory;
    import java.security.NoSuchAlgorithmException;
    import java.security.PrivateKey;
    import java.security.PublicKey;
    import java.security.Signature;
    import java.security.SignatureException;
    import java.security.spec.InvalidKeySpecException;
    import java.security.spec.PKCS8EncodedKeySpec;
    import java.security.spec.X509EncodedKeySpec;
    import java.util.Base64;
    
    /**
     * 测试 Signature 对象
     * Signature 用来为应用程序提供此数字签名算法功能。
     * @author Administrator
     *
     *
     支持的算法有:
     NONEwithRSA
     MD2withRSA/MD5withRSA
     SHA1withRSA /SHA256withRSA/SHA384withRSA/SHA512withRSA
     NONEwithDSA
     SHA1withDSA
     NONEwithECDSA/SHA1withECDSA/SHA256withECDSA/SHA384withECDSA/SHA512withECDSA/(ECDSA)
     <digest>with<encryption> //任意的签名算法with 加密算法 ;例如 :<digest>with<encryption>and<mgf> :MD5withRSAandMGF1
     */
    public class TestSignature {
    	//错误的rsa密钥
    	//public static String privateKey = "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";
    	public static String privateKey2 = "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";
     
    	public static String publicKey = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQgEoj3z9JrdPNI23DbMQkl3gkGuDke7iBr5yrYyqolkTyxuBLWFwHNuGv4VKOj9fXg61QxpaJ/fxDBvMvmkBSRowHBloGFceVTx8wV/8u0DcjvTCu0IZ1zp6wjG6xBn5j66Sg/q+9hvaY2p7fkKmsvcW6VoNPgQHU1Cf01DLZmQIDAQAB+oXcINOiE3AsuZ4VJmwNZg9Y/7fY+OFRS2JAh5YMsrv2qyoGP+Z9ksre26NYR+Lt91B2lhdwJHLpQpziaANZm/ONb31fj/lwIDAQAB";
    	//private static String test = "test jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihgtest jiojiogeiojigouihg";
    	private static String test = "test huihiutg";
    	
    	private static String algorithm = "NONEwithRSA";
    
    	public static void main(String[] args) throws NoSuchAlgorithmException, InvalidKeyException, InvalidKeySpecException, SignatureException {
    		Signature sign = Signature.getInstance(algorithm);
    		String test2 = testEn(sign);
    		System.out.println(test2);
    		boolean testDn = testDn(test, sign, test2);
    		System.out.println(testDn);
    	}
    	
    	//加密生成签名
    	public static String testEn(Signature sg) throws NoSuchAlgorithmException, InvalidKeySpecException, InvalidKeyException, SignatureException{
    		
    		PKCS8EncodedKeySpec encodedKeySpec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey2));
    		KeyFactory kf = KeyFactory.getInstance("RSA");
    		PrivateKey generatePrivate = kf.generatePrivate(encodedKeySpec);
    		sg.initSign(generatePrivate);//初始化signature
    		sg.update(test.getBytes());//更新 signature
    		byte[] sign = sg.sign();//计算sign
    		String encodeToString = Base64.getEncoder().encodeToString(sign);
    		return encodeToString;
    	}
    	
    	//验证签名
    	/**
    	 * 
    	 * @param date  待签名数据
    	 * @param sg 
    	 * @param signData  签名
    	 * @return
    	 * @throws NoSuchAlgorithmException
    	 * @throws InvalidKeySpecException
    	 * @throws SignatureException
    	 * @throws InvalidKeyException
    	 */
    	public static boolean testDn(String date,Signature sg,String signData) throws NoSuchAlgorithmException, InvalidKeySpecException, SignatureException, InvalidKeyException{
    		X509EncodedKeySpec encodedKeySpec = new X509EncodedKeySpec(Base64.getDecoder().decode(publicKey));
    		KeyFactory kf = KeyFactory.getInstance("RSA");
    		PublicKey generatePublic = kf.generatePublic(encodedKeySpec);
    		sg.initVerify(generatePublic);
    		sg.update(date.getBytes());
    		boolean verify = sg.verify(Base64.getDecoder().decode(signData));
    		return verify;
    		
    	}
    	
    }

**注意:**

由于用到了rsa做加密算法,因此数据大的时候还是要做分组加密,此处没做分组,如果加密数据超过117,解密数据超过128,也会报

javax.crypto.IllegalBlockSizeException: Data must not be longer than 117 bytes 异常