KingAckerman
commented
6 months ago java签名类 // // Source code recreated from a .class file by IntelliJ IDEA // (powered by FernFlower decompiler) //
package com.nmgjc.dwzj.sdk.util.sign;
import com.alipay.api.internal.util.codec.Base64; import com.nmgjc.dwzj.sdk.exception.BusinessException; import com.nmgjc.dwzj.sdk.model.CheckSignParam; import com.nmgjc.dwzj.sdk.model.CommReq; import com.nmgjc.dwzj.sdk.model.CommRsp; import com.nmgjc.dwzj.sdk.model.SignParam; import com.nmgjc.dwzj.sdk.util.sign.inter.ISign; import java.nio.charset.StandardCharsets; import java.security.KeyFactory; import java.security.KeyPair; import java.security.KeyPairGenerator; import java.security.PrivateKey; import java.security.PublicKey; import java.security.SecureRandom; import java.security.Signature; import java.security.spec.ECGenParameterSpec; import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.X509EncodedKeySpec; import org.bouncycastle.jce.provider.BouncyCastleProvider; import org.slf4j.Logger; import org.slf4j.LoggerFactory;
public class GM2Util implements ISign { private static final Logger LOGGER = LoggerFactory.getLogger(GM2Util.class); private static final BouncyCastleProvider bc = new BouncyCastleProvider(); private static final String KEY_ALGORITHM = "EC"; private static final String SIGNATURE_ALGORITHM = "SM3withSm2";
public GM2Util() {
}
public String sign(CommReq reqData) {
String srcData = reqData.getSrcSignData();
LOGGER.info("srcData:" + srcData);
return sign(srcData.getBytes(StandardCharsets.UTF_8), reqData.getKey());
}
public String getSign(SignParam signParam) {
String srcData = signParam.getSrcSignData();
LOGGER.info("srcData:" + srcData);
return sign(srcData.getBytes(StandardCharsets.UTF_8), signParam.getKey());
}
public boolean checkSign(CheckSignParam checkSignParam) {
String srcData = checkSignParam.getSrcSignData();
LOGGER.info("srcData:" + srcData);
return verify(srcData.getBytes(StandardCharsets.UTF_8), checkSignParam.getPubKey(), checkSignParam.getSign());
}
public boolean check(CommReq reqData, CommRsp rspData) {
String srcData = rspData.getSrcSignData(reqData.getVersion());
LOGGER.info("srcData:" + srcData);
return verify(srcData.getBytes(StandardCharsets.UTF_8), reqData.getPubKey(), rspData.getSign());
}
private static String sign(byte[] data, String privateKeyStr) {
try {
byte[] keyBytes = Base64.decodeBase64(privateKeyStr.getBytes(StandardCharsets.UTF_8));
KeyFactory keyFactory = KeyFactory.getInstance("EC", bc);
PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(keyBytes);
PrivateKey priKey = keyFactory.generatePrivate(pkcs8KeySpec);
Signature signature = Signature.getInstance("SM3withSm2", bc);
signature.initSign(priKey);
signature.update(data);
return Base64.encodeBase64String(signature.sign());
} catch (Exception var7) {
LOGGER.error("sign异常", var7);
return null;
}
}
private static boolean verify(byte[] data, String publicKeyStr, String sign) {
try {
byte[] keyBytes = Base64.decodeBase64(publicKeyStr.getBytes(StandardCharsets.UTF_8));
KeyFactory keyFactory = KeyFactory.getInstance("EC", bc);
X509EncodedKeySpec keySpec = new X509EncodedKeySpec(keyBytes);
PublicKey pubKey = keyFactory.generatePublic(keySpec);
Signature signature = Signature.getInstance("SM3withSm2", bc);
signature.initVerify(pubKey);
signature.update(data);
return signature.verify(Base64.decodeBase64(sign.getBytes(StandardCharsets.UTF_8)));
} catch (Exception var8) {
LOGGER.error("verify异常", var8);
return false;
}
}
public static KeyPair generateSm2KeyPair() {
try {
ECGenParameterSpec sm2Spec = new ECGenParameterSpec("sm2p256v1");
KeyPairGenerator kpg = KeyPairGenerator.getInstance("EC", new BouncyCastleProvider());
SecureRandom random = new SecureRandom();
kpg.initialize(sm2Spec, random);
KeyPair keyPair = kpg.generateKeyPair();
return keyPair;
} catch (Exception var4) {
var4.printStackTrace();
throw new BusinessException("生成密钥对失败");
}
}
public static void main(String[] args) throws Exception {
KeyPair keyPair = generateSm2KeyPair();
String priPath = Base64.encodeBase64String(keyPair.getPrivate().getEncoded());
String pubPath = Base64.encodeBase64String(keyPair.getPublic().getEncoded());
String data = "123213";
String sign = sign(data.getBytes(), priPath);
LOGGER.info(sign);
boolean verify = verify(data.getBytes(), pubPath, sign);
LOGGER.info(String.valueOf(verify));
}}
lpilp
$private_key='MIGTAgEAMBMGByqGSM49AgEGCCqBHM9VAYItBHkwdwIBAQQg37rIi67OU7RSz7gA4JkN3bV6TlnYAcbUfN58CsLhBwSgCgYIKoEcz1UBgi2hRANxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; $public_key='MFkwEwYHKoZIzj0CAQYIKoEcz1UBgi0DQgAENSXl+ohNQcCJ2H1tp7KKJjBnUM+f0sNQA4HaSMxRt/x7G1j5r0M58zON9GT74CjLWws4+xBxcPq8F7mBl0meCQ==';
$data = [ 'data' => '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', 'method' => 'CreateOrder', 'appid' => 'BTDDXWXT', 'noise' => 'd9667f81-8068-4bee-9def-dc8f7cc00202', 'version' => 'V1.0', ]; //java生成的sign $sign = 'MEUCIFTiSS5ySk7RBPspGkSfHFh+5lP+4Gj9t6hhZPWHz9L5AiEA8a3+BNPgQ0RHMLxrXL3bqvhDX6HEwrEehcnXzdQImuk=';
//php生成的签名一直验签不通过。签名规则是将data中数组正序排序,然后然后用&拼接 //签名示例 $stringA="appid=app1&data=ewogI&method=query&noise=ibuaiVcKd pRxkhJA&version=V1.0"; $sign = createSign($stringA);