RSA 加密原理
| 步驟 | 說(shuō)明 | 描述 | 備注 |
|---|---|---|---|
| 1 | 找出質(zhì)數(shù) | P 、Q | - |
| 2 | 計(jì)算公共模數(shù) | N = P * Q | - |
| 3 | 歐拉函數(shù) | φ(N) = (P-1)(Q-1) | - |
| 4 | 計(jì)算公鑰E | 1 < E < φ(N) | E的取值必須是整數(shù) E 和 φ(N) 必須是互質(zhì)數(shù) |
| 5 | 計(jì)算私鑰D | E * D % φ(N) = 1 | - |
| 6 | 加密 | C = M E mod N | C:密文 M:明文 |
| 7 | 解密 | M =C D mod N | C:密文 M:明文 |
公鑰=(E , N)
私鑰=(D, N)
對(duì)外,我們只暴露公鑰。
示例
1、找出質(zhì)數(shù) P 、Q
P = 3
Q = 11
2、計(jì)算公共模數(shù)
N = P * Q = 3 * 11 = 33
N = 33
3、 歐拉函數(shù)
φ(N) = (P-1)(Q-1) = 2 * 10 = 20
φ(N) = 20
4、計(jì)算公鑰E
1 < E < φ(N)
1 <E < 20
E 的取值范圍 {3, 7, 9, 11, 13, 17, 19}
E的取值必須是整數(shù), E 和 φ(N) 必須是互質(zhì)數(shù)
為了測(cè)試,我們?nèi)∽钚〉闹?E =3
3 和 φ(N) =20 互為質(zhì)數(shù),滿足條件
5、計(jì)算私鑰D
E * D % φ(N) = 1
3 * D % 20 = 1
根據(jù)上面可計(jì)算出 D = 7
6、公鑰加密
我們這里為了演示,就加密一個(gè)比較小的數(shù)字 M = 2
公式:C = ME mod N
M = 2
E = 3
N = 33
C = 23 % 33 = 8
明文 “2” 經(jīng)過(guò) RSA 加密后變成了密文 “8”
7、私鑰解密
M =CD mod N
C = 8
D = 7
N = 33
M = 87 % 33
8 * 8 * 8 * 8 * 8 * 8 * 8=2097152
8 * 8 * 8 * 8 * 8 * 8 * 8 % 33 = 2
密文 “8” 經(jīng)過(guò) RSA 解密后變成了明文 2。
公鑰加密 - 私鑰解密流程圖

公鑰加密 - 私鑰解密流程圖
私鑰加密 - 公鑰解密流程圖

私鑰加密 - 公鑰解密流程圖
JDK 自帶的 RSA 算法 示例
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import javax.crypto.Cipher;
import org.apache.commons.codec.binary.Base64;
/**
* 非對(duì)稱加密 唯一廣泛接受并實(shí)現(xiàn) 數(shù)據(jù)加密&數(shù)字簽名 公鑰加密、私鑰解密 私鑰加密、公鑰解密
*
* @author jjs
*
*/
public class RSADemo {
private static String src = "infcn";
private static RSAPublicKey rsaPublicKey;
private static RSAPrivateKey rsaPrivateKey;
static {
// 1、初始化密鑰
KeyPairGenerator keyPairGenerator;
try {
keyPairGenerator = KeyPairGenerator.getInstance("RSA");
keyPairGenerator.initialize(512);// 64的整倍數(shù)
KeyPair keyPair = keyPairGenerator.generateKeyPair();
rsaPublicKey = (RSAPublicKey) keyPair.getPublic();
rsaPrivateKey = (RSAPrivateKey) keyPair.getPrivate();
System.out.println("Public Key : " + Base64.encodeBase64String(rsaPublicKey.getEncoded()));
System.out.println("Private Key : " + Base64.encodeBase64String(rsaPrivateKey.getEncoded()));
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
}
/**
* 公鑰加密,私鑰解密
* @author jijs
*/
public static void pubEn2PriDe() {
//公鑰加密
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(rsaPublicKey.getEncoded());
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.ENCRYPT_MODE, publicKey);
byte[] result = cipher.doFinal(src.getBytes());
System.out.println("公鑰加密,私鑰解密 --加密: " + Base64.encodeBase64String(result));
//私鑰解密
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(rsaPrivateKey.getEncoded());
keyFactory = KeyFactory.getInstance("RSA");
PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.DECRYPT_MODE, privateKey);
result = cipher.doFinal(result);
System.out.println("公鑰加密,私鑰解密 --解密: " + new String(result));
}
/**
* 私鑰加密,公鑰解密
* @author jijs
*/
public static void priEn2PubDe() {
//私鑰加密
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(rsaPrivateKey.getEncoded());
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.ENCRYPT_MODE, privateKey);
byte[] result = cipher.doFinal(src.getBytes());
System.out.println("私鑰加密,公鑰解密 --加密 : " + Base64.encodeBase64String(result));
//公鑰解密
X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(rsaPublicKey.getEncoded());
keyFactory = KeyFactory.getInstance("RSA");
PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.DECRYPT_MODE, publicKey);
result = cipher.doFinal(result);
System.out.println("私鑰加密,公鑰解密 --解密: " + new String(result));
}
public static void main(String[] args) {
pubEn2PriDe(); //公鑰加密,私鑰解密
priEn2PubDe(); //私鑰加密,公鑰解密
}
}