Java 使用PGP实现签名加密
具体的给一个我写的Util类，在这里使用到了第三方包cryptix,具体的可以去www.cryptix.org网站上去找资料。ceryptix的jar包放在附件中。
示例类：
import java.io.ByteArrayInputStream;import java.io.File;import java.io.FileInputStream;import java.io.IOException;import java.io.InputStream;import java.security.NoSuchAlgorithmException;import java.security.Security;import java.security.UnrecoverableKeyException;import java.util.ArrayList;import java.util.Collection;import java.util.List;import cryptix.message.EncryptedMessage;import cryptix.message.EncryptedMessageBuilder;import cryptix.message.KeyBundleMessage;import cryptix.message.LiteralMessage;import cryptix.message.LiteralMessageBuilder;import cryptix.message.Message;import cryptix.message.MessageException;import cryptix.message.MessageFactory;import cryptix.message.NotEncryptedToParameterException;import cryptix.message.SignedMessage;import cryptix.message.SignedMessageBuilder;import cryptix.openpgp.PGPArmouredMessage;import cryptix.pki.KeyBundle;public class PGPUtil {/** * 添加提供者 */static{Security.addProvider(new cryptix.jce.provider.CryptixCrypto()); Security.addProvider(new cryptix.openpgp.provider.CryptixOpenPGP() );}/** * 构建 LiteralMessage 对象 * @param message * @return * @throws MessageException */private static LiteralMessage buildLiteralMessage(byte[] message) throws MessageException{LiteralMessageBuilder lmb = null;try {lmb = LiteralMessageBuilder.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();}lmb.init(message);LiteralMessage literal = (LiteralMessage)lmb.build();return literal;}/** * 使用多个公钥对明文加密 * @param plain明文 * @param recipientKeys公钥集合 * @return加密后的明文 * @throws MessageException */public static byte[] encrypt(byte[] plain,List<KeyBundle> recipientKeys) throws MessageException{LiteralMessage literal = buildLiteralMessage(plain);EncryptedMessageBuilder emb = null;try {emb = EncryptedMessageBuilder.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();}emb.init(literal);//添加接受者for(KeyBundle key : recipientKeys){emb.addRecipient(key);}//压缩emb.setAttribute("compressed", "true");//得到加密信息Message msg = emb.build();PGPArmouredMessage pgpMsg = new PGPArmouredMessage(msg);return pgpMsg.getEncoded();}/** * 使用单张公钥加密 * @param plain明文 * @param publicKey公钥 * @return返回加密后的密文 * @throws MessageException */public static byte[] encrypt(byte[] plain,KeyBundle publicKey) throws MessageException{List<KeyBundle> list = new ArrayList<KeyBundle>();list.add(publicKey);return encrypt(plain, list);}/** * 使用私钥和密码对明文签名 * @param plain明文 * @param privateKey私钥 * @param keypass私钥密码 * @return签名后的明文 * @throws MessageException * @throws UnrecoverableKeyException */public static byte[] sign(byte[] plain,KeyBundle privateKey,String keypass)throws MessageException,UnrecoverableKeyException{ SignedMessageBuilder smb = null;try {smb = SignedMessageBuilder.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();} // SignedMessageBuilder smb = SignedMessageBuilder.getInstance("OpenPGP/V3"); LiteralMessage literal = buildLiteralMessage(plain); smb.init(literal); smb.addSigner(privateKey, keypass.toCharArray()); Message msg = smb.build(); PGPArmouredMessage armoured = new PGPArmouredMessage(msg);return armoured.getEncoded();}/** * 使用私钥和密码解密加密后的数据 * @param encryptedPGP加密过的数据 * @param privateKey私钥 * @param keypass私钥密码 * @return解密后的明文 * @throws MessageException * @throws IOException * @throws UnrecoverableKeyException * @throws NotEncryptedToParameterException */public static byte[] decrypt(byte[] encrypted,KeyBundle privateKey,String keypass) throws MessageException, IOException, UnrecoverableKeyException, NotEncryptedToParameterException{MessageFactory mf = null;try {mf = MessageFactory.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();}Collection msgs = mf.generateMessages(new ByteArrayInputStream(encrypted));//得到集合中的EncryptedMessage对象Message message = (Message)msgs.iterator().next();if (!(message instanceof EncryptedMessage)) { throw new MessageException("Not a encrypted message."); }EncryptedMessage em = (EncryptedMessage)message;Message msg = em.decrypt(privateKey,keypass.toCharArray());return ((LiteralMessage)msg).getBinaryData();}/** * 解密验签 * @param encrypted密文 * @param privateKey私钥 * @param keypass私钥密码 * @param publicKey公钥 * @return返回明文 * @throws UnrecoverableKeyException * @throws MessageException * @throws IOException * @throws NotEncryptedToParameterException */public static byte[] decryptVerify(byte[] encrypted,KeyBundle privateKey,String keypass,KeyBundle publicKey) throws UnrecoverableKeyException, MessageException, IOException, NotEncryptedToParameterException{return PGPUtil.verify(PGPUtil.decrypt(encrypted, privateKey, keypass), publicKey);}/** * 验证Message * @param signed验证的内容 * @param publickey公钥 * @return返回验证后的内容 * @throws MessageException * @throws IOException */public static byte[] verify(byte[] signed,KeyBundle publickey) throws MessageException, IOException{MessageFactory mf = null;try {mf = MessageFactory.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();} Message msg = (Message)mf.generateMessages(new ByteArrayInputStream(signed)).iterator().next(); if (!(msg instanceof SignedMessage)) { throw new MessageException(" Not a signed message."); } SignedMessage sm = (SignedMessage)msg; if (sm.verify(publickey)) { } else { throw new MessageException(" Signature verify fail. "); } if (!(sm.getContents() instanceof LiteralMessage)){ throw new MessageException(" Not a signed message."); } LiteralMessage lm = (LiteralMessage)sm.getContents();return lm.getBinaryData();}/** * 流转换为PGP KeuBundle 对象 * @param inputStream Key * @return转换后的 KeuBundle * @throws MessageException * @throws IOException */public static KeyBundle streamToKeyBundle(InputStream inputStream) throws MessageException, IOException {MessageFactory messageFactory = null;try {messageFactory = MessageFactory.getInstance("OpenPGP");} catch (NoSuchAlgorithmException e) {e.printStackTrace();}Collection msgs = messageFactory.generateMessages(inputStream);KeyBundleMessage keybm = (KeyBundleMessage)msgs.iterator().next();return keybm.getKeyBundle();}/** * 签名加密 * @param plain明文 * @param privateKey私钥 * @param keypass私钥密码 * @param recipientKeys公钥 * @return返回签名加密后的数据 * @throws UnrecoverableKeyException * @throws MessageException */public static byte [] signAndEncrypt(byte[] plain,KeyBundle privateKey,String keypass,List<KeyBundle> recipientKeys) throws UnrecoverableKeyException, MessageException{return PGPUtil.encrypt(PGPUtil.sign(plain, privateKey, keypass),recipientKeys);}/** * 签名加密 * @param plain明文 * @param privateKey私钥 * @param keypass私钥密码 * @param recipientKeys公钥 * @return返回签名加密后的数据 * @throws UnrecoverableKeyException * @throws MessageException */public static byte [] signAndEncrypt(byte[] plain,KeyBundle privateKey,String keypass,KeyBundle publicKey) throws UnrecoverableKeyException, MessageException{return PGPUtil.encrypt(PGPUtil.sign(plain, privateKey, keypass),publicKey);}}