如何读取数字签名的私钥

Question

我正在构建用于对文件进行数字签名的应用程序，我完成了两个部分的签名和验证，但我想构建读取私钥的方法，而不仅仅是对文件进行签名。因为我不想每次签名时都使用不同的密钥。

    // Here is my method for reading private key
class PK implements Serializable{
    PrivateKey pk = null;

    public PK(String nazivFajla) throws FileNotFoundException, IOException {
        this.pk = privatni;
        FileOutputStream fos = new FileOutputStream(nazivFajla);
        ObjectOutputStream oos = new ObjectOutputStream(fos);
        oos.writeObject(this.pk);
        oos.close();
        fos.close();
    }

    public PrivateKey getPk(String nazivFajla) throws FileNotFoundException, IOException, ClassNotFoundException {

        FileInputStream fis = new FileInputStream(nazivFajla);
        ObjectInputStream ois = new ObjectInputStream(fis);
        this.pk = (PrivateKey) ois.readObject();
        return pk;
    }

这是我的按钮字段中的方法：

    private void ucitajPrivatniActionPerformed(java.awt.event.ActionEvent evt) {                                               
try {
        jfc.showOpenDialog(jfc);
        String fajlZaprivatniKljuc = jfc.getSelectedFile().getAbsolutePath();
        PK pk = new PK(fajlZaprivatniKljuc);
        privatni = pk.getPk(fajlZaprivatniKljuc);
        this.tick_UF2.setVisible(true);
    } catch (IOException | ClassNotFoundException ex) {
        Logger.getLogger(GUI.class.getName()).log(Level.SEVERE, null, ex);
    }    
}

这是我的签名方式：

    private void Potpisi1ActionPerformed(java.awt.event.ActionEvent evt) {                                         
    try {
        //Alisa bira algoritme - izabrala je RSA sa SHA-1

        Signature dsa = Signature.getInstance("SHA1withRSA");

        try{
        dsa.initSign(privatni);
        }catch(Exception e){
            System.out.println("Crashed here!");

        }    

        FileInputStream poruka = new FileInputStream(fajlZaPotpis);
        BufferedInputStream bufporuka = new BufferedInputStream(poruka);
        byte[] buffer = new byte[1024];
        int len;
        while (bufporuka.available() != 0) {
            len = bufporuka.read(buffer);
            dsa.update(buffer, 0, len);
        }
        bufporuka.close();
        poruka.close();
        //Alisa generiše digitalni potpis pozivajući metod sign()
        byte[] digitalniPotpis = dsa.sign();
        jfc.showSaveDialog(jfc);
        sacuvaj(digitalniPotpis, jfc.getSelectedFile().getAbsolutePath());
        this.tick_UF3.setVisible(true);

    } catch (NoSuchAlgorithmException ex) {
        Logger.getLogger(GUI.class.getName()).log(Level.SEVERE, null, ex);
    } catch (FileNotFoundException ex) {
        Logger.getLogger(GUI.class.getName()).log(Level.SEVERE, null, ex);
    } catch (IOException ex) {
        Logger.getLogger(GUI.class.getName()).log(Level.SEVERE, null, ex);
    } catch (SignatureException ex) {
        Logger.getLogger(GUI.class.getName()).log(Level.SEVERE, null, ex);
    }

这是尝试签名后的错误：

мај 14, 2015 8:09:55 PM DP.GUI Potpisi1ActionPerformed
SEVERE: null
java.security.SignatureException: object not initialized for signature or verification
    at java.security.Signature.update(Signature.java:738)
    at DP.GUI.Potpisi1ActionPerformed(GUI.java:553)
    at DP.GUI.access00(GUI.java:46)
    at DP.GUI.actionPerformed(GUI.java:306)
    at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
    at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
    at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
    at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
    at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:252)
    at java.awt.Component.processMouseEvent(Component.java:6525)
    at javax.swing.JComponent.processMouseEvent(JComponent.java:3321)
    at java.awt.Component.processEvent(Component.java:6290)
    at java.awt.Container.processEvent(Container.java:2234)
    at java.awt.Component.dispatchEventImpl(Component.java:4881)
    at java.awt.Container.dispatchEventImpl(Container.java:2292)
    at java.awt.Component.dispatchEvent(Component.java:4703)
    at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
    at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
    at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
    at java.awt.Container.dispatchEventImpl(Container.java:2278)
    at java.awt.Window.dispatchEventImpl(Window.java:2739)
    at java.awt.Component.dispatchEvent(Component.java:4703)
    at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:746)
    at java.awt.EventQueue.access0(EventQueue.java:97)
    at java.awt.EventQueue.run(EventQueue.java:697)
    at java.awt.EventQueue.run(EventQueue.java:691)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.security.ProtectionDomain.doIntersectionPrivilege(ProtectionDomain.java:75)
    at java.security.ProtectionDomain.doIntersectionPrivilege(ProtectionDomain.java:86)
    at java.awt.EventQueue.run(EventQueue.java:719)
    at java.awt.EventQueue.run(EventQueue.java:717)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.security.ProtectionDomain.doIntersectionPrivilege(ProtectionDomain.java:75)
    at java.awt.EventQueue.dispatchEvent(EventQueue.java:716)
    at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
    at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
    at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
    at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)

如果有人知道答案请帮助我，我是初级程序员，我真的需要帮助..提前致谢！

Answer 1

不应使用对象序列化对私钥进行编码。可以使用 getEncoded() method and read in using PKCS8EncodedKeySpec supplied to an "RSA" KeyFactory 实例对私钥进行编码。

如何读取数字签名的私钥

how to read private key for digital signature

java

cryptography

rsa

digital-signature

private-key