bouncycastle中添加HMAC-SM3支持
一、
最近看完了PKCS#5中的内容,总结一下自己添加HMAC-SM3中遇到的问题和解决方法。
大概通读BC java源码以后,开始上手修改。
在SM3.java中添加如下代码:
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
/** * SM3 HashMac */ public static class HashMac extends BaseMac { public HashMac() { super(new HMac(new SM3Digest())); } } public static class KeyGenerator extends BaseKeyGenerator { public KeyGenerator() { super("HMACSM3", 256, new CipherKeyGenerator()); } } public static class Mappings extends DigestAlgorithmProvider { private static final String PREFIX = SM3.class.getName(); public Mappings() {} @Override public void configure(ConfigurableProvider provider) { addHMACAlgorithm(provider, "SM3", PREFIX + "$HashMac", PREFIX + "$KeyGenerator"); addHMACAlias(provider, "SM3", GMObjectIdentifiers.hmac_sm3); } }
直接修改BC源码有一个问题,就是打包后无法使用java信任的签名签证。
所以找新的方法。。。
二、
新建项目->
新建SM3.java文件
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
import org.bouncycastle.asn1.gm.GMObjectIdentifiers; import org.bouncycastle.crypto.CipherKeyGenerator; import org.bouncycastle.crypto.digests.SM3Digest; import org.bouncycastle.crypto.macs.HMac; import org.bouncycastle.jcajce.provider.config.ConfigurableProvider; import org.bouncycastle.jcajce.provider.symmetric.util.BaseKeyGenerator; import org.bouncycastle.jcajce.provider.symmetric.util.BaseMac; public class SM3 { private SM3() {} /** * SM3 HashMac */ public static class HashMac extends BaseMac { public HashMac() { super(new HMac(new SM3Digest())); } } public static class KeyGenerator extends BaseKeyGenerator { public KeyGenerator() { super("HMACSM3", 256, new CipherKeyGenerator()); } } public static class Mappings extends DigestAlgorithmProvider { private static final String PREFIX = SM3.class.getName(); public Mappings() {} @Override public void configure(ConfigurableProvider provider) { addHMACAlgorithm(provider, "SM3", PREFIX + "$HashMac", PREFIX + "$KeyGenerator"); addHMACAlias(provider, "SM3", GMObjectIdentifiers.hmac_sm3); } } }
新建DigestAlgorithmProvider.java文件
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
import org.bouncycastle.asn1.ASN1ObjectIdentifier; import org.bouncycastle.jcajce.provider.config.ConfigurableProvider; import org.bouncycastle.jcajce.provider.util.AlgorithmProvider; abstract class DigestAlgorithmProvider extends AlgorithmProvider { protected void addHMACAlgorithm(ConfigurableProvider provider, String algorithm, String algorithmClassName, String keyGeneratorClassName) { String mainName = "HMAC" + algorithm; provider.addAlgorithm("Mac." + mainName, algorithmClassName); provider.addAlgorithm("Alg.Alias.Mac.HMAC-" + algorithm, mainName); provider.addAlgorithm("Alg.Alias.Mac.HMAC/" + algorithm, mainName); provider.addAlgorithm("KeyGenerator." + mainName, keyGeneratorClassName); provider.addAlgorithm("Alg.Alias.KeyGenerator.HMAC-" + algorithm, mainName); provider.addAlgorithm("Alg.Alias.KeyGenerator.HMAC/" + algorithm, mainName); } protected void addHMACAlias(ConfigurableProvider provider, String algorithm, ASN1ObjectIdentifier oid) { String mainName = "HMAC" + algorithm; provider.addAlgorithm("Alg.Alias.Mac." + oid, mainName); provider.addAlgorithm("Alg.Alias.KeyGenerator." + oid, mainName); } }
新建测试类HmacTest.java
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
import java.security.MessageDigest; import java.security.Security; import javax.crypto.Mac; import javax.crypto.SecretKey; import javax.crypto.spec.SecretKeySpec; import org.bouncycastle.jce.provider.BouncyCastleProvider; import org.bouncycastle.util.encoders.Hex; public class HmacTest { static byte[] keyBytes = Hex.decode("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b"); static byte[] message = Hex.decode("4869205468657265"); public static void main(String[] args) throws Exception { BouncyCastleProvider bcp = new BouncyCastleProvider(); Security.addProvider(bcp); new SM3.Mappings().configure(bcp); for (String s : Security.getAlgorithms("Mac")) { if (s.contains("HMACSM3")) { System.out.println(true); break; } } HmacTest hmactest = new HmacTest(); hmactest.testHMac("HMAC-SM3"); } public void testHMac(String hmacName) throws Exception { SecretKey key = new SecretKeySpec(keyBytes, hmacName); byte[] out,out1; // SM3 MessageDigest sm3 = MessageDigest.getInstance("SM3", "BC"); out1 = sm3.digest(message); System.out.println(Hex.toHexString(out1)); // HMAC-SM3 Mac mac = Mac.getInstance(hmacName, "BC"); mac.init(key); mac.reset(); mac.update(message, 0, message.length); out = mac.doFinal(); System.out.println(Hex.toHexString(out)); } }
三、所有遇到的问题
1、abstract class DigestAlgorithmProvider
2、bcprov.jar不能放到java/jre/ext中,因为会loadSM3$Hmac.class,不然会报下面的exception。所以jar要和class使用相同的classloader。
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
Exception in thread "main" java.security.NoSuchAlgorithmException: class configured for Mac (provider: BC) cannot be found. at java.security.Provider$Service.getImplClass(Provider.java:1649) at java.security.Provider$Service.newInstance(Provider.java:1592) at sun.security.jca.GetInstance.getInstance(GetInstance.java:236) at javax.crypto.JceSecurity.getInstance(JceSecurity.java:103) at javax.crypto.Mac.getInstance(Mac.java:222) at cn.com.infosec.HmacSM3.HmacTest.testHMac(HmacTest.java:37) at cn.com.infosec.HmacSM3.HmacTest.main(HmacTest.java:30) Caused by: java.lang.ClassNotFoundException: com.gsealy.HmacSM3.SM3X$HashMac at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) at java.security.Provider$Service.getImplClass(Provider.java:1636) ... 6 more
具体classloader可以看http://blog.csdn.net/xyang81/article/details/7292380