bouncycastle中添加HMAC-SM3支持

一、

最近看完了PKCS#5中的内容，总结一下自己添加HMAC-SM3中遇到的问题和解决方法。

大概通读BC java源码以后，开始上手修改。

在SM3.java中添加如下代码：

/**

   * SM3 HashMac

   */

  public static class HashMac extends BaseMac {

    public HashMac() {

      super(new HMac(new SM3Digest()));

    }

  }

  public static class KeyGenerator extends BaseKeyGenerator {

    public KeyGenerator() {

      super("HMACSM3", 256, new CipherKeyGenerator());

    }

  }

  public static class Mappings extends DigestAlgorithmProvider {

    private static final String PREFIX = SM3.class.getName();

    public Mappings() {}

    @Override

    public void configure(ConfigurableProvider provider) {

      addHMACAlgorithm(provider, "SM3", PREFIX + "$HashMac", PREFIX + "$KeyGenerator");

      addHMACAlias(provider, "SM3", GMObjectIdentifiers.hmac_sm3);

    }

  }

直接修改BC源码有一个问题，就是打包后无法使用java信任的签名签证。

所以找新的方法。。。

二、

新建项目->

新建SM3.java文件

import org.bouncycastle.asn1.gm.GMObjectIdentifiers;

import org.bouncycastle.crypto.CipherKeyGenerator;

import org.bouncycastle.crypto.digests.SM3Digest;

import org.bouncycastle.crypto.macs.HMac;

import org.bouncycastle.jcajce.provider.config.ConfigurableProvider;

import org.bouncycastle.jcajce.provider.symmetric.util.BaseKeyGenerator;

import org.bouncycastle.jcajce.provider.symmetric.util.BaseMac;

public class SM3 {

  private SM3() {}

  /**

   * SM3 HashMac

   */

  public static class HashMac extends BaseMac {

    public HashMac() {

      super(new HMac(new SM3Digest()));

    }

  }

  public static class KeyGenerator extends BaseKeyGenerator {

    public KeyGenerator() {

      super("HMACSM3", 256, new CipherKeyGenerator());

    }

  }

  public static class Mappings extends DigestAlgorithmProvider {

    private static final String PREFIX = SM3.class.getName();

    public Mappings() {}

    @Override

    public void configure(ConfigurableProvider provider) {

      addHMACAlgorithm(provider, "SM3", PREFIX + "$HashMac", PREFIX + "$KeyGenerator");

      addHMACAlias(provider, "SM3", GMObjectIdentifiers.hmac_sm3);

    }

  }

}

新建DigestAlgorithmProvider.java文件

import org.bouncycastle.asn1.ASN1ObjectIdentifier;

import org.bouncycastle.jcajce.provider.config.ConfigurableProvider;

import org.bouncycastle.jcajce.provider.util.AlgorithmProvider;

abstract class DigestAlgorithmProvider extends AlgorithmProvider {

  protected void addHMACAlgorithm(ConfigurableProvider provider, String algorithm,

      String algorithmClassName, String keyGeneratorClassName) {

    String mainName = "HMAC" + algorithm;

    provider.addAlgorithm("Mac." + mainName, algorithmClassName);

    provider.addAlgorithm("Alg.Alias.Mac.HMAC-" + algorithm, mainName);

    provider.addAlgorithm("Alg.Alias.Mac.HMAC/" + algorithm, mainName);

    provider.addAlgorithm("KeyGenerator." + mainName, keyGeneratorClassName);

    provider.addAlgorithm("Alg.Alias.KeyGenerator.HMAC-" + algorithm, mainName);

    provider.addAlgorithm("Alg.Alias.KeyGenerator.HMAC/" + algorithm, mainName);

  }

  protected void addHMACAlias(ConfigurableProvider provider, String algorithm,

      ASN1ObjectIdentifier oid) {

    String mainName = "HMAC" + algorithm;

    provider.addAlgorithm("Alg.Alias.Mac." + oid, mainName);

    provider.addAlgorithm("Alg.Alias.KeyGenerator." + oid, mainName);

  }

}

新建测试类HmacTest.java

import java.security.MessageDigest;

import java.security.Security;

import javax.crypto.Mac;

import javax.crypto.SecretKey;

import javax.crypto.spec.SecretKeySpec;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

import org.bouncycastle.util.encoders.Hex;

public class HmacTest {

  static byte[] keyBytes = Hex.decode("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b");

  static byte[] message = Hex.decode("4869205468657265");

  public static void main(String[] args) throws Exception {

    BouncyCastleProvider bcp = new BouncyCastleProvider();

    Security.addProvider(bcp);

    new SM3.Mappings().configure(bcp);

    for (String s : Security.getAlgorithms("Mac")) {

      if (s.contains("HMACSM3")) {

        System.out.println(true);

        break;

      }

    }

    HmacTest hmactest = new HmacTest();

    hmactest.testHMac("HMAC-SM3");

  }

  public void testHMac(String hmacName) throws Exception {

    SecretKey key = new SecretKeySpec(keyBytes, hmacName);

    byte[] out,out1;

    // SM3

    MessageDigest sm3 = MessageDigest.getInstance("SM3", "BC");

    out1 = sm3.digest(message);

    System.out.println(Hex.toHexString(out1));

    // HMAC-SM3

    Mac mac = Mac.getInstance(hmacName, "BC");

    mac.init(key);

    mac.reset();

    mac.update(message, 0, message.length);

    out = mac.doFinal();

    System.out.println(Hex.toHexString(out));

  }

}

三、所有遇到的问题

1、abstract class DigestAlgorithmProvider

2、bcprov.jar不能放到java/jre/ext中，因为会loadSM3$Hmac.class，不然会报下面的exception。所以jar要和class使用相同的classloader。

Exception in thread "main" java.security.NoSuchAlgorithmException: class configured for Mac (provider: BC) cannot be found.

at java.security.Provider$Service.getImplClass(Provider.java:1649)

at java.security.Provider$Service.newInstance(Provider.java:1592)

at sun.security.jca.GetInstance.getInstance(GetInstance.java:236)

at javax.crypto.JceSecurity.getInstance(JceSecurity.java:103)

at javax.crypto.Mac.getInstance(Mac.java:222)

at cn.com.infosec.HmacSM3.HmacTest.testHMac(HmacTest.java:37)

at cn.com.infosec.HmacSM3.HmacTest.main(HmacTest.java:30)

Caused by: java.lang.ClassNotFoundException: com.gsealy.HmacSM3.SM3X$HashMac

at java.net.URLClassLoader.findClass(URLClassLoader.java:381)

at java.lang.ClassLoader.loadClass(ClassLoader.java:424)

at java.lang.ClassLoader.loadClass(ClassLoader.java:357)

at java.security.Provider$Service.getImplClass(Provider.java:1636)

... 6 more

具体classloader可以看http://blog.csdn.net/xyang81/article/details/7292380

巴特西

bouncycastle中添加HMAC-SM3支持

最新文章

热门文章