Question

我尝试在https://stackoverflow.com/a/33216302/4727842处实施解决方案。我的代码看起来像这样

private fun readPublicKey(input: InputStream): PGPPublicKey {
    val publicKey = PGPPublicKeyRingCollection(PGPUtil.getDecoderStream(input), BcKeyFingerprintCalculator())
    var key: PGPPublicKey? = null

    publicKey.keyRings.forEach { ring: PGPPublicKeyRing ->
        ring.publicKeys.forEach { k: PGPPublicKey ->
            if (k.isEncryptionKey) {
                key = k
            }
        }
    }

    if (key == null) {
        throw IllegalArgumentException("Can't find encryption key input key ring.")
    } else {
        return key!!
    }
}

private fun encrypt(file: File): String {
    val input = IOUtils.toInputStream("pub.asc", "UTF-8")
    val key = readPublicKey(input)

    Security.addProvider(BouncyCastleProvider())

    val out = ByteArrayOutputStream()
    val compressor = PGPCompressedDataGenerator(PGPCompressedData.ZIP)

    PGPUtil.writeFileToLiteralData(compressor.open(out), PGPLiteralData.BINARY, file)
    compressor.close()

    val builder = BcPGPDataEncryptorBuilder(SymmetricKeyAlgorithmTags.TRIPLE_DES)
    val generator = PGPEncryptedDataGenerator(builder.setSecureRandom(SecureRandom()))

    generator.addMethod(BcPublicKeyKeyEncryptionMethodGenerator(key))

    return String(out.toByteArray())
}

使用gpg cli（v2.2.15），生成密钥后，我将输出asc文件。

gpg -ab -o ./pub.asc

其内容如下

然后加上

val input = IOUtils.toInputStream("pub.asc", "UTF-8")

我试图跑步。无法提取密钥后，它将输出消息"Can't find encryption key input key ring."。调试后，我发现publicKey.keyRings的大小为0。

我不了解这种情况，因为链接指南似乎主张在我认为用于签名时使用.asc文件进行加密。我对PGP不太了解，但我认为这些步骤是不同的，也许对于我的用例而言，签名不是必需的。

因此，我尝试导出公钥

gpg --export -a "User" > public.key

包含

并与

一起运行

val input = IOUtils.toInputStream("public.key", "UTF-8")

这没有变化。 bouncycastle在我的公共密钥文件中未找到任何密钥。然后我看到，由于我正在使用gpg2，因此在处理钥匙圈方面存在差异。我在https://stackoverflow.com/a/34221494/4727842处找到了一种将.pkr转换为.kbx的解决方案，但是到那时，这变得非常复杂。我不知道公钥环和公钥之间的区别。我不知道为什么第一个示例使用.asc文件作为假定有效的密钥环。我尤其不知道为什么从我的PGPPublicKey文件中创建一个充气城堡public.key对象如此困难。

Answer 1

如果您只想进行适当的加密/解密，请使用bouncy-gpg（无耻的插件：我是作者）。

也不使用3DES，它死了很慢，不是最现代的算法（尽管AFAIK仍然被认为是安全的）。

您通过gpg --export -a me@example.com导出公钥。

您可以使用InMemoryKeyring管理密钥（有关详细信息，请参见here）

public static KeyringConfig keyringConfigInMemoryForKeys(final String exportedPubKey, final String exportedPrivateKey, final String passphrase) throws IOException, PGPException {

   final InMemoryKeyring keyring = KeyringConfigs.forGpgExportedKeys(KeyringConfigCallbacks.withPassword(passphrase);

       keyring.addPublicKey(exportedPubKey.getBytes("US-ASCII"));
// you can add many more public keys

       // if you only want to encrypt you do not need a private key and can ignore this line
keyring.addSecretKey(exportedPrivateKey.getBytes("US-ASCII"));
// you can add many more private keys

return keyring;
}


final String original_message = "I love deadlines. I like the whooshing sound they make as they fly by. Douglas Adams";

// Most likely you will use  one of the KeyringConfigs.... methods.
KeyringConfig keyringConfigOfSender = keyringConfigInMemoryForKeys(..); // TODO - here comes your code to get keys

ByteArrayOutputStream result = new ByteArrayOutputStream();

try (
    BufferedOutputStream bufferedOutputStream = new BufferedOutputStream(result);

    final OutputStream outputStream = BouncyGPG
        .encryptToStream()
        .withConfig(keyringConfigOfSender)
        .withStrongAlgorithms()
        .toRecipients("recipient@example.com", "sender@example.com") // TODO - also your job to set the recipients 
        .andSignWith("sender@example.com") // TODO - same here
        .binaryOutput()
        .andWriteTo(bufferedOutputStream);
    // Maybe read a file or a webservice?
    final ByteArrayInputStream is = new ByteArrayInputStream(original_message.getBytes())
) {
  Streams.pipeAll(is, outputStream);
// It is very important that outputStream is closed before the result stream is read.
// The reason is that GPG writes the signature at the end of the stream.
// This is triggered by closing the stream.
// In this example outputStream is closed via the try-with-resources mechanism of Java
}

result.close();
byte[] chipertext = result.toByteArray();

充气城堡开放gpg2公钥

1 个答案: