keypair java_java – 如何使用密码加密的私钥生成RSA keyPair？

我知道这有点迟了,但是我也一直在寻找一种方法来做到这一点,而我正在搜索我发现你的问题,现在我已经找到了一个方法,我决定回来分享一下：

// generate key pair

KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");

keyPairGenerator.initialize(1024);

KeyPair keyPair = keyPairGenerator.genKeyPair();

// extract the encoded private key, this is an unencrypted PKCS#8 private key

byte[] encodedprivkey = keyPair.getPrivate().getEncoded();

// We must use a PasswordBasedEncryption algorithm in order to encrypt the private key, you may use any common algorithm supported by openssl, you can check them in the openssl documentation http://www.openssl.org/docs/apps/pkcs8.html

String MYPBEALG = "PBEWithSHA1AndDESede";

String password = "pleaseChangeit!";

int count = 20;// hash iteration count

SecureRandom random = new SecureRandom();

byte[] salt = new byte[8];

random.nextBytes(salt);

// Create PBE parameter set

PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);

PBEKeySpec pbeKeySpec = new PBEKeySpec(password.toCharArray());

SecretKeyFactory keyFac = SecretKeyFactory.getInstance(MYPBEALG);

SecretKey pbeKey = keyFac.generateSecret(pbeKeySpec);

Cipher pbeCipher = Cipher.getInstance(MYPBEALG);

// Initialize PBE Cipher with key and parameters

pbeCipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);

// Encrypt the encoded Private Key with the PBE key

byte[] ciphertext = pbeCipher.doFinal(encodedprivkey);

// Now construct PKCS #8 EncryptedPrivateKeyInfo object

AlgorithmParameters algparms = AlgorithmParameters.getInstance(MYPBEALG);

algparms.init(pbeParamSpec);

EncryptedPrivateKeyInfo encinfo = new EncryptedPrivateKeyInfo(algparms, ciphertext);

// and here we have it! a DER encoded PKCS#8 encrypted key!

byte[] encryptedPkcs8 = encinfo.getEncoded();