package com.sishuok.es.common.utils.security;
// package com.bitzi.util;
/* (PD) 2001 The Bitzi Corporation
* Please see http://bitzi.com/publicdomain for more info.
*
* Base32.java
*
*/
/**
* Added by jonelo@jonelo.de:
*
* From http://www.gnu.org/licenses/license-list.html:
* Being in the public domain is not a license--rather, it means the material is
* not copyrighted and no license is needed. Practically speaking, though, if a
* work is in the public domain, it might as well have an all-permissive non-copyleft
* free software license. Public domain status is compatible with the GNU GPL.
*
* As this class has been released under the public domain,
* it has been corporated into the sugar package which is released under the LGPL
*
*/
/**
* Base32 - encodes and decodes 'Canonical' Base32
*
* @author Robert Kaye & Gordon Mohr
*/
public class Base32 {
private static final String base32Chars =
"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
private static final int[] base32Lookup =
{0xFF, 0xFF, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, // '0', '1', '2', '3', '4', '5', '6', '7'
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, // '8', '9', ':', ';', '<', '=', '>', '?'
0xFF, 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, // '@', 'A', 'B', 'C', 'D', 'E', 'F', 'G'
0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, // 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O'
0x0F, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, // 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W'
0x17, 0x18, 0x19, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, // 'X', 'Y', 'Z', '[', '\', ']', '^', '_'
0xFF, 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, // '`', 'a', 'b', 'c', 'd', 'e', 'f', 'g'
0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, // 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o'
0x0F, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, // 'p', 'q', 'r', 's', 't', 'u', 'v', 'w'
0x17, 0x18, 0x19, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF // 'x', 'y', 'z', '{', '|', '}', '~', 'DEL'
};
static public String encode(final byte[] bytes) {
int i = 0, index = 0, digit = 0;
int currByte, nextByte;
// begin fix
// added by jonelo@jonelo.de, Feb 13, 2005
// according to RFC 3548, the encoding must also contain paddings in some cases
int add = 0;
switch (bytes.length) {
case 1:
add = 6;
break;
case 2:
add = 4;
break;
case 3:
add = 3;
break;
case 4:
add = 1;
break;
}
// end fix
StringBuffer base32 = new StringBuffer(((bytes.length + 7) * 8 / 5) + add);
while (i < bytes.length) {
currByte = (bytes[i] >= 0) ? bytes[i] : (bytes[i] + 256); // unsign
/* Is the current digit going to span a byte boundary? */
if (index > 3) {
if ((i + 1) < bytes.length)
nextByte = (bytes[i + 1] >= 0) ? bytes[i + 1] : (bytes[i + 1] + 256);
else
nextByte = 0;
digit = currByte & (0xFF >> index);
index = (index + 5) % 8;
digit <<= index;
digit |= nextByte >> (8 - index);
i++;
} else {
digit = (currByte >> (8 - (index + 5))) & 0x1F;
index = (index + 5) % 8;
if (index == 0)
i++;
}
base32.append(base32Chars.charAt(digit));
}
// begin fix
// added by jonelo@jonelo.de, Feb 13, 2005
// according to RFC 3548, the encoding must also contain paddings in some cases
switch (bytes.length) {
case 1:
base32.append("======");
break;
case 2:
base32.append("====");
break;
case 3:
base32.append("===");
break;
case 4:
base32.append("=");
break;
}
// end fix
return base32.toString();
}
static public byte[] decode(final String base32) {
int i, index, lookup, offset, digit;
byte[] bytes = new byte[base32.length() * 5 / 8];
for (i = 0, index = 0, offset = 0; i < base32.length(); i++) {
lookup = base32.charAt(i) - '0';
/* Skip chars outside the lookup table */
if (lookup < 0 || lookup >= base32Lookup.length)
continue;
digit = base32Lookup[lookup];
/* If this digit is not in the table, ignore it */
if (digit == 0xFF)
continue;
if (index <= 3) {
index = (index + 5) % 8;
if (index == 0) {
bytes[offset] |= digit;
offset++;
if (offset >= bytes.length) break;
} else
bytes[offset] |= digit << (8 - index);
} else {
index = (index + 5) % 8;
bytes[offset] |= (digit >>> index);
offset++;
if (offset >= bytes.length) break;
bytes[offset] |= digit << (8 - index);
}
}
return bytes;
}
/**
* For testing, take a command-line argument in Base32, decode, print in hex,
* encode, print
*/
static public void main(String[] args) {
if (args.length == 0) {
System.out.println("Supply a Base32-encoded argument.");
return;
}
System.out.println(" Original: " + args[0]);
byte[] decoded = Base32.decode(args[0]);
System.out.print(" Hex: ");
for (int i = 0; i < decoded.length; i++) {
int b = decoded[i];
if (b < 0) b += 256;
System.out.print((Integer.toHexString(b + 256)).substring(1));
}
System.out.println();
System.out.println("Reencoded: " + Base32.encode(decoded));
}
}
package com.sishuok.es.common.utils.security;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.io.UnsupportedEncodingException;
public class CipherTools {
private final static Logger log = LoggerFactory.getLogger(CipherTools.class);
private static final String CHARSET_NAME = "UTF-8";
public static String initKey(String key) {
try {
return DESCoder.initKey(key);
} catch (Exception e) {
e.printStackTrace();
log.error("initKey error " + e);
}
return key;
}
private static String encoding(byte[] bytes) throws Exception {
return Base32.encode(bytes);
}
private static byte[] decoding(String value) throws Exception {
return Base32.decode(value);
}
private static byte[] encrypt(String key, byte[] data) throws Exception {
return DESCoder.encrypt(data, key);
}
public static String encrypt(String value, String key) {
try {
byte[] data;
if (!StringUtils.isEmpty(CHARSET_NAME)) {
try {
data = value.getBytes(CHARSET_NAME);
} catch (Exception e1) {
log.error("charset " + CHARSET_NAME + " Unsupported!", e1);
data = value.getBytes();
}
} else {
data = value.getBytes();
}
byte[] bytes = encrypt(key, data);
return encoding(bytes);
} catch (Exception e) {
log.error("encrypt error", e);
return null;
}
}
private static byte[] decrypt(String key, byte[] data) throws Exception {
return DESCoder.decrypt(data, key);
}
public static String decrypt(String value, String key) {
try {
byte[] data = decoding(value);
byte[] bytes = decrypt(key, data);
if (!StringUtils.isEmpty(CHARSET_NAME)) {
try {
return new String(bytes, CHARSET_NAME);
} catch (UnsupportedEncodingException e1) {
log.error("charset " + CHARSET_NAME + " Unsupported!", e1);
return new String(bytes);
}
} else {
return new String(bytes);
}
} catch (Exception e) {
log.error("decrypt error", e);
return null;
}
}
}
package com.sishuok.es.common.utils.security;
import sun.misc.BASE64Decoder;
import sun.misc.BASE64Encoder;
import java.security.MessageDigest;
/**
* 基础加密组件
*
* @version 1.0
* @since 1.0
*/
public abstract class Coder {
public static final String KEY_SHA = "SHA";
/**
* BASE64解密
*
* @param key
* @return
* @throws Exception
*/
public static String decryptBASE64ToStr(String key) throws Exception {
return new String((new BASE64Decoder()).decodeBuffer(key), "UTF-8");
}
public static byte[] decryptBASE64(String key) throws Exception {
return (new BASE64Decoder()).decodeBuffer(key);
}
/**
* BASE64加密
*
* @param bytes
* @return
* @throws Exception
*/
public static String encryptBASE64(byte[] bytes) throws Exception {
return (new BASE64Encoder()).encode(bytes);
}
public static String encryptStrToBASE64(String str) throws Exception {
return (new BASE64Encoder()).encode(str.getBytes("UTF-8"));
}
public static String encryptMD5(String str) {
return Md5Utils.hash(str);
}
/**
* SHA加密
*
* @param data
* @return
* @throws Exception
*/
public static byte[] encryptSHA(byte[] data) throws Exception {
MessageDigest sha = MessageDigest.getInstance(KEY_SHA);
sha.update(data);
return sha.digest();
}
/**
* Turns array of bytes into string
*
* @param buf Array of bytes to convert to hex string
* @return Generated hex string
*/
public static String asHex(byte buf[]) {
StringBuffer strbuf = new StringBuffer(buf.length * 2);
int i;
for (i = 0; i < buf.length; i++) {
if (((int) buf[i] & 0xff) < 0x10)
strbuf.append("0");
strbuf.append(Long.toString((int) buf[i] & 0xff, 16));
}
return strbuf.toString();
}
}
package com.sishuok.es.common.utils.security;
import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import java.security.Key;
/**
* DES安全编码组件
* <p/>
* <pre>
* 支持 DES、DESede(TripleDES,就是3DES)、AES、Blowfish、RC2、RC4(ARCFOUR)
* DES key size must be equal to 56
* DESede(TripleDES) key size must be equal to 112 or 168
* AES key size must be equal to 128, 192 or 256,but 192 and 256 bits may not be available
* Blowfish key size must be multiple of 8, and can only range from 32 to 448 (inclusive)
* RC2 key size must be between 40 and 1024 bits
* RC4(ARCFOUR) key size must be between 40 and 1024 bits
* 具体内容 需要关注 JDK Document http://.../docs/technotes/guides/security/SunProviders.html
* </pre>
*
* @version 1.0
* @since 1.0
*/
public abstract class DESCoder extends Coder {
/**
* ALGORITHM 算法 <br>
* 可替换为以下任意一种算法,同时key值的size相应改变。
* <p/>
* <pre>
* DES key size must be equal to 56
* DESede(TripleDES) key size must be equal to 112 or 168
* AES key size must be equal to 128, 192 or 256,but 192 and 256 bits may not be available
* Blowfish key size must be multiple of 8, and can only range from 32 to 448 (inclusive)
* RC2 key size must be between 40 and 1024 bits
* RC4(ARCFOUR) key size must be between 40 and 1024 bits
* </pre>
* <p/>
* 在Key toKey(byte[] key)方法中使用下述代码
* <code>SecretKey secretKey = new SecretKeySpec(key, ALGORITHM);</code> 替换
* <code>
* DESKeySpec dks = new DESKeySpec(key);
* SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(ALGORITHM);
* SecretKey secretKey = keyFactory.generateSecret(dks);
* </code>
*/
public static final String ALGORITHM = "TripleDES";
/**
* 转换密钥<br>
*
* @param key
* @return
* @throws Exception
*/
private static Key toKey(byte[] key) throws Exception {
// DESKeySpec dks = new DESKeySpec(key);
// SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(ALGORITHM);
// SecretKey secretKey = keyFactory.generateSecret(dks);
// 当使用其他对称加密算法时,如AES、Blowfish等算法时,用下述代码替换上述三行代码
SecretKey secretKey = new SecretKeySpec(key, ALGORITHM);
return secretKey;
}
/**
* 解密
*
* @param data
* @param key
* @return
* @throws Exception
*/
public static byte[] decrypt(byte[] data, String key) throws Exception {
Key k = toKey(decryptBASE64(key));
Cipher cipher = Cipher.getInstance(ALGORITHM);
cipher.init(Cipher.DECRYPT_MODE, k);
return cipher.doFinal(data);
}
/**
* 加密
*
* @param data
* @param key
* @return
* @throws Exception
*/
public static byte[] encrypt(byte[] data, String key) throws Exception {
Key k = toKey(decryptBASE64(key));
Cipher cipher = Cipher.getInstance(ALGORITHM);
cipher.init(Cipher.ENCRYPT_MODE, k);
return cipher.doFinal(data);
}
/**
* 生成密钥
*
* @return
* @throws Exception
*/
public static String initKey() throws Exception {
return initKey(null);
}
/**
* 生成密钥
*
* @param seed
* @return
* @throws Exception
*/
public static String initKey(String seed) throws Exception {
seed = seed + "1234567890987654321012345678901234567890";
byte[] bytes = seed.getBytes();
byte[] result = new byte[24];
for (int i = 0; i < 24; i++) {
result[i] = bytes[i];
}
return encryptBASE64(result);
}
}
package com.sishuok.es.common.utils.security;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.security.MessageDigest;
public class Md5Utils {
private static final Logger LOGGER = LoggerFactory.getLogger(Md5Utils.class);
private static byte[] md5(String s) {
MessageDigest algorithm;
try {
algorithm = MessageDigest.getInstance("MD5");
algorithm.reset();
algorithm.update(s.getBytes("UTF-8"));
byte[] messageDigest = algorithm.digest();
return messageDigest;
} catch (Exception e) {
LOGGER.error("MD5 Error...", e);
}
return null;
}
private static final String toHex(byte hash[]) {
if (hash == null) {
return null;
}
StringBuffer buf = new StringBuffer(hash.length * 2);
int i;
for (i = 0; i < hash.length; i++) {
if ((hash[i] & 0xff) < 0x10) {
buf.append("0");
}
buf.append(Long.toString(hash[i] & 0xff, 16));
}
return buf.toString();
}
public static String hash(String s) {
try {
return new String(toHex(md5(s)).getBytes("UTF-8"), "UTF-8");
} catch (Exception e) {
LOGGER.error("not supported charset...{}", e);
return s;
}
}
}