Keytool 操作 keystore存AES256 key

由于近期的要写一个对称加密的module,遇到一些问题，在此做个笔记

AES 256原生Java jdk not support it. 需要替换掉其中的lib 下secret 里的两个将jar，此处百度十分好找，自行查找。

1.生成keyStore 文件，由于使用的是AES256位的key,使用jce提供的 jceks 文件格式。

keytool -genseckey -keystore c:\UserKeyStore.jceks -storetype jceks -storepass AESCrypto  -keyalg AES -keysize 256 -alias jceksaes

会提示别称jecksaes的key的密码是否和keystore的密码是否一致。为了安全考虑，keystore的访问是需要密码的，key的访问也需要密码，因为一个keystore可能存储多个key,每个key的存储格式为 entry  类似。

 c:\UserKeyStore.jceks  生成在c盘根目录下。

AESCrypto                     -storepass此处是访问keystore的密码

jceksaes                         -alias 参数后跟的是生成的key的别称

2.查了很多文档都没有详细说明当使用 keytool 工具修改keystore密码的command，多数都会报错。因为格式是jce的，所以有些问题。

keytool -storetype jceks -storepasswd -new 123456 -keystore c:\UserKeyStore.jceks -storepass AESCrypto

修改keystore 的密码从AESCrypto 换成 123456 ，多次报错的原因是因为storetype jceks没有带上，导致keytool工具认生。

3.使用keytool工具修改key 的password.

keytool -storetype jceks -keypasswd -alias jceksaes -new 654321 -keypass AESCrypto -keystore  c:\UserKeyStore.jceks  -storepass 123456

4.keytool read keystore ,同样加上参数-storetype jceks 后加上

package com.alions;

import java.io.File;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.security.Key;
import java.security.KeyStore;
import java.security.SecureRandom;
import java.security.Security;
import java.util.Base64;

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.spec.SecretKeySpec;

import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.junit.Test;

import sun.misc.BASE64Decoder;
import sun.misc.BASE64Encoder;

public class AES256{ 

	  public static boolean initialized = false;  
      
	  public static final String ALGORITHM = "AES/ECB/PKCS7Padding";  
	      
	    /** 
	     * @param  String str  要被加密的字符串 
	     * @param  byte[] key  加/解密要用的长度为32的字节数组（256位）密钥 
	     * @return byte[]  加密后的字节数组 
	     */  
	    public static String  Aes256Encode(String str, byte[] key){  
	        initialize();  
	        byte[] result = null; 
	        String encoded=null;
	        try{  
	        	
	            Cipher cipher = Cipher.getInstance(ALGORITHM, "BC");  
	            SecretKeySpec keySpec = new SecretKeySpec(key, "AES"); //生成加密解密需要的Key  
	            cipher.init(Cipher.ENCRYPT_MODE, keySpec);  
	            result = cipher.doFinal(str.getBytes("UTF-8"));
	            
	            BASE64Encoder encoder = new BASE64Encoder();
	    		encoded = encoder.encode(result);
	    		
	    		
	        }catch(Exception e){  
	            e.printStackTrace();  
	        }  
	        return encoded;  
	    }  
	      
	    /** 
	     * @param  byte[] bytes  要被解密的字节数组 
	     * @param  byte[] key    加/解密要用的长度为32的字节数组（256位）密钥 
	     * @return String  解密后的字符串 
	     */  
	    public static String Aes256Decode(String  encryptionStr, byte[] key){  
	        initialize();  
	        String result = null;  
	        try{  
	            Cipher cipher = Cipher.getInstance(ALGORITHM, "BC");  
	            SecretKeySpec keySpec = new SecretKeySpec(key, "AES"); //生成加密解密需要的Key  
	            cipher.init(Cipher.DECRYPT_MODE, keySpec);  
	            
	            BASE64Decoder decoder = new BASE64Decoder();
	    		byte[] bytes = decoder.decodeBuffer(encryptionStr);
	            
	            byte[] decoded = cipher.doFinal(bytes);  
	           
	            
	            result = new String(decoded, "UTF-8");  
	        }catch(Exception e){  
	            e.printStackTrace();  
	        }  
	        return result;  
	    }  
	      
	    public static void initialize(){  
	        if (initialized) return;  
	        Security.addProvider(new BouncyCastleProvider());  
	        initialized = true;  
	    } 
	    
	
	    /***\
	     * 存储当前的key
	     */
	    private String pwd="AESCrypto";
	    @Test
	    public void saveUserKey(){
	    	try{
	    		File keyStorefile =new File("./UserKeyStore.jceks");
	    		
		    	KeyStore keyStore = KeyStore.getInstance("JCEKS");
		    	//create a new  the  paremete is null , pwd is null
				if(AES256.isFileExists(keyStorefile)){
					keyStore.load(new FileInputStream(keyStorefile), pwd.toCharArray());  			
				}else{
					//新建
					keyStore.load(null, null);
				}
		    	KeyGenerator keyGen = KeyGenerator.getInstance("AES");
		    	String password="admin";
		    	
		        keyGen.init(256,new SecureRandom(password.getBytes()));
		        
		        Key key=keyGen.generateKey();
		        byte[] enCodeFormat = key.getEncoded();
		        System.out.println(enCodeFormat.length);
//Ss/jICpf9c9GeJj8WKqx1hUClEEELCSL9GF/s23xx5M=
		        String strTempKey=Base64.getEncoder().encodeToString(enCodeFormat);
		        
		        System.out.println(strTempKey);
		        System.out.println(strTempKey.length());
		        keyStore.setKeyEntry("TMOKey", key, "AESCrypto".toCharArray(), null);
		        keyStore.store(new FileOutputStream(keyStorefile), pwd.toCharArray());	
	    	}catch (Exception ex) {
	    	    ex.printStackTrace();
	    	}
	    }
	    
	    /**
	     * get the key from the key store
	     * keytool -genseckey -keystore UserKeyStore.jceks -storetype jceks -storepass AESCrypto -keyalg AES -keysize 256 -alias jceksaes 
	     * 
	     * AESCrypto keystore的存储密钥
	     * 
	     */
	    @Test
	    public void getKeyFromKeyStore(){
	    	try{
	    		File keyStorefile =new File("./UserKeyStore.jceks");
	    		
				KeyStore keyStore = KeyStore.getInstance("JCEKS");
				if(AES256.isFileExists(keyStorefile)){
					keyStore.load(new FileInputStream(keyStorefile),"AESCrypto".toCharArray());
				}else{
					throw new Exception("No UserKeyStore.JCEKS exists");
				}
				//Mb25QS0ytWTjzybaBgk4kNx8fzw/ClxsAIyYQJBBFSQ=
				Key key = keyStore.getKey("jceksaes", "AESCrypto".toCharArray());
				byte[] enCodeFormat = key.getEncoded();
				System.out.println(enCodeFormat.length);
		        String strTempKey=Base64.getEncoder().encodeToString(enCodeFormat);
				System.out.println(strTempKey.toString());
				
	    	}catch(Exception ex){
	    	    ex.printStackTrace();
	    	}
	    }
	    
	 // 判断文件夹是否存在
	    public static void judeDirExists(File file) {

	        if (file.exists()) {
	            if (file.isDirectory()) {
	                System.out.println("dir exists");
	            } else {
	                System.out.println("the same name file exists, can not create dir");
	            }
	        } else {
	            System.out.println("dir not exists, create it ...");
	            file.mkdir();
	        }

	    }

	    // 判断文件是否存在
	    public static boolean isFileExists(File file) {

	        if (file.exists()) {
	            System.out.println("file exists");
	            return true;
	        } else {
	            System.out.println("file not exists, create it ...");
	            return false;
	        }

	    }
	    
	    
//	    public static void main(String agrs[]){
//	    	byte[] keys={33, 34, 35, 36, 37, 38, 39, 40, 4, 42, 43, 44, 45, 46, 47, 58, 59, 60, 6, 62, 63, 64, 9, 92, 93, 94, 95, 96, 23, 24, 25, 26};
//	    	String str="i love  dsgfsdsf life";
//	    	String resultBytes=AES256.Aes256Encode(str, keys);
//	    	System.out.println("this is the clear text:" +str);
//	    	System.out.print("this is after encryption word: ");
//	    	//print the resultKey array
//	    	System.out.println(resultBytes);
//	    	
//	    	System.out.print("this is the word after decryption :");
//	    	String decryptionStr=AES256.Aes256Decode(resultBytes, keys);
//	    	System.out.println(decryptionStr);	    	
//	    	
//	    }
}
        

-list 以及其他参数即可读取

附上一段java代码，本人测试使用