package cn.com.yusys.yusp.uaa.security;

/**
 * @專案名稱: yusp-commons
 * @類名稱: RSAUtil
 * @類描述: 
 * @功能描述: 
 * @建立人: [email protected]
 * @建立時間: 2018-02-05 13:13
 * @修改備註: 
 * @修改記錄: 修改時間    修改人員    修改原因
 * -------------------------------------------------------------
 * @version 1.0.0
 * @Copyright (c) 201
 */
import java.io.ObjectInputStream;
import java.security.Key;
import java.security.KeyFactory;
import java.security.PublicKey;
import java.security.Security;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.X509EncodedKeySpec;

import javax.crypto.Cipher;

import org.apache.commons.codec.binary.Base64;
import org.springframework.util.Base64Utils;

import cn.com.yusys.yusp.commons.util.Base64Tools;

public class BCRSAUtil {

	private static RSAPublicKey pubKey = null;
	private static RSAPrivateKey priKey = null;
	private static String filePath = "C:\\private.key";
	private static String filePath2 = "C:\\public.key";

	static {
		try {
			Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());

			priKey = (RSAPrivateKey) readKey("private.key");
			pubKey = (RSAPublicKey) readKey("public.key");

		} catch (Exception err) {
			err.printStackTrace();
		}
	}

	private static Key readKey(String keyName) throws Exception {
		
		ObjectInputStream keyIn = new ObjectInputStream(BCRSAUtil.class.getClassLoader().getResourceAsStream(keyName));
		Key key = (Key) keyIn.readObject();
		keyIn.close();
		return key;
	}

	public static String decrypt(String rawStr) throws Exception {
		byte rst[] = decrypt(priKey,Base64.decodeBase64(rawStr));
		return new String(rst);
	}

	public static byte[] decrypt(Key key, byte[] raw) throws Exception {
		Cipher cipher = Cipher.getInstance("RSA/None/PKCS1Padding", "BC");
		cipher.init(Cipher.DECRYPT_MODE, key);
		return cipher.doFinal(raw);
	}
	
	/**
	  * 使用RSA公鑰加密資料
	  * 
	  * @param pubKeyInByte
	  *            打包的byte[]形式公鑰
	  * @param data
	  *            要加密的資料
	  * @return 加密資料
	  */
	public static byte[] encryptByRSA(byte[] pubKeyInByte, byte[] data) {
	  try {
	   KeyFactory mykeyFactory = KeyFactory.getInstance("RSA");
	   X509EncodedKeySpec pub_spec = new X509EncodedKeySpec(pubKeyInByte);
	   PublicKey pubKey = mykeyFactory.generatePublic(pub_spec);
	   Cipher cipher = Cipher.getInstance("RSA/None/PKCS1Padding", "BC");
	   cipher.init(Cipher.ENCRYPT_MODE, pubKey);
	   return cipher.doFinal(data);
	  } catch (Exception e) {
	   return null;
	  }
	}
	
	/**
	 * @方法名稱:encryptByPublicKey
	 * @方法描述:公鑰加密
	 * @引數與返回說明:加密結果
	 * @演算法描述:
	 */
	public static byte[] encryptByPublicKey(byte[] data, String publicKey) throws Exception {
		byte[] keyBytes = Base64Utils.decodeFromString(publicKey);
		X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(keyBytes);
		KeyFactory keyFactory = KeyFactory.getInstance("RSA");
		Key publicK = keyFactory.generatePublic(x509KeySpec);
		Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
		cipher.init(Cipher.ENCRYPT_MODE, publicK);

		return cipher.doFinal(data);
	}
	public static void main(String[] args) {

		String orgString = "159753";

		String encryptString = "";
		String decryptString = "";

		RSAPublicKey pubKey = null;
		RSAPrivateKey priKey = null;
		try {
			// 3- 服務端私鑰
			priKey = (RSAPrivateKey) readKey("private.key");
			// 4- 服務端公鑰
			pubKey = (RSAPublicKey) readKey("public.key");

			System.out.println("priKey:\n" + priKey + "\n");
			System.out.println("pubKey:\n" + pubKey + "\n");
		} catch (Exception e) {
			e.printStackTrace();
		}

		System.out.println("\n=============================== Step-1:服務端公鑰加密-服務端私鑰解密\n");

		// 服務端公鑰加密-服務端私鑰解密
		try {
			byte[] data = orgString.getBytes();

			// 加密資料
			byte[] encodedData = BCRSAUtil.encryptByPublicKey(data,Base64Tools.encodeToString(pubKey.getEncoded(), false));
			encryptString = new String(encodedData);
			String base64decryptString = Base64Tools.encodeToString(encodedData, false);
			String base64decrypt = new String(Base64Tools.decode(base64decryptString));

			

			System.out.println("orginalString:" + orgString+"\n");
			System.out.println("encrypString:" + encryptString+"\n");
			System.out.println("base64decryptString:" + base64decryptString+"\n");
			System.out.println("base64decrypt:" + base64decrypt+"\n");
			decryptString = BCRSAUtil.decrypt(base64decryptString);
			System.out.println("decryptString:" + decryptString);
		} catch (Exception e) {
			System.err.println(e.getMessage());
			System.err.println("Step-5  解密失敗!");
		}
	}

}