android - SpongyCastle：确定密码时出错

Question

在一个Android项目中，我需要对我的应用程序进行 https 连接的身份验证。使用以下方法，我试图解密我的私钥，由服务器开发人员在.pem文件中提供。我使用SpongyCastle，并且在方法所在的同一类的顶部，我已经像这样更改了安全提供程序：

    static {
    Security.insertProviderAt(new org.spongycastle.jce.provider.BouncyCastleProvider(), 1);
}

在这种情况下，我的对象是PKCS8EncryptedPrivateKeyInfo的一个实例。这是方法：

    /**
     * Parses a PrivateKey instance from a PEM representation.
     *
     * When the provided key is encrypted, the provided pass phrase is applied.
     *
     * @param pemRepresentation a PEM representation of a private key (cannot be null or empty)
     * @param passPhrase optional pass phrase (must be present if the private key is encrypted).
     * @return a PrivateKey instance (never null)
     */
public static PrivateKey parsePrivateKey(InputStream pemRepresentation, String passPhrase) throws IOException {

if ( passPhrase == null ) {
    passPhrase = "";
}
try (Reader reader = new InputStreamReader(pemRepresentation); //
        PEMParser pemParser = new PEMParser(reader)) {

    final Object object = pemParser.readObject();
    final JcaPEMKeyConverter converter = new JcaPEMKeyConverter().setProvider( "BC" );

    final KeyPair kp;

    if ( object instanceof PEMEncryptedKeyPair )
    {
        // Encrypted key - we will use provided password
        final PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder().build( passPhrase.toCharArray() );
        kp = converter.getKeyPair( ( (PEMEncryptedKeyPair) object ).decryptKeyPair( decProv ) );
    }
    else if ( object instanceof PKCS8EncryptedPrivateKeyInfo )
    {
        // Encrypted key - we will use provided password
        try
        {
            final PKCS8EncryptedPrivateKeyInfo encryptedInfo = (PKCS8EncryptedPrivateKeyInfo) object;
            final InputDecryptorProvider provider = new JceOpenSSLPKCS8DecryptorProviderBuilder().build( passPhrase.toCharArray() );
            final PrivateKeyInfo privateKeyInfo = encryptedInfo.decryptPrivateKeyInfo( provider );
            return converter.getPrivateKey( privateKeyInfo );
        }
        catch ( PKCSException | OperatorCreationException e )
        {
            throw new IOException( "Unable to decrypt private key.", e );
        }
    }
    else if ( object instanceof PrivateKeyInfo )
    {
        return converter.getPrivateKey( (PrivateKeyInfo) object );
    }
    else
    {
        // Unencrypted key - no password needed
        kp = converter.getKeyPair( (PEMKeyPair) object );
    }
    return kp.getPrivate();
}
}

当我到达时：

encryptedInfo.decryptPrivateKeyInfo( provider );

我遇到以下异常：

org.spongycastle.pkcs.PKCSException: unable to read encrypted data: Error while finalizing cipher
    at org.spongycastle.pkcs.PKCS8EncryptedPrivateKeyInfo.decryptPrivateKeyInfo(PKCS8EncryptedPrivateKeyInfo.java:73)
    [...]
    at android.view.View.performClick(View.java:5184)
    at android.view.View$PerformClick.run(View.java:20893)
    at android.os.Handler.handleCallback(Handler.java:739)
    at android.os.Handler.dispatchMessage(Handler.java:95)
    at android.os.Looper.loop(Looper.java:145)
    at android.app.ActivityThread.main(ActivityThread.java:5938)
    at java.lang.reflect.Method.invoke(Native Method)
    at java.lang.reflect.Method.invoke(Method.java:372)
    at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:1400)
    at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1195)
Caused by: java.io.IOException: Error while finalizing cipher
    at javax.crypto.CipherInputStream.fillBuffer(CipherInputStream.java:104)
    at javax.crypto.CipherInputStream.read(CipherInputStream.java:155)
    at org.spongycastle.util.io.Streams.pipeAll(Streams.java:114)
    at org.spongycastle.util.io.Streams.readAll(Streams.java:41)
    at org.spongycastle.pkcs.PKCS8EncryptedPrivateKeyInfo.decryptPrivateKeyInfo(PKCS8EncryptedPrivateKeyInfo.java:69)
    ... 21 more
Caused by: javax.crypto.BadPaddingException: pad block corrupted
    at org.spongycastle.jcajce.provider.symmetric.util.BaseBlockCipher$BufferedGenericBlockCipher.doFinal(BaseBlockCipher.java:1227)
    at org.spongycastle.jcajce.provider.symmetric.util.BaseBlockCipher.engineDoFinal(BaseBlockCipher.java:1103)
    at javax.crypto.Cipher.doFinal(Cipher.java:1314)
    at javax.crypto.CipherInputStream.fillBuffer(CipherInputStream.java:102)
    ... 25 more

有什么建议吗？谢谢。

标签： androidbouncycastlepemspongycastle