如何从生成的 ecdsa 密钥中填充 jsonwebkey答案

【问题标题】：how to populate a jsonwebkey from a generated ecdsa key如何从生成的 ecdsa 密钥中填充 jsonwebkey
【发布时间】：2015-09-17 04:54:48
【问题描述】：

我尝试生成一个公钥/私钥对，我将使用它来对带有jose4j 的 JWT 进行数字签名。我用Elliptic Curve Digital Signature Algorithm

我的问题是我不知道如何获取代表edcsa键含义的参数：

 KeyPairGenerator g = KeyPairGenerator.getInstance("EC");
 ECGenParameterSpec kpgparams = new ECGenParameterSpec("secp256r1");
 g.initialize(kpgparams);

 KeyPair pair = g.generateKeyPair();
 // Instance of signature class with SHA256withECDSA algorithm
 Signature ecdsaSign = Signature.getInstance("SHA256withECDSA");
 ecdsaSign.initSign(pair.getPrivate());

 System.out.println("Private Keys is::" + pair.getPrivate());
 System.out.println("Public Keys is::" + pair.getPublic());

JsonWebKeySet jsonWebKeySet = new JsonWebKeySet();
PrivateKey privateKey = pair.getPrivate();
JsonWebKey webKey = new  JsonWebKey(privateKey) {

    @Override
    public String getKeyType() {
        // TODO Auto-generated method stub
        return "EC";
    }

    @Override
    protected void fillTypeSpecificParams(Map<String, Object> params,
            OutputControlLevel outputLevel) {
        params.put("use", "sig");
        params.put("key_ops", "sign");
        params.put("alg", "ES256");
        params.put("kid", "kukuPrivateKey");

    }
};
jsonWebKeySet.addJsonWebKey(webKey);
System.out.println("aaaa"+jsonWebKeySet.toJson());

【问题讨论】：

标签： cryptography public-key-encryption jwt ecdsa jose4j

【解决方案1】：

您可以使用您生成的公钥直接创建 JsonWebKey，而 jose4j 将负责参数和编码。

    KeyPairGenerator g = KeyPairGenerator.getInstance("EC");
    ECGenParameterSpec kpgparams = new ECGenParameterSpec("secp256r1");
    g.initialize(kpgparams);

    KeyPair keyPair = g.generateKeyPair();

    PublicJsonWebKey jwk = PublicJsonWebKey.Factory.newPublicJwk(keyPair.getPublic());
    jwk.setPrivateKey(keyPair.getPrivate());
    jwk.setUse(Use.SIGNATURE);

    System.out.println(jwk.toJson(JsonWebKey.OutputControlLevel.PUBLIC_ONLY));
    System.out.println(jwk.toJson(JsonWebKey.OutputControlLevel.INCLUDE_PRIVATE)); // to include the private key 'd'

您还可以使用 jose4j 中的EcJwkGenerator 实用程序来生成密钥对并将其包装在 JsonWebKey 中，

    EllipticCurveJsonWebKey jwk = EcJwkGenerator.generateJwk(EllipticCurves.P256);
    jwk.setUse(Use.SIGNATURE);

    System.out.println(jwk.toJson(JsonWebKey.OutputControlLevel.PUBLIC_ONLY));
    System.out.println(jwk.toJson(JsonWebKey.OutputControlLevel.INCLUDE_PRIVATE)); // to include the private key 'd'

【讨论】：

【解决方案2】：

经过很长时间的挣扎，我得到了以下结果

    private static String createWebKeySet() throws NoSuchAlgorithmException,

        InvalidAlgorithmParameterException, InvalidKeyException {
    KeyPairGenerator g = KeyPairGenerator.getInstance("EC");
     ECGenParameterSpec kpgparams = new ECGenParameterSpec("secp256r1");
     g.initialize(kpgparams);

     KeyPair pair = g.generateKeyPair();
     // Instance of signature class with SHA256withECDSA algorithm
     Signature ecdsaSign = Signature.getInstance("SHA256withECDSA");
     ecdsaSign.initSign(pair.getPrivate());

     System.out.println("Private Keys is::" + pair.getPrivate());
     System.out.println("Public Keys is::" + pair.getPublic());

    JsonWebKeySet jsonWebKeySet = new JsonWebKeySet();

    final ECPrivateKey privateKey = (ECPrivateKey) pair.getPrivate();
    final ECPublicKey publicKey = (ECPublicKey) pair.getPublic();
    JsonWebKey privateWebKey = new  JsonWebKey(privateKey) {


        @Override
        public String getKeyType() {
            // TODO Auto-generated method stub
            return "EC";
        }

        @Override
        protected void fillTypeSpecificParams(Map<String, Object> params,
                OutputControlLevel outputLevel) {

            params.put("use", "sig");
            params.put("key_ops", "sign");
            //params.put("alg", "ES256");
            params.put("kid", "kukuPrivateKey");
            ECParameterSpec paramSpec = privateKey.getParams();
            params.put("crv", "P-"+paramSpec.getCurve().getField().getFieldSize());

            params.put("x",  Base64.encode(publicKey.getW().getAffineX().toByteArray()));
            params.put("y",  Base64.encode(publicKey.getW().getAffineY().toByteArray()));
            params.put("d",Base64.encode(privateKey.getS().toByteArray()));

        }
    };
    jsonWebKeySet.addJsonWebKey(privateWebKey);



     JsonWebKey publicWebKey = new  JsonWebKey(publicKey) {

            @Override
            public String getKeyType() {
                // TODO Auto-generated method stub
                return "EC";
            }

            @Override
            protected void fillTypeSpecificParams(Map<String, Object> params,
                    OutputControlLevel outputLevel) {

                params.put("use", "sig");
                params.put("key_ops", "verify");
                //params.put("alg", "ES256");
                params.put("kid", "kukuPublicKey");
                ECParameterSpec paramSpec = publicKey.getParams();
                params.put("crv", "P-"+paramSpec.getCurve().getField().getFieldSize());
                params.put("x",  Base64.encode(publicKey.getW().getAffineX().toByteArray()));
                params.put("y",  Base64.encode(publicKey.getW().getAffineY().toByteArray()));

            }
        };
        jsonWebKeySet.addJsonWebKey(publicWebKey);


    return jsonWebKeySet.toJson();
}

【讨论】：