Bouncy Castle PGP는 한 번에 서명하고 암호화합니까?

Question

나는 Bouncy Castle PGP 'sign and encrypt'의 구현을 찾고 있습니다. 하나의 작업에서 이상적으로 차이가 나는 경우.

저는 encrypt example과 signing example을 가져 와서 '원 패스'암호화 및 서명 작업으로 바꾸려고했습니다.

비교적 최근에 나온 구현 Boncode을 참조하십시오. 두 작업이 서로 연결되어있는 것으로 나타납니다.

코드를 해독 할 소비자가 없습니다. 서명이 검증 될 것 같습니다. 이것은 병합 된 연산을 사용하든 암호화 된 부호를 사용하든 상관없이 사실입니다.

더 나은 Bouncy Castle PGP 구현이 있습니까?

Answer 1

여기에 Basscy Castle PGP 암호화 + 부호가 하나의 패스로 구현되었습니다. 서명이 검증 된 것으로 보이지만 페이로드가 해독되지 않습니다.

public class SinglePassSignedEncryptedFileProcessor { 
private static final Logger logger = LoggerFactory.getLogger(SinglePassSignedEncryptedFileProcessor.class); 

/* 
* This is the primary function that will create encrypt a file and sign it 
* with a one pass signature. This leans on an C# example by John Opincar 
* @author Bilal Soylu 
* @param targetFileName 
*   -- file name on drive systems that will contain encrypted content 
* @param embeddedFileName 
*   -- the original file name before encryption 
* @param secretKeyRingInputStream 
*   -- Private Key Ring File 
* @param targetFileStream 
*   -- The stream for the encrypted target file 
* @param secretKeyPassphrase 
*   -- The private key password for the key retrieved from 
*   collection used for signing 
* @param signPublicKeyInputStream 
*   -- the public key of the target recipient to be used to 
*   encrypt the file 
* @throws Exception 
*/ 
public void encryptOnePassSign(
     String fileName, 
     InputStream keyIn, 
     OutputStream out, 
     char[] pass, 
     PGPPublicKey encryptionKey, 
     boolean armor, 
     boolean withIntegrityCheck, 
     String providerName) 
     throws IOException, NoSuchAlgorithmException, NoSuchProviderException, PGPException, SignatureException { 
    if (armor) { 
     out = new ArmoredOutputStream(out); 
    } 

    // Compress 
    byte[] bytes = PGPEncryptUtil.compressFile(fileName, CompressionAlgorithmTags.ZIP); 

    // Encryption process. 
    PGPEncryptedDataGenerator encGen = new PGPEncryptedDataGenerator(
      new JcePGPDataEncryptorBuilder(PGPEncryptedData.CAST5).setWithIntegrityPacket(withIntegrityCheck).setSecureRandom(new SecureRandom()).setProvider("BC")); 

    encGen.addMethod(new JcePublicKeyKeyEncryptionMethodGenerator(encryptionKey).setProvider("BC")); 

    ByteArrayOutputStream encryptedOutputStream = new ByteArrayOutputStream(); 
    OutputStream encryptedOut = encGen.open(encryptedOutputStream, bytes); 
    encryptedOut.write(bytes); 
    encryptedOut.close(); 
    byte[] bytesEncrypted = encryptedOutputStream.toByteArray(); 
    encryptedOutputStream.close(); 

    // Signing process. 
    PGPSecretKey pgpSec = PGPEncryptUtil.readSecretKey(keyIn); 
    PGPPrivateKey pgpPrivKey = pgpSec.extractPrivateKey(new JcePBESecretKeyDecryptorBuilder().setProvider("BC").build(pass)); 

    PGPSignatureGenerator sGen = new PGPSignatureGenerator(new JcaPGPContentSignerBuilder(pgpSec.getPublicKey().getAlgorithm(), PGPUtil.SHA1).setProvider("BC")); 

    sGen.init(PGPSignature.BINARY_DOCUMENT, pgpPrivKey); 

    Iterator it = pgpSec.getPublicKey().getUserIDs(); 
    if (it.hasNext()) { 
     PGPSignatureSubpacketGenerator spGen = new PGPSignatureSubpacketGenerator(); 

     spGen.setSignerUserID(false, (String) it.next()); 
     sGen.setHashedSubpackets(spGen.generate()); 
    } 

    PGPCompressedDataGenerator cGen = new PGPCompressedDataGenerator(
      PGPCompressedData.UNCOMPRESSED); 

    // Write to the output stream. 
    BCPGOutputStream bOut = new BCPGOutputStream(cGen.open(out)); 
    sGen.generateOnePassVersion(false).encode(bOut); 

    File file = new File(fileName); 
    PGPLiteralDataGenerator lGen = new PGPLiteralDataGenerator(); 
    // file is encoding name. 
    Date lastModified = new Date(file.lastModified()); 
    OutputStream lOut = lGen.open(bOut, PGPLiteralData.BINARY, fileName, lastModified, bytesEncrypted); 


    //FileInputStream fIn = new FileInputStream(file); 
    //int ch; 

    //while ((ch = fIn.read()) >= 0) { 
     lOut.write(bytesEncrypted); 
     sGen.update(bytesEncrypted); 
    // } 

    // ? 
    lGen.close(); 

    sGen.generate().encode(bOut); 
    cGen.close(); 

    if (armor) { 
     out.close(); 
    } 
    // close everything down we are done 
    /* 
    literalOut.close(); 
    literalDataGenerator.close(); 
    signatureGenerator.generate().encode(compressedOut); 
    compressedOut.close(); 
    compressedDataGenerator.close(); 
    encryptedOut.close(); 
    encryptedDataGenerator.close(); 
    */ 

    // if (armor) targetFileStream.close(); 

} 
}