密码存储以及网络传输的加密算法-Base64加密加盐后MD5的加密

一、项目背景

 在使用HTTP协议传输文本，接入第三方接口时，同时需要一个验签环节，在数据库密码入库是也需要一个加密环节，为了提高安全性，可以采用BASE64加盐后再进行加密的算法。

二，实现原理

 如果是验签，双方约定一个共同的盐值，针对要传输的字符串进行BASE64加盐加密，再对MD5进行加盐加密，即可保证安全性。

三、实现代码

3.1 base64加密工具类

import com.lianqian.urs.common.enums.SignTypeEnum;
import com.lianqian.urs.common.exception.ServiceException;
import org.apache.commons.codec.binary.Base64;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import java.io.UnsupportedEncodingException;

public class ArgsSignUtil {

private static final Logger LOGGER = LoggerFactory.getLogger(ArgsSignUtil.class);

/**
* 待签名字符串等号符
*/
@SuppressWarnings("unused")
private static final String SIGN_EQUAL_CHAR = "=";
/**
* 待签名字符串键值对连接符
*/
@SuppressWarnings("unused")
private static final String SIGN_JOINER_CHAR = "&";

/**
* @Description: 验证签名
*/
public static boolean checkArgsSignByType(SignTypeEnum signType, String inputJons, String signKey, String sign) {
try {
String strToSign = genStrToSignByArgsJsonAndCid(inputJons, signKey, signType);
// rsa签名
if (SignTypeEnum.RSA.equals(signType)) {
LOGGER.debug("sign:" + sign);
LOGGER.debug("checksign-key:" + signKey);
return RSAAndDESUtils.verify(strToSign.getBytes("UTF-8"), signKey, sign.getBytes("UTF-8"));
} else if (SignTypeEnum.MD5.equals(signType)) {// md5签名(默认md5签名,非rsa签名即为md5签名)
String md5Sign = MessageDigest5.encrypt(strToSign, "UTF-8");
LOGGER.debug("接口请求md5签名：" + sign);
LOGGER.debug("待md5签名字符串：" + strToSign);
LOGGER.debug("生成请求md5签名：" + md5Sign);
return sign.equalsIgnoreCase(md5Sign);
} else {
return false;
}
} catch (Exception e) {
LOGGER.error("验签失败：signType-{},data-{},signKey-{},sign-{}", signType, inputJons, signKey, sign, e);
}
return false;
}

public static boolean checkOpenApiSignByType(SignTypeEnum signType, String inputJson, String signKey, String sign) {
try {
String strToSign = genStrToSignForOpenApi(inputJson, signKey, signType);
// rsa签名
if (SignTypeEnum.RSA.equals(signType)) {
LOGGER.debug("三方签名:" + sign);
LOGGER.debug("签名公钥:" + signKey);
return RSAAndDESUtils.doCheck(strToSign, sign, signKey);
} else if (SignTypeEnum.MD5.equals(signType)) {
String md5Sign = MessageDigest5.encrypt(strToSign, "UTF-8");
LOGGER.debug("三方签名：" + sign);
LOGGER.debug("待md5签名字符串：" + strToSign);
LOGGER.debug("生成请求md5签名：" + md5Sign);
return sign.equalsIgnoreCase(md5Sign);
} else {
return false;
}
} catch (Exception e) {
LOGGER.error("验签失败：signType-{},data-{},signKey-{},sign-{}", signType, inputJson, signKey, sign, e);
}
return false;
}

/**
* @Description: 生成待签名的字符串
* @Author: panjl
* @Since: 2014年11月5日上午11:18:45
* @param inputJson
*            业务参数json串
* @param md5Key
*            渠道签名key
* @param signType
* @return
*/
private static String genStrToSignByArgsJsonAndCid(String inputJson, String md5Key, SignTypeEnum signType) {

// 拼接要生成签名的字符串
StringBuilder strToSign = new StringBuilder();
strToSign.append(inputJson);
if (SignTypeEnum.MD5.equals(signType)) {
// 添加渠道md5签名key
strToSign.append(md5Key);
}
String result = strToSign.toString();
LOGGER.debug("生成待签名字符串0为：" + result);
return result;
}

public static String genStrToSignForOpenApi(String inputJson, String md5Key, SignTypeEnum signType) {

StringBuilder strToSign = new StringBuilder();
strToSign.append(inputJson);
if (SignTypeEnum.MD5.equals(signType)) {
strToSign.append(Base64.encodeBase64String(inputJson.getBytes()));
strToSign.append(md5Key);
}
String result = strToSign.toString();
LOGGER.debug("生成待签名字符串为：" + result);
return result;
}

/**
* @Description: 根据签名类型生成签名
*/
public static String genSignByType(SignTypeEnum signType, String input, String signKey) throws UnsupportedEncodingException {
try {
String result = "";
String strToSign = genStrToSignByArgsJsonAndCid(input, signKey, signType);
if (SignTypeEnum.RSA.equals(signType)) {
result = RSAAndDESUtils.sign(strToSign.getBytes("UTF-8"), signKey);
//result = URLEncoder.encode(result, "UTF-8");
} else if (SignTypeEnum.MD5.equals(signType)) {
result = MessageDigest5.encrypt(strToSign, "UTF-8");
}
LOGGER.debug("sign-key:" + signKey);
LOGGER.debug("生成签名：" + result);
return result;
} catch (RuntimeException e) {
e.printStackTrace();
return "";
} catch (Exception e) {
throw new ServiceException(Constant.FAILED_OTHERS, "签名生成失败");
}
}
}

 加密类型的枚举类

public enum SignTypeEnum {
MD5("MD5", 1, "MD5签名"), RSA("RSA", 10, "RSA签名");
private String code;
private Integer index;
private String desc;

private SignTypeEnum(String code, Integer index, String desc) {
this.code = code;
this.index = index;
this.desc = desc;
}

/**
* @Description: 获取默认的签名类型
*/
public static SignTypeEnum getDefaultSignType() {
return SignTypeEnum.MD5;
}

/**
* @Description: 根据签名类型码获取签名类型
* @Author: panjl
* @Since: 2014年11月26日上午10:12:28
* @param code
* @return
*/
public static SignTypeEnum getByCode(String code) {
SignTypeEnum ret = null;
for (SignTypeEnum signType : SignTypeEnum.values()) {
if (signType.getCode().equals(code)) {
ret = signType;
break;
}
}
return ret;
}

public String getCode() {
return code;
}

public void setCode(String code) {
this.code = code;
}

public String getDesc() {
return desc;
}

public void setDesc(String desc) {
this.desc = desc;
}

/**
* @return the index
*/
public Integer getIndex() {
return index;
}

/**
* @param index
*            the index to set
*/
public void setIndex(Integer index) {
this.index = index;
}

}

3.2 MD5加密工具类

public class MessageDigest5 {

public static String encrypt(String input) throws NoSuchAlgorithmException {
MessageDigest msgDigest = MessageDigest.getInstance("MD5");
msgDigest.update(input.getBytes());
return byteToHex(msgDigest.digest());
}

public static String encrypt(String input, String charset) throws NoSuchAlgorithmException, UnsupportedEncodingException {
MessageDigest msgDigest = MessageDigest.getInstance("MD5");
msgDigest.update(input.getBytes(charset));
return byteToHex(msgDigest.digest());
}

public static String byteToHex(byte[] b) {
StringBuffer sBuffer = new StringBuffer();
for (int i = 0; i < b.length; i++) {
String sTemp = Integer.toHexString(b[i] & 0xFF);
if (sTemp.length() == 1)
sBuffer.append("0");
sBuffer.append(sTemp);
}
return sBuffer.toString();
}

public static void main(String[] args) throws NoSuchAlgorithmException, UnsupportedEncodingException {

System.out.println(encrypt("{\"DomainOrderId\":\"nqDEvnInprf4WeYJrwt3gOBhdBFRey2o\",\"PolicyholderName\":\"托尔斯\",\"Birthday\":\"1987-09-09\",\"Mobile\":\"13438970025\"}ltdj_key", "UTF-8"));
}
}

3.3 调用方法

String blackUserJson = JSON.toJSONString(blackUserRecord);
String strToSign = ArgsSignUtil.genStrToSignForOpenApi(blackUserJson, Constant.BLACKUSER_MD5_KEY,
SignTypeEnum.getByCode(blackUserReq.getSignType()));
String md5Sign = MessageDigest5.encrypt(strToSign, Constant.ENCOD_CHARSET_UTF8);