package test;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PublicKey;
import java.security.Security;
import java.security.spec.X509EncodedKeySpec;
import javax.crypto.Cipher;
import javax.crypto.KeyAgreement;
import javax.crypto.SecretKey;
import javax.crypto.interfaces.DHPublicKey;
import javax.crypto.spec.DHParameterSpec;
public class DHKey {
	public static void main(String argv[]) {
		try {
			DHKey my = new DHKey();
			my.run();
		} catch (Exception e) {
			System.err.println(e);
		}
	}
	private void run() throws Exception {
		// A 構建密鑰對，公鑰給B
		Security.addProvider(new com.sun.crypto.provider.SunJCE());
		KeyPairGenerator aliceKpairGen = KeyPairGenerator.getInstance("DH");
		aliceKpairGen.initialize(512);
		KeyPair aliceKpair = aliceKpairGen.generateKeyPair();
		byte[] alicePubKeyEnc = aliceKpair.getPublic().getEncoded(); // 公開密鑰
		
		// B 根據A的公鑰構建自己的密鑰對，同時把自己生成的公鑰給A，通過A的公鑰和自己的私鑰構建DES的密鑰
		KeyFactory bobKeyFac = KeyFactory.getInstance("DH");
		X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(alicePubKeyEnc);
		PublicKey alicePubKey = bobKeyFac.generatePublic(x509KeySpec);
		DHParameterSpec dhParamSpec = ((DHPublicKey) alicePubKey).getParams();
		KeyPairGenerator bobKpairGen = KeyPairGenerator.getInstance("DH");
		bobKpairGen.initialize(dhParamSpec);
		KeyPair bobKpair = bobKpairGen.generateKeyPair();
		KeyAgreement bobKeyAgree = KeyAgreement.getInstance("DH");
		bobKeyAgree.init(bobKpair.getPrivate());
		bobKeyAgree.doPhase(alicePubKey, true);
		SecretKey bobDesKey = bobKeyAgree.generateSecret("DES");
		byte[] bobPubKeyEnc = bobKpair.getPublic().getEncoded();
		
		// A 通過本地密鑰和A的公鑰構建DES密鑰,這里還做一個驗證
		KeyFactory aliceKeyFac = KeyFactory.getInstance("DH");
		x509KeySpec = new X509EncodedKeySpec(bobPubKeyEnc);
		PublicKey bobPubKey = aliceKeyFac.generatePublic(x509KeySpec);
		KeyAgreement aliceKeyAgree = KeyAgreement.getInstance("DH");
		aliceKeyAgree.init(aliceKpair.getPrivate()); // 秘密密鑰
		aliceKeyAgree.doPhase(bobPubKey, true);
		SecretKey aliceDesKey = aliceKeyAgree.generateSecret("DES");
		if (aliceDesKey.equals(bobDesKey))
			System.out.println("A 和 B 的公鑰 相同");
		else
			System.out.println("A 和 B 的公鑰 不同");
		
		// B 通過密鑰加密數據
		Cipher bobCipher = Cipher.getInstance("DES");
		bobCipher.init(Cipher.ENCRYPT_MODE, bobDesKey);
		String bobinfo = "這是B的機密信息";
		System.out.println("B 加密前原文 :" + bobinfo);
		byte[] cleartext = bobinfo.getBytes();
		byte[] ciphertext = bobCipher.doFinal(cleartext);
		
		// A 通過密鑰解密數據
		Cipher aliceCipher = Cipher.getInstance("DES");
		aliceCipher.init(Cipher.DECRYPT_MODE, aliceDesKey);
		byte[] recovered = aliceCipher.doFinal(ciphertext);
		System.out.println("A解密 B 的信息 :" + (new String(recovered)));
	}
}