import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
/**
 * Create the certificate signing request (CSR) from private and public keys
 *
 * @param keyPair the KeyPair with private and public keys
 * @return PKCS10CertificationRequest with the certificate signing request
 *         (CSR) data
 * @throws IOException
 * @throws OperatorCreationException
 */
public static PKCS10CertificationRequest generateCSR(KeyPair keyPair) throws IOException,
        OperatorCreationException {
    String principal = "CN=AWS IoT Certificate" + ", O=Amazon";
    AsymmetricKeyParameter privateKey = PrivateKeyFactory.createKey(keyPair.getPrivate()
            .getEncoded());
    AlgorithmIdentifier signatureAlgorithm = new DefaultSignatureAlgorithmIdentifierFinder()
            .find("SHA1WITHRSA");
    AlgorithmIdentifier digestAlgorithm = new DefaultDigestAlgorithmIdentifierFinder()
            .find("SHA-1");
    ContentSigner signer = new BcRSAContentSignerBuilder(signatureAlgorithm, digestAlgorithm)
            .build(privateKey);

    PKCS10CertificationRequestBuilder csrBuilder = new JcaPKCS10CertificationRequestBuilder(
            new X500Name(principal), keyPair.getPublic());
    ExtensionsGenerator extensionsGenerator = new ExtensionsGenerator();
    extensionsGenerator.addExtension(Extension.basicConstraints, true, new BasicConstraints(
            true));
    csrBuilder.addAttribute(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest,
            extensionsGenerator.generate());
    PKCS10CertificationRequest csr = csrBuilder.build(signer);

    return csr;
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
@Override
public AsymmetricKeyParameter readKey(InputStream in)
		throws IOException {
	try {
		return super.readKey(in);
	} catch (IllegalArgumentException e) {
		throw new IOException(e);
	}
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
public static String encrypt(String data, String strKey) throws Exception {
    strKey = strKey.replace("-----BEGIN PUBLIC KEY-----\n", "");
    strKey = strKey.replace("-----END PUBLIC KEY-----", "");

    AsymmetricKeyParameter publicKey = PublicKeyFactory.createKey(Base64.decode(strKey, Base64.NO_WRAP));
    AsymmetricBlockCipher e = new RSAEngine();

    e = new org.spongycastle.crypto.encodings.PKCS1Encoding(e);
    e.init(true, publicKey);

    byte[] messageBytes = data.getBytes();
    byte[] hexEncodedCipher = e.processBlock(messageBytes, 0, messageBytes.length);
    return new String(Base64.encodeToString(hexEncodedCipher, Base64.NO_WRAP));
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
@Override
public byte[] getEncoded(AsymmetricKeyParameter asymmetricKeyParameter) {
    return ((ECPublicKeyParameters) asymmetricKeyParameter).getQ().getEncoded(false);
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
@Override
public byte[] getEncoded(AsymmetricKeyParameter key) {
	if (!(key instanceof ECPublicKeyParameters))
		throw new IllegalArgumentException();
	return ((ECPublicKeyParameters) key).getQ().getEncoded(false);
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
@Override public byte[] getEncoded(AsymmetricKeyParameter asymmetricKeyParameter) {
  return ((ECPublicKeyParameters) asymmetricKeyParameter).getQ()
      .getEncoded(false);
}
 

import org.spongycastle.crypto.params.AsymmetricKeyParameter; //导入依赖的package包/类
/**
 * Initialise the encryptor.
 *
 * @param publicKey
 *            the recipient's/sender's public key parameters
 * @param params
 *            encoding and derivation parameters, may be wrapped to include an IV for an
 *            underlying block cipher.
 * @param ephemeralKeyPairGenerator
 *            the ephemeral key pair generator to use.
 */
public void init(AsymmetricKeyParameter publicKey, CipherParameters params,
        EphemeralKeyPairGenerator ephemeralKeyPairGenerator) {
    this.forEncryption = true;
    this.pubParam = publicKey;
    this.keyPairGenerator = ephemeralKeyPairGenerator;

    extractParams(params);
}