java数据库账号的加密解密

  在平台部署时&＃xff0c;要求对数据库中的账号密码进行加密&＃xff0c;并在程序读取时进行解密。这里详细描述了加密解密算法的实现及调用。
  这里我们使用的加密算法是java se环境中自带的加密算法 &＃xff1a;

算法原理&＃xff1a;https://blog.csdn.net/mafei852213034/article/details/53331233.

算法实现&＃xff1a;

package com.cry;
import java.security.Key;
import java.security.SecureRandom;
import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import sun.misc.BASE64Decoder;
import sun.misc.BASE64Encoder;
/*** 对指定字符串进行加密或解密* &＃64;author rmling*/
public class EncryptAndDecryptStr {private static Key key;/*** 对指定字符串进行加密,返回加密后的字符串* &＃64;param key 加密的key* &＃64;param strMing 待加密的字符串* &＃64;return*/public static String encryptStr(String key,String strMing) {getKey(key);byte[] byteMi &＃61; null;byte[] byteMing &＃61; null;String strMi &＃61; "";BASE64Encoder base64en &＃61; new BASE64Encoder();try {byteMing &＃61; strMing.getBytes("UTF8");byteMi &＃61; encToByte(byteMing);strMi &＃61; base64en.encode(byteMi);} catch (Exception e) {e.printStackTrace();} finally {base64en &＃61; null;byteMing &＃61; null;byteMi &＃61; null;}return strMi;}/*** 对指定字符串进行解密,返回解密后的字符串* &＃64;param key 加密的key* &＃64;param strDecry 待解密的字符串* &＃64;return*/public static String decryptStr(String key,String strDecry) {getKey(key);BASE64Decoder base64De &＃61; new BASE64Decoder();byte[] byteMing &＃61; null;byte[] byteMi &＃61; null;String strMing &＃61; "";try {byteMi &＃61; base64De.decodeBuffer(strDecry);byteMing &＃61; byteToEnc(byteMi);strMing &＃61; new String(byteMing, "UTF8");} catch (Exception e) {e.printStackTrace();} finally {base64De &＃61; null;byteMing &＃61; null;byteMi &＃61; null;}return strMing;}private static void getKey(String strKey) {if(strKey &＃61;&＃61; null || "".equals(strKey)){strKey &＃61; "ytxsoft";}try {KeyGenerator _generator &＃61; KeyGenerator.getInstance("DES");
// SecureRandom 实现完全随操作系统本身的內部状态&＃xff0c;除非调用方在调用 getInstance 方法&＃xff0c;然后调用 setSeed 方法&＃xff1b;该实现在 windows 上每次生成的 key 都相同&＃xff0c;但是在 solaris 或部分 linux 系统上则不同。SecureRandom random &＃61; SecureRandom.getInstance("SHA1PRNG");random.setSeed(strKey.getBytes());_generator.init(random);key &＃61; _generator.generateKey();_generator &＃61; null;} catch (Exception e) {e.printStackTrace();}}private static byte[] encToByte(byte[] byteS) {byte[] byteFina &＃61; null;Cipher cipher;try {cipher &＃61; Cipher.getInstance("DES");cipher.init(Cipher.ENCRYPT_MODE, key);byteFina &＃61; cipher.doFinal(byteS);} catch (Exception e) {e.printStackTrace();} finally {cipher &＃61; null;}return byteFina;}private static byte[] byteToEnc(byte[] byteD) {Cipher cipher;byte[] byteFina &＃61; null;try {cipher &＃61; Cipher.getInstance("DES");cipher.init(Cipher.DECRYPT_MODE, key);byteFina &＃61; cipher.doFinal(byteD);} catch (Exception e) {e.printStackTrace();} finally {cipher &＃61; null;}return byteFina;}
}
2.数据库账号的加密

  对常见的数据库配置文件&＃xff0c;如下&＃xff1a;

com.mysql.jdbc.Driverjdbc:mysql://localhost:testDB/jbpmdb?useSSL&＃61;true&useUnicode&＃61;true&characterEncoding&＃61;UTF-8user1pass1


  通过函数调用加密算法&＃xff0c;生成对应的用户名和密码的加密字符串&＃xff0c;替代文件中的真实用户名和密码&＃xff1a;

public static void main(String[] args) {System.out.println(EncryptAndDecryptStr.encryptStr("testDB", "user1"));System.out.println(EncryptAndDecryptStr.encryptStr("testDB", "pass1"));}


结果输出&＃xff1a;

此时&＃xff0c;配置文件可更新为&＃xff1a;

com.mysql.jdbc.Driverjdbc:mysql://localhost:testDB/jbpmdb?useSSL&＃61;true&useUnicode&＃61;true&characterEncoding&＃61;UTF-8l60UHD130pk&＃61;Sk2XHkX15CQ&＃61;

3. 数据库账号的解密

在读取数据库配置文件后&＃xff0c;将加密的用户名和密码解密成原始配置

public static void main(String[] args) {//加密System.out.println(EncryptAndDecryptStr.encryptStr("testDB", "user1"));System.out.println(EncryptAndDecryptStr.encryptStr("testDB", "pass1"));//解密System.out.println(EncryptAndDecryptStr.decryptStr("testDB", "l60UHD130pk&＃61;"));System.out.println(EncryptAndDecryptStr.decryptStr("testDB", "Sk2XHkX15CQ&＃61;"));}


结果输出&＃xff1a;

4.1 开放接口DatabaseEnDeCryptInterface:

/*** 数据库加解密的接口* &＃64;author rmling*/
public interface DatabaseEnDeCryptInterface{/**获取userName加密后的字符串*/public String getEncryptUserName(String key,String userName);/**对指定字符串进行解密,返回解密后的字符串*/public String getDecryptUserName(String key,String strDecryUserName);/**获取passward加密后的字符串*/public String getEncryptPassward(String key,String passward);/**对指定字符串进行解密,返回解密后的字符串*/public String getDecryptPassward(String key,String passward);
}


4.2 接口实现 - 参考

接口实现可根据实际情况自己实现&＃xff1a;

private static DatabaseEnDeCryptInterface databaseInter;static{databaseInter &＃61; new DatabaseEnDeCryptInterface() {&＃64;Overridepublic String getEncryptUserName(String arg0, String arg1) {return EncryptAndDecryptStr.encryptStr(arg0, arg1);}&＃64;Overridepublic String getEncryptPassward(String arg0, String arg1) {return EncryptAndDecryptStr.encryptStr(arg0, arg1);}&＃64;Overridepublic String getDecryptUserName(String arg0, String arg1) {return EncryptAndDecryptStr.decryptStr(arg0, arg1);}&＃64;Overridepublic String getDecryptPassward(String arg0, String arg1) {return EncryptAndDecryptStr.decryptStr(arg0, arg1);}};}


1 . 源码下载链接: https://download.csdn.net/download/weixin_44462773/24395402.
2 . 下一章&＃xff1a;jbpm - hibernate 的数据库加密解密的实现.