1
|
|
|
/* |
2
|
|
|
* To change this license header, choose License Headers in Project Properties. |
3
|
|
|
* To change this template file, choose Tools | Templates |
4
|
|
|
* and open the template in the editor. |
5
|
|
|
*/ |
6
|
|
|
package com.github.theresasogunle; |
7
|
|
|
|
8
|
|
|
import java.io.UnsupportedEncodingException; |
9
|
|
|
import java.security.InvalidKeyException; |
10
|
|
|
import java.security.MessageDigest; |
11
|
|
|
import java.util.Arrays; |
12
|
|
|
import java.security.NoSuchAlgorithmException; |
13
|
|
|
import java.util.Base64; |
14
|
|
|
import java.util.logging.Level; |
15
|
|
|
import java.util.logging.Logger; |
16
|
|
|
import javax.crypto.BadPaddingException; |
17
|
|
|
import javax.crypto.Cipher; |
18
|
|
|
import javax.crypto.IllegalBlockSizeException; |
19
|
|
|
import javax.crypto.NoSuchPaddingException; |
20
|
|
|
import javax.crypto.SecretKey; |
21
|
|
|
import javax.crypto.spec.SecretKeySpec; |
22
|
|
|
import org.json.JSONObject; |
23
|
|
|
/** |
24
|
|
|
* |
25
|
|
|
* @author Theresa |
26
|
|
|
*/ |
27
|
|
|
|
28
|
|
|
|
29
|
|
|
public class Encryption { |
30
|
|
|
|
31
|
|
|
|
32
|
|
|
RaveConstant keys= new RaveConstant(); |
33
|
|
|
|
34
|
|
|
|
35
|
|
|
// Method to turn bytes in hex |
36
|
|
|
public static String toHexStr(byte[] bytes){ |
37
|
|
|
|
38
|
|
|
StringBuilder builder = new StringBuilder(); |
39
|
|
|
|
40
|
|
|
for(int i = 0; i < bytes.length; i++ ){ |
41
|
|
|
builder.append(String.format("%02x", bytes[i])); |
42
|
|
|
} |
43
|
|
|
|
44
|
|
|
return builder.toString(); |
45
|
|
|
} |
46
|
|
|
|
47
|
|
|
// this is the getKey function that generates an encryption Key for you by passing your Secret Key as a parameter. |
48
|
|
|
public static String getKey(String seedKey) { |
49
|
|
|
try { |
50
|
|
|
MessageDigest md = MessageDigest.getInstance("md5"); |
51
|
|
|
byte[] hashedString = md.digest(seedKey.getBytes("utf-8")); |
52
|
|
|
byte[] subHashString = toHexStr(Arrays.copyOfRange(hashedString, hashedString.length - 12, hashedString.length)).getBytes("utf-8"); |
|
|
|
|
53
|
|
|
String subSeedKey = seedKey.replace("FLWSECK-", ""); |
54
|
|
|
subSeedKey = subSeedKey.substring(0, 12); |
|
|
|
|
55
|
|
|
byte[] combineArray = new byte[24]; |
|
|
|
|
56
|
|
|
System.arraycopy(subSeedKey.getBytes(), 0, combineArray, 0, 12); |
|
|
|
|
57
|
|
|
System.arraycopy(subHashString, subHashString.length - 12, combineArray, 12, 12); |
|
|
|
|
58
|
|
|
return new String(combineArray); |
|
|
|
|
59
|
|
|
} catch (NoSuchAlgorithmException | UnsupportedEncodingException ex) { |
60
|
|
|
Logger.getGlobal().log(Level.SEVERE, null, ex); |
61
|
|
|
} |
62
|
|
|
return null; |
63
|
|
|
} |
64
|
|
|
|
65
|
|
|
// This is the encryption function that encrypts your payload by passing the stringified format and your encryption Key. |
66
|
|
|
public static String encryptData(String message, String _encryptionKey) { |
67
|
|
|
try { |
68
|
|
|
final byte[] digestOfPassword = _encryptionKey.getBytes("utf-8"); |
69
|
|
|
final byte[] keyBytes = Arrays.copyOf(digestOfPassword, 24); |
|
|
|
|
70
|
|
|
|
71
|
|
|
final SecretKey key = new SecretKeySpec( keyBytes , "DESede"); |
72
|
|
|
final Cipher cipher = Cipher.getInstance("DESede/ECB/PKCS5Padding"); |
|
|
|
|
73
|
|
|
cipher.init(Cipher.ENCRYPT_MODE, key); |
74
|
|
|
final byte[] plainTextBytes = message.getBytes("utf-8"); |
75
|
|
|
final byte[] cipherText = cipher.doFinal(plainTextBytes); |
76
|
|
|
return Base64.getEncoder().encodeToString(cipherText); |
77
|
|
|
|
78
|
|
|
} catch (UnsupportedEncodingException | NoSuchAlgorithmException | NoSuchPaddingException | InvalidKeyException | IllegalBlockSizeException | BadPaddingException e) { |
|
|
|
|
79
|
|
|
|
80
|
|
|
|
81
|
|
|
return ""; |
82
|
|
|
} |
83
|
|
|
|
84
|
|
|
} |
85
|
|
|
|
86
|
|
|
/** |
87
|
|
|
* |
88
|
|
|
* @param api(JSON object) |
89
|
|
|
* @return String |
90
|
|
|
*/ |
91
|
|
|
|
92
|
|
|
public String encryptParameters(JSONObject api) { |
93
|
|
|
|
94
|
|
|
try{ |
95
|
|
|
api.put("PBFPubKey",RaveConstant.PUBLIC_KEY); |
96
|
|
|
}catch(Exception ex){} |
|
|
|
|
97
|
|
|
|
98
|
|
|
|
99
|
|
|
|
100
|
|
|
String message= api.toString(); |
101
|
|
|
|
102
|
|
|
String encrypt_secret_key=getKey(RaveConstant.SECRET_KEY); |
103
|
|
|
String encrypted_message= encryptData(message,encrypt_secret_key); |
104
|
|
|
|
105
|
|
|
|
106
|
|
|
return encrypted_message; |
107
|
|
|
|
108
|
|
|
} |
109
|
|
|
/** |
110
|
|
|
* |
111
|
|
|
* |
112
|
|
|
* @return String |
113
|
|
|
* @param api |
114
|
|
|
* |
115
|
|
|
*/ |
116
|
|
|
|
117
|
|
|
|
118
|
|
|
public String encryptParametersPreAuth(JSONObject api){ |
119
|
|
|
|
120
|
|
|
try{ |
121
|
|
|
api.put("PBFPubKey","FLWPUBK-8cd258c49f38e05292e5472b2b15906e-X"); |
122
|
|
|
}catch(Exception ex){} |
|
|
|
|
123
|
|
|
|
124
|
|
|
String message= api.toString(); |
125
|
|
|
|
126
|
|
|
|
127
|
|
|
|
128
|
|
|
String encrypt_secret_key=getKey("FLWSECK-c51891678d48c39eff3701ff686bdb69-X"); |
129
|
|
|
String encrypted_message= encryptData(message,encrypt_secret_key); |
130
|
|
|
|
131
|
|
|
|
132
|
|
|
return encrypted_message; |
133
|
|
|
|
134
|
|
|
} |
135
|
|
|
|
136
|
|
|
|
137
|
|
|
|
138
|
|
|
} |
139
|
|
|
|
Using constants for hard-coded numbers is a best practice. A constant’s name can explain the rationale behind this magic number. It is also easier to find if you ever need to change it.