Thread: Problem Encrypting a secret key

You need to adjust your JCE policy files. Google for that.

Search for: "UnlimitedJCEPolicy"
There are jar files in the JRE that need to be changed.

Can you post the code to create the RSAPublicKeyFile file?
And the ClientsSecretKey file?

And any other data the program needs to execute.

import java.io.*;
import java.security.*;
import javax.crypto.*;
 
public class ServerRSAKeyGen 
{
    public static void main(String args[]) {
 
 
 
 
     try 
     {
 
      // File for writing private key
      FileOutputStream privateKeyFOS = new FileOutputStream("/Users/Server/RSAPrivateKeyFile");
      ObjectOutputStream privateKeyOOS = new ObjectOutputStream(privateKeyFOS);
      // File for writing public key
      FileOutputStream publicKeyFOS = new FileOutputStream("/Users/Server/RSAPublicKeyFile");
      ObjectOutputStream publicKeyOOS = new ObjectOutputStream(publicKeyFOS);
       // File for writing public key to Client
      FileOutputStream serverPublicKeyFOS = new FileOutputStream("/Users/Client/RSAPublicKeyFile");
      ObjectOutputStream serverPublicKeyOOS = new ObjectOutputStream(serverPublicKeyFOS);
 
 
 
       // Generate RSA key pair 
      KeyPair keyPairRSA = KeyPairGenerator.getInstance("RSA").generateKeyPair();
 
 
 
      // Write the keys to respective files
      privateKeyOOS.writeObject(keyPairRSA.getPrivate());
      publicKeyOOS.writeObject(keyPairRSA.getPublic());
      // Write the servers public key to client folder
      serverPublicKeyOOS.writeObject(keyPairRSA.getPublic());
 
      System.out.println("Private and Public keys have been generated using RSA  Encryption.");
      System.out.println("Both keys have been written to the Server folder.");
      System.out.println("The Public key has also been written to the Client folder.");
 
 
      privateKeyOOS.close();
      publicKeyOOS.close();
      privateKeyFOS.close();
      publicKeyFOS.close();
 
 
 
 
 
     }
     catch (Exception e) 
     {
      System.out.println(e);
     }
    }
}
[/QUOTE]
 
 
 
[QUOTE]import java.io.*;
import javax.crypto.*;
 
 
 
public class ClientSecretSessionKeyGenerator {
 
  public static void main(String args[]) {
 
   // Client Generates Secert key and writes to file
 
    try {
      // File for writing output
      FileOutputStream keyFOS = new FileOutputStream("/Users/Client/ClientsSecretKey");
      ObjectOutputStream keyOOS = new ObjectOutputStream(keyFOS);
 
      // Generate random AES key
      KeyGenerator keygen = KeyGenerator.getInstance("AES");
      SecretKey SecKey = keygen.generateKey();
      keyOOS.writeObject(SecKey);
 
      System.out.println("Random Secret Key generated and written to file: ClientsSecretKey");
 
      keyOOS.close();
      keyFOS.close();
 
 
    } catch (Exception e) {
         System.out.println(e);
    }
  }
}

You will need to create a folder for both Client and Server for it to run, change the directory if needed.

That code has too many hard coded paths for easy testing. I don't want to set up lots of directories. For testing I want to be able to put all the files in one folder by easily changing the path to the files in one place. For example:

 public static String pathToPubKey = "RSAPublicKeyFile.key";

Then that String variable would be used where ever the code needs that path.


The catch() blocks need calls to printStackTrace() so the location of the error can be found.

Ok, fix this so it works. I started making changes before I found that there were a lot more files than just 2:

/* http://www.javaprogrammingforums.com/whats-wrong-my-code/33933-problem-encrypting-secret-key.html#post130756
 
NOTE:  Needs files to execute
*/
 
import java.io.*;
import java.security.*;
 
//import org.bouncycastle.*;
import javax.crypto.*;
 
 
public class ClientSecretKeyEncryption
{
 
 protected static final String ALGORITHM = "RSA";   
 
    // Put all files local to this dir
    static String pathToKey = "RSAPublicKeyFile.key";
    static String pathToClntSecKey = "ClientsSecretKey.key";
 
 
 
  public static void main(String args[]) {
 
   ClientSecretSessionKeyGenerator.main(args);      //<<<<<<<<<<
 
//Security.addProvider(new BouncyCastleProvider());
 
   // Encrypts secret key using servers public key
 
   try {
 
 
      // File containing RSA Public key
      FileInputStream keyFIS = new FileInputStream(pathToKey);
      ObjectInputStream keyOIS = new ObjectInputStream(keyFIS);
 
      // Create RSA cipher instance
      Cipher rsaCipher = Cipher.getInstance("AES");
 
      // Read in the AES key
      Key RsaPublicKeyFile = (PublicKey) keyOIS.readObject();
 
        // Initialize the cipher for encryption
      rsaCipher.init(Cipher.ENCRYPT_MODE, (Key) RsaPublicKeyFile); //  redundant cast to Key
 
      keyOIS.close();
      keyFIS.close();
     // rsaCipher.init(Cipher.ENCRYPT_MODE, (PublicKey) keyOIS.readObject());
 
 
      // File for writing out encrypted secret key to server
      FileOutputStream fos = new FileOutputStream("/Users/Server/ClientsEncryprtedSecretKey");
 
 
 
      //This brings in the secret key 
      File f = new File(pathToClntSecKey);
      FileInputStream in = new FileInputStream(f);
      byte[]SecKey = new byte[(int)f.length()];
      in.read(SecKey);
 
      // Encrypt the Secret Key 
      byte[] EncSecKey = rsaCipher.doFinal(SecKey);
 
      // Write Secret Key to file
      fos.write(EncSecKey);
      fos.close();
 
 
 
  } catch (Exception e) {
     System.out.println(e);
    }
 
 }
 
 
 
 
static class ClientSecretSessionKeyGenerator {
 
  public static void main(String args[]) {
 
   // Client Generates Secert key and writes to file
 
    try {
      // File for writing output
      FileOutputStream keyFOS = new FileOutputStream(pathToKey);
      ObjectOutputStream keyOOS = new ObjectOutputStream(keyFOS);
 
      // Generate random AES key
      KeyGenerator keygen = KeyGenerator.getInstance("AES");
      SecretKey SecKey = keygen.generateKey();
      keyOOS.writeObject(SecKey);
 
      System.out.println("Random Secret Key generated and written to file: ClientsSecretKey");
 
      keyOOS.close();
      keyFOS.close();
 
 
    } catch (Exception e) {
         System.out.println(e);
    }
  }
}
 
static class ServerRSAKeyGen 
{
    public static void main(String args[]) {
 
 
 
 
     try 
     {
 
      // File for writing private key
      FileOutputStream privateKeyFOS = new FileOutputStream("RSAPrivateKeyFile");
      ObjectOutputStream privateKeyOOS = new ObjectOutputStream(privateKeyFOS);
      // File for writing public key
      FileOutputStream publicKeyFOS = new FileOutputStream("RSAPublicKeyFile");
      ObjectOutputStream publicKeyOOS = new ObjectOutputStream(publicKeyFOS);
       // File for writing public key to Client
      FileOutputStream serverPublicKeyFOS = new FileOutputStream("RSAPublicKeyFile");
      ObjectOutputStream serverPublicKeyOOS = new ObjectOutputStream(serverPublicKeyFOS);
 
 
 
       // Generate RSA key pair 
      KeyPair keyPairRSA = KeyPairGenerator.getInstance("RSA").generateKeyPair();
 
 
 
      // Write the keys to respective files
      privateKeyOOS.writeObject(keyPairRSA.getPrivate());
      publicKeyOOS.writeObject(keyPairRSA.getPublic());
      // Write the servers public key to client folder
      serverPublicKeyOOS.writeObject(keyPairRSA.getPublic());
 
      System.out.println("Private and Public keys have been generated using RSA  Encryption.");
      System.out.println("Both keys have been written to the Server folder.");
      System.out.println("The Public key has also been written to the Client folder.");
 
 
      privateKeyOOS.close();
      publicKeyOOS.close();
      privateKeyFOS.close();
      publicKeyFOS.close();
 
 
 
 
 
     }
     catch (Exception e) 
     {
      System.out.println(e);
     }
    }
}
 
 
 
static class ClientSecretSessionKeyGenerator2 {
 
  public static void main(String args[]) {
 
   // Client Generates Secert key and writes to file
 
    try {
      // File for writing output
      FileOutputStream keyFOS = new FileOutputStream(pathToClntSecKey);
      ObjectOutputStream keyOOS = new ObjectOutputStream(keyFOS);
 
      // Generate random AES key
      KeyGenerator keygen = KeyGenerator.getInstance("AES");
      SecretKey SecKey = keygen.generateKey();
      keyOOS.writeObject(SecKey);
 
      System.out.println("Random Secret Key generated and written to file: ClientsSecretKey");
 
      keyOOS.close();
      keyFOS.close();
 
 
    } catch (Exception e) {
         System.out.println(e);
    }
  }
}
 
 
}

That code still has hardcoded file paths.
FileOutputStream keyFOS = new FileOutputStream(C:/Client/ClientsSecretKey);

Can you define the path's each in a String like I did and then use those Strings in the code so that ONE change will change the path for all the places it is used?
FileOutputStream keyFOS = new FileOutputStream(pathToClientsSecretKey);

see you tomorrow

Here are two of the path Strings:

    static String pathToKey = "RSAPublicKeyFile.key";
    static String pathToClntSecKey = "C:/Client/ClientsSecretKey";

Then those Strings are used where ever that file is accessed. For example:

  FileInputStream keyFIS = new FileInputStream(pathToKey);
//  and
  FileOutputStream keyFOS = new FileOutputStream(pathToKey);

All the hardcoded paths should be replaced with variables like the above.

That makes it easy to change any and all of the paths because they are all coded in one place. It also has the benefit that you can not hardcode two paths that you want to be the same but are different because of a spelling error.

 
 
import java.io.*;
import java.security.*;
 
 
import javax.crypto.*;
 
 
public class ClientSecretKeyEncryption
{
    protected static final String ALGORITHM = "RSA";   
 
    // Put all files local to this dir
    static String pathToKey = "RSAPublicKeyFile";
    static String pathToClntSecKey = "ClientsSecretKey";
 
  public static void main(String args[]) {
//ClientSecretKeyEncryption.main(args);    
 
   try {
 
 
      // File containing RSA Public key
      FileInputStream keyFIS = new FileInputStream(pathToKey);
      ObjectInputStream keyOIS = new ObjectInputStream(keyFIS);
 
      // Create RSA cipher instance
      Cipher rsaCipher = Cipher.getInstance("AES");
 
      // Read in the AES key
      Key RsaPublicKeyFile = (PublicKey) keyOIS.readObject();
 
        // Initialize the cipher for encryption
      rsaCipher.init(Cipher.ENCRYPT_MODE, (Key) RsaPublicKeyFile); //  redundant cast to Key
 
      keyOIS.close();
      keyFIS.close();
     // rsaCipher.init(Cipher.ENCRYPT_MODE, (PublicKey) keyOIS.readObject());
 
 
      // File for writing out encrypted secret key to server
      FileOutputStream fos = new FileOutputStream("pathToKey");
 
 
 
      //This brings in the secret key 
      File f = new File(pathToClntSecKey);
      FileInputStream in = new FileInputStream(f);
      byte[]SecKey = new byte[(int)f.length()];
      in.read(SecKey);
 
      // Encrypt the Secret Key 
      byte[] EncSecKey = rsaCipher.doFinal(SecKey);
 
      // Write Secret Key to file
      fos.write(EncSecKey);
      fos.close();
 
 
 
  } catch (Exception e) {
     System.out.println(e);
    }
 
 }
}[/QUOTE]
 
[QUOTE]
 
import java.io.*;
import java.security.*;
import javax.crypto.*;
 
public class ServerRSAandAesKeyGen {
static String pathToRSAPrivateKeyFile = "RSAPrivateKeyFile";
static String pathToRSAPublicKeyFile = "RSAPublicKeyFile";
 
    public static void main(String args[]) {
 
 
 
 
     try 
     {
 
      // File for writing private key
      FileOutputStream privateKeyFOS = new FileOutputStream("pathToRSAPrivateKeyFile");
      ObjectOutputStream privateKeyOOS = new ObjectOutputStream(privateKeyFOS);
      // File for writing public key
      FileOutputStream publicKeyFOS = new FileOutputStream("pathToRSAPublicKeyFile");
      ObjectOutputStream publicKeyOOS = new ObjectOutputStream(publicKeyFOS);
       // File for writing public key to Client
      FileOutputStream serverPublicKeyFOS = new FileOutputStream("pathToRSAPublicKeyFile");
      ObjectOutputStream serverPublicKeyOOS = new ObjectOutputStream(serverPublicKeyFOS);
 
 
 
       // Generate RSA key pair 
      KeyPair keyPairRSA = KeyPairGenerator.getInstance("RSA").generateKeyPair();
 
 
 
      // Write the keys to respective files
      privateKeyOOS.writeObject(keyPairRSA.getPrivate());
      publicKeyOOS.writeObject(keyPairRSA.getPublic());
      // Write the servers public key to client folder
      serverPublicKeyOOS.writeObject(keyPairRSA.getPublic());
 
      System.out.println("Private and Public keys have been generated using RSA  Encryption.");
      System.out.println("Both keys have been written to the Server folder.");
      System.out.println("The Public key has also been written to the Client folder.");
 
 
      privateKeyOOS.close();
      publicKeyOOS.close();
      privateKeyFOS.close();
      publicKeyFOS.close();
 
 
 
 
 
     }
     catch (Exception e) 
     {
      System.out.println(e);
     }
    }
}[/QUOTE]
 
[QUOTE]
 */
import java.io.*;
import javax.crypto.*;
 
 
 
public class ClientSecretSessionKeyGenerator {
  // Put all files local to this dir
 
    static String pathToClntSecKey = "ClientsSecretKey";
 
  public static void main(String args[]) {
 
   // Client Generates Secert key and writes to file
 
    try {
      // File for writing output
      FileOutputStream keyFOS = new FileOutputStream(pathToClntSecKey);
      ObjectOutputStream keyOOS = new ObjectOutputStream(keyFOS);
 
      // Generate random AES key
      KeyGenerator keygen = KeyGenerator.getInstance("AES");
      SecretKey SecKey = keygen.generateKey();
      keyOOS.writeObject(SecKey);
 
      System.out.println("Random Secret Key generated and written to file: ClientsSecretKey");
 
      keyOOS.close();
      keyFOS.close();
 
 
    } catch (Exception e) {
         System.out.println(e);
    }
  }
 
}

right I hope thats it, just add what ever directory you want at the start.

Where is the one main() that calls all of the other main() methods in the correct order?
You have commented out where I started calling the other mains:

public static void main(String args[]) {
//   ClientSecretKeyEncryption.main(args);

The ClientSecretKeyEncryption main() method tries to read the file: pathToKey before it is written later in the same method????

The path name Strings should NOT be in"s. The names are variables that have the values to be used.

Can you make a class with a main() method that calls all the methods in the correct order? I don't like having to execute more than one class when testing. Testing often requires repeated execution so having it all in one class makes it easier to do it correctly.