【问题标题】:BouncyCastle decryption - premature end of stream in PartialInputStreamBouncyCastle 解密 - PartialInputStream 中的流过早结束
【发布时间】:2023-03-22 10:22:01
【问题描述】:

我正在尝试解密和验证加密的文件,但在进行完整性检查时出现异常java.io.EOFException:PartialInputStream 中的流过早结束。数据被正确解密并检查签名。

异常发生在 pbe.verify() 中。

有谁知道为什么会发生这种情况以及如何解决?

我在 1.51 版本上使用 jdk15。

代码如下:

public static void decryptFile(InputStream in, OutputStream out, InputStream keyIn, InputStream publicKeyIn, char[] passwd)
           throws Exception {
      Security.addProvider(new BouncyCastleProvider());

      in = org.bouncycastle.openpgp.PGPUtil.getDecoderStream(in);

      PGPObjectFactory pgpF = new PGPObjectFactory(in);
      PGPEncryptedDataList enc;

      Object o = pgpF.nextObject();
      //
      // the first object might be a PGP marker packet.
      //
      if (o instanceof  PGPEncryptedDataList) {
         enc = (PGPEncryptedDataList) o;
      } else {
         enc = (PGPEncryptedDataList) pgpF.nextObject();
      }

      //
      // find the secret key
      //
      Iterator<PGPPublicKeyEncryptedData> it = enc.getEncryptedDataObjects();
      PGPPrivateKey sKey = null;
      PGPPublicKeyEncryptedData pbe = null;

      while (sKey == null && it.hasNext()) {
         pbe = it.next();

         sKey = findPrivateKey(keyIn, pbe.getKeyID(), passwd);
      }

      if (sKey == null) {
         throw new IllegalArgumentException("Secret key for message not found.");
      }

      InputStream clear = pbe.getDataStream(new BcPublicKeyDataDecryptorFactory(sKey));

      PGPObjectFactory plainFact = new PGPObjectFactory(clear);

      Object message = plainFact.nextObject();


      PGPOnePassSignatureList onePassSignatureList = null;
      PGPSignatureList signatureList = null;
      PGPCompressedData compressedData;

      ByteArrayOutputStream actualOutput = new ByteArrayOutputStream();

      if (message instanceof  PGPCompressedData) {
         PGPCompressedData cData = (PGPCompressedData) message;
         PGPObjectFactory pgpFact = new PGPObjectFactory(cData.getDataStream());

         message = pgpFact.nextObject();

         if (message instanceof  PGPLiteralData) {
            PGPLiteralData ld = (PGPLiteralData) message;

            InputStream unc = ld.getInputStream();
            int ch;

            Streams.pipeAll(unc, actualOutput);
         } else if (message instanceof  PGPOnePassSignatureList) {
            PGPPublicKey publicKey = readPublicKey(publicKeyIn);
             onePassSignatureList = (PGPOnePassSignatureList) message;
            if (onePassSignatureList == null) {
               throw new PGPException("Poor PGP. Signatures not found.");
            } else {
               if (publicKey != null) {
                  PGPLiteralData p2 = (PGPLiteralData) pgpFact.nextObject();
                  int ch;
                  InputStream dln = p2.getInputStream();

                  Streams.pipeAll(dln, actualOutput);
                  PGPOnePassSignature ops = onePassSignatureList.get(0);
                  ops.init(new JcaPGPContentVerifierBuilderProvider().setProvider("BC"), publicKey);

                  ops.update(actualOutput.toByteArray());

                  PGPSignatureList p3 = (PGPSignatureList) pgpFact.nextObject();
                  if (!ops.verify(p3.get(0))) {
                     throw new PGPException("Signature verification failed!");
                  }
                  out.close();
               }
            }
         } else {
            throw new PGPException("Message is not a simple encrypted file - type unknown.");
         }
      }

      if (pbe.isIntegrityProtected()) {
         if (!pbe.verify()) {
            throw new PGPException("Message failed integrity check");
         }
      }
      out.write(actualOutput.toByteArray());
      out.flush();
      out.close();
   }

完整的堆栈跟踪:

严重:servlet appServlet 的 Servlet.service() 抛出异常 java.io.EOFException:PartialInputStream 中的流过早结束 在 org.bouncycastle.bcpg.BCPGInputStream$PartialInputStream.read(未知来源) 在 org.bouncycastle.bcpg.BCPGInputStream.read(未知来源) 在 java.io.InputStream.read(InputStream.java:82) 在 org.bouncycastle.crypto.io.CipherInputStream.nextChunk(未知来源) 在 org.bouncycastle.crypto.io.CipherInputStream.read(未知来源) 在 org.bouncycastle.bcpg.BCPGInputStream.read(未知来源) 在 org.bouncycastle.openpgp.PGPEncryptedData$TruncatedStream.read(未知来源) 在 org.bouncycastle.util.io.TeeInputStream.read(未知来源) 在 org.bouncycastle.openpgp.PGPEncryptedData.verify(未知来源) 在 com.bstonetech.ptms.integration.util.PGPUtils.decryptFile(PGPUtils.java:314) 在 com.bstonetech.ptms.integration.service.encryption.EncryptionService.decrypt(EncryptionService.java:252) 在 com.bstonetech.ptms.integration.service.file.FileService.createStringFile(FileService.java:583) 在 sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 在 sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 在 sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 在 java.lang.reflect.Method.invoke(Method.java:597) 在 org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:302) 在 org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:201) 在 com.sun.proxy.$Proxy35.createStringFile(未知来源) 在 sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 在 sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 在 sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 在 java.lang.reflect.Method.invoke(Method.java:597) 在 org.springframework.expression.spel.support.ReflectiveMethodExecutor.execute(ReflectiveMethodExecutor.java:112) 在 org.springframework.expression.spel.ast.MethodReference.getValueInternal(MethodReference.java:129) 在 org.springframework.expression.spel.ast.MethodReference.access$000(MethodReference.java:49) 在 org.springframework.expression.spel.ast.MethodReference$MethodValueRef.getValue(MethodReference.java:342) 在 org.springframework.expression.spel.ast.CompoundExpression.getValueInternal(CompoundExpression.java:88) 在 org.springframework.expression.spel.ast.SpelNodeImpl.getTypedValue(SpelNodeImpl.java:131) 在 org.springframework.expression.spel.standard.SpelExpression.getValue(SpelExpression.java:330) 在 org.springframework.integration.util.AbstractExpressionEvaluator.evaluateExpression(AbstractExpressionEvaluator.java:166) 在 org.springframework.integration.util.MessagingMethodInvokerHelper.processInternal(MessagingMethodInvokerHelper.java:317) 在 org.springframework.integration.util.MessagingMethodInvokerHelper.process(MessagingMethodInvokerHelper.java:155) 在 org.springframework.integration.handler.MethodInvokingMessageProcessor.processMessage(MethodInvokingMessageProcessor.java:93) 在 org.springframework.integration.handler.ServiceActivatingHandler.handleRequestMessage(ServiceActivatingHandler.java:89) 在 org.springframework.integration.handler.AbstractReplyProducingMessageHandler.handleMessageInternal(AbstractReplyProducingMessageHandler.java:99) 在 org.springframework.integration.handler.AbstractMessageHandler.handleMessage(AbstractMessageHandler.java:127) 在 org.springframework.integration.dispatcher.AbstractDispatcher.tryOptimizedDispatch(AbstractDispatcher.java:116) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.doDispatch(UnicastingDispatcher.java:147) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.dispatch(UnicastingDispatcher.java:120) 在 org.springframework.integration.channel.AbstractSubscribableChannel.doSend(AbstractSubscribableChannel.java:77) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:442) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:392) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:115) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:45) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.send(AbstractMessageSendingTemplate.java:105) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.sendOutput(AbstractMessageProducingHandler.java:231) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.produceOutput(AbstractMessageProducingHandler.java:154) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.sendOutputs(AbstractMessageProducingHandler.java:102) 在 org.springframework.integration.handler.AbstractReplyProducingMessageHandler.handleMessageInternal(AbstractReplyProducingMessageHandler.java:105) 在 org.springframework.integration.handler.AbstractMessageHandler.handleMessage(AbstractMessageHandler.java:127) 在 org.springframework.integration.dispatcher.AbstractDispatcher.tryOptimizedDispatch(AbstractDispatcher.java:116) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.doDispatch(UnicastingDispatcher.java:147) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.dispatch(UnicastingDispatcher.java:120) 在 org.springframework.integration.channel.AbstractSubscribableChannel.doSend(AbstractSubscribableChannel.java:77) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:442) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:392) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:115) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:45) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.send(AbstractMessageSendingTemplate.java:105) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.sendOutput(AbstractMessageProducingHandler.java:231) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.produceOutput(AbstractMessageProducingHandler.java:154) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.sendOutputs(AbstractMessageProducingHandler.java:102) 在 org.springframework.integration.handler.AbstractReplyProducingMessageHandler.handleMessageInternal(AbstractReplyProducingMessageHandler.java:105) 在 org.springframework.integration.handler.AbstractMessageHandler.handleMessage(AbstractMessageHandler.java:127) 在 org.springframework.integration.dispatcher.AbstractDispatcher.tryOptimizedDispatch(AbstractDispatcher.java:116) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.doDispatch(UnicastingDispatcher.java:147) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.dispatch(UnicastingDispatcher.java:120) 在 org.springframework.integration.channel.AbstractSubscribableChannel.doSend(AbstractSubscribableChannel.java:77) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:442) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:392) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:115) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:45) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.send(AbstractMessageSendingTemplate.java:105) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.sendOutput(AbstractMessageProducingHandler.java:231) 在 org.springframework.integration.handler.AbstractMessageProducingHandler.produceOutput(AbstractMessageProducingHandler.java:154) 在 org.springframework.iListening for transport dt_socket 地址:80 01ntegration.handler.AbstractMessageProducingHandler.sendOutputs(AbstractMessageProducingHandler.java:102) 在 org.springframework.integration.handler.AbstractReplyProducingMessageHandler.handleMessageInternal(AbstractReplyProducingMessageHandler.java:105) 在 org.springframework.integration.handler.AbstractMessageHandler.handleMessage(AbstractMessageHandler.java:127) 在 org.springframework.integration.dispatcher.AbstractDispatcher.tryOptimizedDispatch(AbstractDispatcher.java:116) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.doDispatch(UnicastingDispatcher.java:147) 在 org.springframework.integration.dispatcher.UnicastingDispatcher.dispatch(UnicastingDispatcher.java:120) 在 org.springframework.integration.channel.AbstractSubscribableChannel.doSend(AbstractSubscribableChannel.java:77) 在 org.springframework.integration.channel.AbstractMessageChannel.send(AbstractMessageChannel.java:442) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:115) 在 org.springframework.messaging.core.GenericMessagingTemplate.doSend(GenericMessagingTemplate.java:45) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.send(AbstractMessageSendingTemplate.java:105) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.convertAndSend(AbstractMessageSendingTemplate.java:143) 在 org.springframework.messaging.core.AbstractMessageSendingTemplate.convertAndSend(AbstractMessageSendingTemplate.java:135) 在 org.springframework.integration.gateway.MessagingGatewaySupport.send(MessagingGatewaySupport.java:295) 在 org.springframework.integration.http.inbound.HttpRequestHandlingEndpointSupport.actualDoHandleRequest(HttpRequestHandlingEndpointSupport.java:527) 在 org.springframework.integration.http.inbound.HttpRequestHandlingEndpointSupport.doHandleRequest(HttpRequestHandlingEndpointSupport.java:404) 在 org.springframework.integration.http.inbound.HttpRequestHandlingMessagingGateway.handleRequest(HttpRequestHandlingMessagingGateway.java:103) 在 org.springframework.web.servlet.mvc.HttpRequestHandlerAdapter.handle(HttpRequestHandlerAdapter.java:51) 在 org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:959) 在 org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:893) 在 org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970) 在 org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872) 在 javax.servlet.http.HttpServlet.service(HttpServlet.java:643) 在 org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846) 在 javax.servlet.http.HttpServlet.service(HttpServlet.java:723) 在 org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) 在 org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 在 org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) 在 org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) 在 org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) 在 org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) 在 org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) 在 org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) 在 org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:861) 在 org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:620) 在 org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) at java.lang.Thread.run(Thread.java:662) 在地址监听传输 dt_socket:8001

【问题讨论】:

  • 你有什么解决方案吗?如是;你能发布你的答案吗?

标签: java encryption bouncycastle pgp


【解决方案1】:

您可能会忘记 encryptAndSign 方法中的关闭/刷新流。

【讨论】:

    猜你喜欢
    • 1970-01-01
    • 1970-01-01
    • 2011-08-05
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    • 2015-01-08
    相关资源
    最近更新 更多