Store RSA public and private key to mysql database

[sanket jani]

hello friends ,

i want to store the generated keys into mysql database
i want to use RSA as the algorithm
if anyone have sample code for that than please share it

thank you.

[fred rosenberger]

well, first, we don't just hand out solutions here. Folk will help you figure out how to do it, but you need to do the heavy lifting.

next...where exactly are you stuck? inserting into the database? creating they keys? Installing the JDK?

Your post is really rather vague, so you are going to have a hard time getting specific help. You need to post specific questions. I'd suggest you check our FAQ on HowToAskQuestionsOnJavaRanch (<--that's a link).

[sanket jani]

this is the code which generate two keys

package com.msr;
 
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;

import javax.crypto.Cipher;

 
public class RSA{
	PrivateKey prKey = null;
	PublicKey puKey = null;

	public String rsaEncrypt(String input){
		try{

			KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
			Cipher cipher = Cipher.getInstance("RSA");
			RSA rsaOb = new RSA();
			kpg.initialize(512);
			KeyPair kp = kpg.generateKeyPair();
			prKey = kp.getPrivate();
			puKey = kp.getPublic();
			System.out.println("public key :- " + puKey);
			System.out.println("private key :- " + prKey);
			rsaOb.setPublicKey(puKey);
			rsaOb.setPrivateKey(prKey);
			cipher.init(Cipher.ENCRYPT_MODE	,puKey);
			byte[] cipherTxt = cipher.doFinal(input.getBytes());
			return cipherTxt.toString();
		
		}catch(Exception e){
			e.printStackTrace();
		}
		
		return null;
	}
	public String rsaDecrypt(String input,PrivateKey prKey){
		try{
			Cipher cipher = Cipher.getInstance("RSA");
			cipher.init(Cipher.DECRYPT_MODE	,prKey);
			byte[] plainTxt = cipher.doFinal(input.getBytes());
			return plainTxt.toString();
		}catch(Exception e){
			e.printStackTrace();
		}
		return null;
	}
	protected PublicKey setPublicKey(PublicKey puk){
		this.puKey = puk;
		return puKey;
	}
	protected PrivateKey setPrivateKey(PrivateKey prk){
		this.prKey=prk;
		return prKey;
	}
	protected PublicKey getPublicKey(){
		return puKey;
	}
	protected PrivateKey getPrivateKey(){
		return prKey;
	}
}
/*cipher.init(Cipher.ENCRYPT_MODE, pubKey);

byte[] cipherText = cipher.doFinal(input);
System.out.println("cipher: " + new String(cipherText));

cipher.init(Cipher.DECRYPT_MODE, privKey);
byte[] plainText = cipher.doFinal(cipherText);
System.out.println("plain : " + new String(plainText));*/

and i am calling this in to the servlet.
and want to store and retrieve from the database

[Richard Tookey]

That code is flawed both in concept and implementation but primarily in concept.

Concept - the concept of public key cryptography is that private and public keys are generated by someone who is the owner. The private key is kept very very secret and secure so that it can only be used by the owner. The public key does not need to be kept secret or secure and should passed to anyone who needs it to use it. This means that you are unlikely to need to generate an RSA key pair in a Servlet since you would have access to every private key generated in response to a client request and your client would not have access unless you sent it to him. Now you could send it over HTTPS to make it secure but your client would then be able to plausibly deny anything signed by that key since it could equally well be have been signed by you.

Implementation - in your encrypt method this line of code

            return cipherTxt.toString();
  

return a string representation of a reference to an array and does not in any way represent the content of the array. Also, the cipher text is binary and an only safely be converted to text using some form of encoding such as Base64 or ASSCII or ASCII85.


Before going any further you need to spend a significant time learning the fundamental concepts since your current code can at best result in a security flawed implementation.