package com.crm.rely.backend.util;

import javax.xml.bind.DatatypeConverter;
import java.security.*;
import java.security.spec.ECGenParameterSpec;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * @Author houn
 * @Date 2024/4/22 12:51
 * @PackageName:com.crm.rely.backend.util
 * @ClassName: ECDSAUtil
 * @Description: TODO
 */
public class ECDSAUtil {

    private static final String SIGNALGORITHMS = "SHA256withECDSA";
    private static final String ALGORITHM = "EC";
    private static final String SECP256K1 = "secp256k1";


    public static void main(String[] args) throws Exception {

//        生成公钥私钥
        KeyPair keyPair1 = getKeyPair();
        PublicKey publicKey1 = keyPair1.getPublic();
        PrivateKey privateKey1 = keyPair1.getPrivate();
        //密钥转16进制字符串
        String publicKey = HexUtil.bytes2Hex(publicKey1.getEncoded());
        String privateKey = HexUtil.bytes2Hex(privateKey1.getEncoded());
        System.out.println("生成公钥：" + publicKey);
        System.out.println("生成私钥：" + privateKey);
//        //16进制字符串转密钥对象
//        PrivateKey privateKey2 = getPrivateKey(privateKey);
//        PublicKey publicKey2 = getPublicKey(publicKey);
//        //加签验签
//        String data = "需要签名的数据";
//        String signECDSA = signECDSA(privateKey2, data);
//        boolean verifyECDSA = verifyECDSA(publicKey2, signECDSA, data);
//        System.out.println("验签结果：" + verifyECDSA);


        System.out.println(signECDSA("bb06971bb6abb30da07f095a286e4e89ffd2b44cc83ea4d14fc68f85924884e1", "12"));
    }

    /**
     * 加签
     *
     * @param privateKey 私钥
     * @param data       数据
     * @return
     */
    public static String signECDSA(String privateKey, String data) throws Exception {

        return signECDSA(getPrivateKey(privateKey), data);
    }

    public static String signECDSA(PrivateKey privateKey, String data) {
        String result = "";
        try {
            //执行签名
            Signature signature = Signature.getInstance(SIGNALGORITHMS);
            signature.initSign(privateKey);
            signature.update(data.getBytes());
            byte[] sign = signature.sign();
            return HexUtil.bytes2Hex(sign);
        } catch (Exception e) {
            e.printStackTrace();
        }
        return result;
    }

    public static boolean verifyECDSA(String publicKey, String signed, String data) throws Exception {

        return verifyECDSA(getPublicKey(publicKey), signed, data);
    }

    /**
     * 验签
     *
     * @param publicKey 公钥
     * @param signed    签名
     * @param data      数据
     * @return
     */
    public static boolean verifyECDSA(PublicKey publicKey, String signed, String data) {
        try {
            //验证签名
            Signature signature = Signature.getInstance(SIGNALGORITHMS);
            signature.initVerify(publicKey);
            signature.update(data.getBytes());
            byte[] hex = HexUtil.decode(signed);
            boolean bool = signature.verify(hex);
            // System.out.println("验证：" + bool);
            return bool;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return false;
    }

    /**
     * 从string转private key
     *
     * @param key 私钥的字符串
     * @return
     * @throws Exception
     */
    public static PrivateKey getPrivateKey(String key) throws Exception {

        byte[] bytes = DatatypeConverter.parseHexBinary(key);
        PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(bytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM);
        return keyFactory.generatePrivate(keySpec);
    }

    /**
     * 从string转publicKey
     *
     * @param key 公钥的字符串
     * @return
     * @throws Exception
     */
    public static PublicKey getPublicKey(String key) throws Exception {

        byte[] bytes = DatatypeConverter.parseHexBinary(key);
        X509EncodedKeySpec keySpec = new X509EncodedKeySpec(bytes);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM);
        return keyFactory.generatePublic(keySpec);
    }


    /**
     * 生成密钥对
     *
     * @return
     * @throws Exception
     */
    public static KeyPair getKeyPair() throws Exception {

        ECGenParameterSpec ecSpec = new ECGenParameterSpec(SECP256K1);
        KeyPairGenerator kf = KeyPairGenerator.getInstance(ALGORITHM);
        kf.initialize(ecSpec, new SecureRandom());
        KeyPair keyPair = kf.generateKeyPair();
        return keyPair;
    }


}