#副標=Java平台安全設計
#大標=在Java平台使用與設計資訊安全物件
#作者=文／成大資通安全研發中心



===============box===========
　　Signature  rsaSign = Signature.getInstance("SHA1withRSA");
=================end===============


　　security.provider.1=sun.security.provider.Sun
　　security.provider.2=sun.security.rsa.SunRsaSign
　　security.provider.3=com.sun.net.ssl.internal.ssl.Provider
　　security.provider.4=com.sun.crypto.provider.SunJCE
　　security.provider.5=sun.security.jgss.SunProvider
　　security.provider.6=com.sun.security.sasl.Provider
　　security.provider.7=org.jcp.xml.dsig.internal.dom.XMLDSigRI
　　security.provider.8=sun.security.smartcardio.SunPCSC
　　security.provider.9=sun.security.mscapi.SunMSCAPI




============TestProvider.java=============
import java.security.*;
public class TestProvider {
	public static void main(String[] args) {
		Provider[] p=Security.getProviders();
		for(int i=0; i<p.length; i++) {
			System.out.println("Provider Name: "+p[i].getName());
			System.out.println("Provider Version: "+p[i].getVersion());
			System.out.println("Provider Information: ");
			System.out.println(p[i].getInfo());
			System.out.println();
		}
	}
     }
     =====================END====================




===========TestProvideSHA1RSA.java============
import java.security.*;
public class TestProvideSHA1RSA {
	public static void main(String[] args) {
		Provider[] p=Security.getProviders();
		System.out.println("SHA1withRSA Provider: ");
		for(int i=0; i<p.length; i++) {
			try{
				Signature rsa1 = Signature.getInstance("SHA1withRSA",p[i]);
				System.out.println(p[i].getName());
			}
			catch(NoSuchAlgorithmException e) { }	
		}
	}
}

=========================END====================




=========box=======
SHA1withRSA Provider:
　SunRsaSign
　SunJSSE
　SunMSCAPI
==========End==========





==========box 程式1==========
import java.security.*;
import java.util.Date;
public class TestSHA1withRSA {
	public static void main(String[] args) {
		try {
			String str = new String("The input string for signing.");
			Date date = new Date();
			// Key Generation
			SecureRandom ran = SecureRandom.getInstance("SHA1PRNG");
			KeyPairGenerator rsaKeyGen = 
     KeyPairGenerator.getInstance("RSA");
			ran.setSeed(date.getTime());
			rsaKeyGen.initialize(1024, ran);  //如執行較久可將1024改為512
			KeyPair kpair = rsaKeyGen.generateKeyPair();
			
			Signature sha1rsa = Signature.getInstance("SHA1withRSA");
			// Sign Message
			PrivateKey kr = kpair.getPrivate();
			sha1rsa.initSign(kr);
			sha1rsa.update(str.getBytes());
			byte[] sig = sha1rsa.sign();
			
			//Verify Signature
			PublicKey ku = kpair.getPublic();
			sha1rsa.initVerify(ku);
			sha1rsa.update(str.getBytes());
			boolean isValid = sha1rsa.verify(sig);
			System.out.println("Signature verifies ==> "+isValid);
		}
    	catch(NoSuchAlgorithmException e) { System.out.println("No such algorithm.");  	}	
    	catch(InvalidKeyException e) { System.out.println("Invalid Key."); }
    	catch(SignatureException e) { System.out.println("Invalid Signature.");	}	
	}
}
　　==============end=============



　　========box=======
     Signature verifies ==> true
     ===========end============



==========box 程式2==========
　　　　　　　　super("IsuCrypto", 1.0, "SHA1 with RSA siganure, Onlt for Test"); 
　　　　　　　　               :
put("Signature.SHA1withRSA","tw.edu.isu.IsuCrypt.RSAsig");  
// 前為服務名稱，後為類別位置
put("Alg.Alias.Signature.SHA-1withRSA", "SHA1withRSA"); 
// 服務之別名
=================end===============





============box 指令1=========
             jar cvf <JAR file name> <list of classes, separated by spaces>
             =============END=============




===========box指令2========
    keytool -genkeypair -alias <alias> \
    -keyalg DSA -keysize 1024 \
    -dname "cn=<Company Name>, ou=Java Software Code Signing,\
                o=Sun Microsystems Inc" \
    -keystore <keystore file name>\
    -storepass <keystore password>
====================end==============





============box 指令3===========
    keytool -certreq -alias <alias> \
    -file <csr file name> \
    -keystore <keystore file name> \
    -storepass <keystore password>
====================end==============





===========box指令4==========
    keytool -import -alias <alias for the CA cert> \
    -file <CA cert file name> \
    -keystore <keystore file name> \
    -storepass <keystore password>

    keytool -import -alias <alias> \
    -file <code-signing cert file name> \
    -keystore <keystore file name> \
    -storepass <keystore password>
===============end===============



===========box指令5==========

    jarsigner -keystore <keystore file name> \ 
    -storepass <keystore password> \ 
    <JAR file name> <alias>
===============end===============




===========box指令6==========
    jarsigner -verify <JAR file name>
===============end===============