如何利用bouncy castle实现电子邮件的随机密钥加密

Question

我使用bouncy-castle来实现SMIME（公钥加密）。要向多个收件人发送加密电子邮件，我选择了此方法

/* Create the encrypter */
SMIMEEnvelopedGenerator encrypter = new SMIMEEnvelopedGenerator();
encrypter.addKeyTransRecipient((X509Certificate) certChain[0]);

/* Encrypt the MimeMessage*/
MimeBodyPart encryptedPart = encrypter.generate(signedMessage,
SMIMEEnvelopedGenerator.RC2_CBC, "BC");

Answer 1

搞定了。解决方案非常简单，只需将所有收件人证书添加到bouncy castle EnvelopedGenerator并加密即可。

/* Create the encrypter */
SMIMEEnvelopedGenerator encrypter = new SMIMEEnvelopedGenerator();
encrypter.addKeyTransRecipient((X509Certificate) recipient1Cert);
encrypter.addKeyTransRecipient((X509Certificate) recipient2Cert);

/* Encrypt the MimeMessage*/
MimeBodyPart encryptedPart = encrypter.generate(signedMessage,
SMIMEEnvelopedGenerator.RC2_CBC, "BC");

解密时只需提供接收方证书。如果它是加密证书之一，您的消息将被成功解密。