Java Socket数据传输如何加密

在Java中，使用Socket进行数据传输时，可以通过以下几种方式对数据进行加密：

1. 使用SSL/TLS（安全套接层/传输层安全协议）：

Java提供了SSLSocket和SSLServerSocket类，它们分别继承自Socket和ServerSocket。这些类允许你在Socket通信中使用SSL/TLS加密。要使用这些类，你需要一个密钥库（keystore），其中包含服务器的证书和私钥。

以下是一个简单的示例，展示了如何使用SSLSocket和SSLServerSocket进行加密通信：

客户端：

import javax.net.ssl.SSLSocket;
import java.io.*;

public class SSLClient {
    public static void main(String[] args) throws IOException {
        SSLSocket sslSocket = new SSLSocket("localhost", 8443);
        sslSocket.startHandshake();

        OutputStream outputStream = sslSocket.getOutputStream();
        PrintWriter out = new PrintWriter(outputStream, true);

        InputStream inputStream = sslSocket.getInputStream();
        BufferedReader in = new BufferedReader(new InputStreamReader(inputStream));

        out.println("Hello, SSL Server!");
        String response = in.readLine();
        System.out.println("Server response: " + response);

        sslSocket.close();
    }
}

服务器：

import javax.net.ssl.SSLServerSocket;
import javax.net.ssl.SSLServerSocketFactory;
import java.io.*;

public class SSLServer {
    public static void main(String[] args) throws IOException {
        SSLServerSocketFactory sslServerSocketFactory = (SSLServerSocketFactory) SSLServerSocketFactory.getDefault();
        SSLServerSocket sslServerSocket = (SSLServerSocket) sslServerSocketFactory.createServerSocket(8443);

        while (true) {
            SSLSocket sslSocket = (SSLSocket) sslServerSocket.accept();

            InputStream inputStream = sslSocket.getInputStream();
            BufferedReader in = new BufferedReader(new InputStreamReader(inputStream));

            OutputStream outputStream = sslSocket.getOutputStream();
            PrintWriter out = new PrintWriter(outputStream, true);

            String request = in.readLine();
            System.out.println("Client request: " + request);
            out.println("Hello, SSL Client!");
        }
    }
}

2. 使用自定义加密算法：

如果你不想使用SSL/TLS，你可以实现自己的加密算法。这可能涉及到使用Java的加密库，如Java Cryptography Extension (JCE)。你可以选择对称加密算法（如AES）或非对称加密算法（如RSA）。

以下是一个使用AES对称加密算法的简单示例：

客户端：

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import java.io.*;
import java.net.Socket;

public class AESEncryptedClient {
    public static void main(String[] args) throws Exception {
        KeyGenerator keyGenerator = KeyGenerator.getInstance("AES");
        keyGenerator.init(128);
        SecretKey secretKey = keyGenerator.generateKey();

        try (Socket socket = new Socket("localhost", 8443);
             ObjectOutputStream oos = new ObjectOutputStream(socket.getOutputStream())) {

            oos.writeObject(secretKey);
            oos.flush();

            Cipher cipher = Cipher.getInstance("AES");
            cipher.init(Cipher.ENCRYPT_MODE, secretKey);

            String message = "Hello, Encrypted Server!";
            byte[] encryptedMessage = cipher.doFinal(message.getBytes());
            oos.write(encryptedMessage);
            oos.flush();

            InputStream inputStream = socket.getInputStream();
            ObjectInputStream ois = new ObjectInputStream(inputStream);
            byte[] receivedEncryptedMessage = (byte[]) ois.readObject();
            cipher.init(Cipher.DECRYPT_MODE, secretKey);
            String decryptedResponse = new String(cipher.doFinal(receivedEncryptedMessage));
            System.out.println("Server response: " + decryptedResponse);
        }
    }
}

服务器：

import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import java.io.*;
import java.net.ServerSocket;
import java.net.Socket;
import java.util.Base64;

public class AESEncryptedServer {
    public static void main(String[] args) throws Exception {
        try (ServerSocket serverSocket = new ServerSocket(8443)) {
            while (true) {
                Socket socket = serverSocket.accept();

                ObjectInputStream ois = new ObjectInputStream(socket.getInputStream());
                SecretKey secretKey = (SecretKey) ois.readObject();

                Cipher cipher = Cipher.getInstance("AES");
                cipher.init(Cipher.DECRYPT_MODE, secretKey);

                InputStream inputStream = socket.getInputStream();
                ObjectInputStream ois2 = new ObjectInputStream(inputStream);
                byte[] receivedEncryptedMessage = (byte[]) ois2.readObject();
                String decryptedRequest = new String(cipher.doFinal(receivedEncryptedMessage));
                System.out.println("Client request: " + decryptedRequest);

                ByteArrayOutputStream baos = new ByteArrayOutputStream();
                CipherOutputStream cos = new CipherOutputStream(baos, cipher);
                cos.write("Hello, Encrypted Client!".getBytes());
                cos.flush();

                byte[] encryptedResponse = baos.toByteArray();
                ObjectOutputStream oos = new ObjectOutputStream(socket.getOutputStream());
                oos.writeObject(Base64.getEncoder().encodeToString(encryptedResponse));
                oos.flush();
            }
        }
    }
}

请注意，这只是一个简单的示例，实际应用中可能需要更多的错误处理和安全性考虑。在生产环境中，建议使用SSL/TLS进行加密通信。