SpongyCastle提供程序加载SHA1withRSA算法，但仍然不可用。

Question

我使用的是SpongCastle提供者 v1.51。我在我的项目中添加了下面的maven，如下所示(只与SpongyCastle相关)

基于应答从StackOverflow来的，已经将SpongyCastle PGP添加到maven pom文件中。

我仍然在测试调试，不使用任何Proguard特性。

pom.xml

        <dependency>
            <groupId>com.madgag.spongycastle</groupId>
            <artifactId>core</artifactId>
            <version>1.51.0.0</version>
        </dependency>


        <dependency>
            <groupId>com.madgag.spongycastle</groupId>
            <artifactId>prov</artifactId>
            <version>1.51.0.0</version>
        </dependency>

        <dependency>
            <groupId>com.madgag.spongycastle</groupId>
            <artifactId>pg</artifactId>
            <version>1.51.0.0</version>
        </dependency>

下面是签名的代码

private Document sign(Document document, boolean paramBoolean)throws Exception{
        if (System.getenv("SKIP_DIGITAL_SIGNATURE") != null) {
            return document;
        }

        X509Certificate x509Certificate = (X509Certificate)this.ks.getCertificate(this.alias);
        Logger.d(TAG, "document base uri "+document.getBaseURI());
        if(!Init.isInitialized()){
            Logger.d(TAG, "initialzing the Init");
            Init.init();
        }else{
            Logger.d(TAG, "already initialzed");
        }
//      Logger.d(TAG, ""+localX509Certificate.get);
        XMLSignature localXMLSignature = new XMLSignature(document,"", XMLSignature.ALGO_ID_SIGNATURE_RSA_SHA1);
        document.getDocumentElement().appendChild(localXMLSignature.getElement());
        Transforms localTransforms = new Transforms(document);
        localTransforms.addTransform("http://www.w3.org/2000/09/xmldsig#enveloped-signature");
        localXMLSignature.addDocument("", localTransforms, XMLSignature.ALGO_ID_SIGNATURE_RSA_SHA1);
        X509Data localX509Data = new X509Data(document);
        localXMLSignature.getKeyInfo().add(localX509Data);
        localX509Data.addSubjectName(x509Certificate.getSubjectX500Principal().getName());
        localX509Data.addCertificate(x509Certificate);
        localXMLSignature.sign(this.privateKey);
        return document;
    }

    public String signXML(String paramString, boolean paramBoolean)
    {
/*      BouncyCastleProvider provider=new BouncyCastleProvider();
        Set<Service>service=provider.getServices();

        PKCSObjectIdentifiers.sha1WithRSAEncryption
        Security.addProvider(new BouncyCastleProvider());
         Iterator<Service> itr=service.iterator();
         while(itr.hasNext()){
             Service ser=itr.next();
             ser.
         }*/
        //added spongycastle provider here
        Security.addProvider(new org.spongycastle.jce.provider.BouncyCastleProvider());
//      new org.spongycastle.jce.provider.BouncyCastleProvider().
//      Security.addProvider(new );
        try
        {
            DocumentBuilderFactory localDocumentBuilderFactory = DocumentBuilderFactory.newInstance();
            localDocumentBuilderFactory.setNamespaceAware(true);
            Document localDocument = sign(localDocumentBuilderFactory.newDocumentBuilder().parse(new InputSource(new StringReader(paramString))), paramBoolean);
            StringWriter localStringWriter = new StringWriter();
            TransformerFactory.newInstance().newTransformer().transform(new DOMSource(localDocument), new StreamResult(localStringWriter));
            String str = localStringWriter.getBuffer().toString();
            return str;
        }
        catch (Exception localException)
        {
            localException.printStackTrace();
            throw new RuntimeException("Error while digitally signing the XML document", localException);
        }
    }

日志堆栈跟踪

05-04 11:26:34.716: W/dalvikvm(10319): dvmFindClassByName rejecting 'org/apache/xml/security/resource/xmlsecurity_en_US'
05-04 11:26:34.716: W/dalvikvm(10319): dvmFindClassByName rejecting 'org/apache/xml/security/resource/xmlsecurity_en'
05-04 11:26:34.746: W/dalvikvm(10319): dvmFindClassByName rejecting 'org/apache/xml/security/resource/xmlsecurity'
05-04 11:26:34.846: W/System.err(10319): org.apache.xml.security.signature.XMLSignatureException: The requested algorithm SHA1withRSA does not exist. Original Message was: MessageDigest SHA1withRSA implementation not found
05-04 11:26:34.846: W/System.err(10319):    at org.apache.xml.security.algorithms.MessageDigestAlgorithm.getInstance(Unknown Source)
05-04 11:26:34.846: W/System.err(10319):    at org.apache.xml.security.signature.Reference.<init>(Unknown Source)
05-04 11:26:34.846: W/System.err(10319):    at org.apache.xml.security.signature.Manifest.addDocument(Unknown Source)
05-04 11:26:34.846: W/System.err(10319):    at org.apache.xml.security.signature.XMLSignature.addDocument(Unknown Source)
05-04 11:26:34.846: W/System.err(10319):    at com.companyname.project.auth.helper.DigitalSigner.sign(DigitalSigner.java:78)
05-04 11:26:34.846: W/System.err(10319):    at com.companyname.project.auth.helper.DigitalSigner.signXML(DigitalSigner.java:106)
05-04 11:26:34.846: W/System.err(10319):    at com.companyname.project.auth.client.AuthClient.authenticate(AuthClient.java:50)
05-04 11:26:34.846: W/System.err(10319):    at com.companyname.project.auth.client.AuthRequest.authenticateRequest(AuthRequest.java:138)
05-04 11:26:34.856: W/System.err(10319):    at com.companyname.project.activity.MainActivity$AuthenticateResultAsyncTask.doInBackground(MainActivity.java:163)
05-04 11:26:34.856: W/System.err(10319):    at com.companyname.project.activity.MainActivity$AuthenticateResultAsyncTask.doInBackground(MainActivity.java:132)
05-04 11:26:34.856: W/System.err(10319):    at android.os.AsyncTask$2.call(AsyncTask.java:264)
05-04 11:26:34.856: W/System.err(10319):    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
05-04 11:26:34.856: W/System.err(10319):    at java.util.concurrent.FutureTask.run(FutureTask.java:137)
05-04 11:26:34.856: W/System.err(10319):    at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:208)
05-04 11:26:34.856: W/System.err(10319):    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
05-04 11:26:34.856: W/System.err(10319):    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
05-04 11:26:34.856: W/System.err(10319):    at java.lang.Thread.run(Thread.java:856)
05-04 11:26:34.856: W/System.err(10319): java.lang.RuntimeException: Error while digitally signing the XML document
05-04 11:26:34.866: W/System.err(10319):    at com.companyname.project.auth.helper.DigitalSigner.signXML(DigitalSigner.java:115)
05-04 11:26:34.866: W/System.err(10319):    at com.companyname.project.auth.client.AuthClient.authenticate(AuthClient.java:50)
05-04 11:26:34.876: W/System.err(10319):    at com.companyname.project.auth.client.AuthRequest.authenticateRequest(AuthRequest.java:138)
05-04 11:26:34.876: W/System.err(10319):    at com.companyname.project.activity.MainActivity$AuthenticateResultAsyncTask.doInBackground(MainActivity.java:163)
05-04 11:26:34.876: W/System.err(10319):    at com.companyname.project.activity.MainActivity$AuthenticateResultAsyncTask.doInBackground(MainActivity.java:132)
05-04 11:26:34.876: W/System.err(10319):    at android.os.AsyncTask$2.call(AsyncTask.java:264)
05-04 11:26:34.876: W/System.err(10319):    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
05-04 11:26:34.876: W/System.err(10319):    at java.util.concurrent.FutureTask.run(FutureTask.java:137)
05-04 11:26:34.876: W/System.err(10319):    at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:208)
05-04 11:26:34.876: W/System.err(10319):    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
05-04 11:26:34.876: W/System.err(10319):    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
05-04 11:26:34.876: W/System.err(10319):    at java.lang.Thread.run(Thread.java:856)

Q.1为什么SHA1WithRSA算法不可用，即使在SpongyCastle加载算法之后？

Q.2为什么在世界上Android不支持类加载，因为它是使用JAXB使用的.class (我正在尝试使用/打包一个.class并对其进行数字签名)。它增加了我的发展时间，从几天到几周。

Poor android does not support XML that good.

请随时要求进一步澄清。谢谢您抽时间见我。

更新：

我从这里添加了以下代码，以获得算法列表

Security.addProvider(new org.spongycastle.jce.provider.BouncyCastleProvider());
//      new org.spongycastle.jce.provider.BouncyCastleProvider().
//      Security.addProvider(new );

        for (Provider provider : Security.getProviders()) {
            System.out.println("Provider: " + provider.getName());
            for (Provider.Service service : provider.getServices()) {
                System.out.println("  Algorithm: " + service.getAlgorithm());
            }
        }

算法列表的输出(不完整，只是特定的)

05-04 12:13:48.145: I/System.out(22193):   Algorithm: DETECDSA
05-04 12:13:48.145: I/System.out(22193):   Algorithm: SEED-GMAC
05-04 12:13:48.145: I/System.out(22193):   Algorithm: RC5
05-04 12:13:48.145: I/System.out(22193):   Algorithm: CERTIFICATE
05-04 12:13:48.145: I/System.out(22193):   Algorithm: POLY1305-CAMELLIA
05-04 12:13:48.145: I/System.out(22193):   Algorithm: HC256
05-04 12:13:48.145: I/System.out(22193):   Algorithm: VMPC-KSA3
05-04 12:13:48.145: I/System.out(22193):   Algorithm: DESMAC64

05-04 12:13:48.145: I/System.out(22193):   Algorithm: SHA1WITHRSA

05-04 12:13:48.145: I/System.out(22193):   Algorithm: BouncyCastle
05-04 12:13:48.145: I/System.out(22193):   Algorithm: SKIPJACK
05-04 12:13:48.145: I/System.out(22193):   Algorithm: DESEDEMAC
05-04 12:13:48.155: I/System.out(22193):   Algorithm: POLY1305-CAMELLIA
05-04 12:13:48.155: I/System.out(22193):   Algorithm: SHA3-224
05-04 12:13:48.155: I/System.out(22193):   Algorithm: Skein-512-384

即使在加载之后，算法也不可用。

Answer 1

我想你是用错误的方式插入了提供者。要在应用程序中插入海绵城堡作为安全提供者，您需要像这样初始化它

    public class Sample {

    static {
        Security.insertProviderAt(new org.spongycastle.jce.provider.BouncyCastleProvider(), 1);
    }

    public void printProviders() {
        for (Provider provider : Security.getProviders()) {
            System.out.println("Provider: " + provider.getName());
            for (Provider.Service service : provider.getServices()) {
                System.out.println("  Algorithm: " + service.getAlgorithm());
            }
        }
    }
}