ObjectInputStream上的java.io.StreamCorruptedException，同時將它封裝在Java中的CipherInputStream中

我通過套接字（單個客戶端單個服務器）發送加密對象。客戶端將加密對象作爲密封對象發送，服務器將對象解密。但是在服務器端創建ObjectInputStream的過程中，它拋出了StreamCorruptedException異常。我在網上搜了很多，我的代碼看起來很好，但我不知道爲什麼拋出異常。ObjectInputStream上的java.io.StreamCorruptedException，同時將它封裝在Java中的CipherInputStream中

這裏是Client類：

package sample; 

import javax.crypto.Cipher; 
import javax.crypto.CipherOutputStream; 
import javax.crypto.SealedObject; 
import javax.crypto.spec.SecretKeySpec; 
import java.io.ObjectOutputStream; 
import java.net.Socket; 

public class Client { 
    private static Socket socket; 
    public static void main(String args[]) throws Exception { 
     socket=new Socket("127.0.0.1",7777); 
     Cipher cipher=Cipher.getInstance("AES/ECB/PKCS5Padding"); 
     SecretKeySpec sks = new SecretKeySpec("MyDifficultPassw".getBytes(), "AES"); 
     cipher.init(Cipher.ENCRYPT_MODE, sks); 
     CipherOutputStream cos=new CipherOutputStream(socket.getOutputStream(),cipher); 
     ObjectOutputStream oos=new ObjectOutputStream(cos); 
     oos.flush(); 
     SealedObject sealedObject=new SealedObject("SampleString",cipher); 
     oos.writeObject(sealedObject); 
    } 
}

這裏是我的服務器類：

package sample; 

import javax.crypto.Cipher; 
import javax.crypto.CipherInputStream; 
import javax.crypto.CipherOutputStream; 
import javax.crypto.SealedObject; 
import javax.crypto.spec.SecretKeySpec; 
import java.io.ObjectInputStream; 
import java.io.ObjectOutputStream; 
import java.net.ServerSocket; 
import java.net.Socket; 

public class Server { 
    private static ServerSocket serverSocket; 
    public static SecretKeySpec sks; 
    public static void main(String args[]) throws Exception{ 
     serverSocket=new ServerSocket(7777); 
     Socket clientSocket=serverSocket.accept(); 
     Cipher cipher=Cipher.getInstance("AES/ECB/PKCS5Padding"); 
     sks = new SecretKeySpec("MyDifficultPassw".getBytes(), "AES"); 
     cipher.init(Cipher.DECRYPT_MODE, sks); 
     CipherInputStream cis=new CipherInputStream(clientSocket.getInputStream(),cipher); 
     ObjectInputStream ois=new ObjectInputStream(cis); //line 23 
     SealedObject so=(SealedObject) ois.readObject(); 
     System.out.println((String)so.getObject(cipher)); 
    } 
}

及以下異常被拋出就當客戶端連接服務器端：

Exception in thread "main" java.io.StreamCorruptedException: invalid stream header: 73720019 
at java.io.ObjectInputStream.readStreamHeader(ObjectInputStream.java:857) 
at java.io.ObjectInputStream.<init>(ObjectInputStream.java:349) 
at sample.Server.main(Server.java:23)

來源

2017-12-18 gg_14

你爲什麼要加密兩次？ – EJP

問題是雙重加密。輸出案例中的密碼必須密封對象，然後對流進行加密，但輸入案例中的密碼對象必須解密流，然後開封對象，這是相反的順序。

刪除SealedObject或密碼流。

來源

2017-12-18 05:39:45 EJP

ObjectInputStream上的java.io.StreamCorruptedException，同時將它封裝在Java中的CipherInputStream中

回答

相關問題