如何将JDK获取的X509证书PublicKey转换为BouncyCastle的ECPublicKey？

直接强制类型转换失败的原因是：从X509证书获取的PublicKey是JDK自带的EC公钥实现类（如sun.security.ec.ECPublicKeyImpl），并非BouncyCastle库中的org.bouncycastle.jce.interfaces.ECPublicKey实现，因此会抛出类型转换异常。

以下是两种可行的转换方案：

方案一：通过BouncyCastle KeyFactory转换 #

利用BouncyCastle的KeyFactory将标准公钥的编码数据重新生成为BC的EC公钥实例，步骤如下：

1. 确保已注册BouncyCastle安全提供者
2. 用BC的KeyFactory解析原公钥的编码形式

示例代码：

import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.jce.interfaces.ECPublicKey;
import java.security.KeyFactory;
import java.security.PublicKey;
import java.security.spec.X509EncodedKeySpec;
import java.security.Security;

void foo(X509Certificate cert) throws Exception {
    // 注册BouncyCastle提供者（仅需全局注册一次，可放在应用初始化处）
    Security.addProvider(new BouncyCastleProvider());
    
    PublicKey pk = cert.getPublicKey();
    // 使用BC的KeyFactory解析公钥编码
    KeyFactory bcKeyFactory = KeyFactory.getInstance("EC", BouncyCastleProvider.PROVIDER_NAME);
    X509EncodedKeySpec keySpec = new X509EncodedKeySpec(pk.getEncoded());
    ECPublicKey ecpk = (ECPublicKey) bcKeyFactory.generatePublic(keySpec);
}

方案二：通过JCE ECPublicKey提取参数构建BC实例 #

先将原公钥转换为JCE标准的java.security.interfaces.ECPublicKey，提取椭圆曲线参数和公钥点，再构建BC的EC公钥：

示例代码：

import org.bouncycastle.jce.interfaces.ECPublicKey;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.jce.spec.ECPublicKeySpec;
import java.security.KeyFactory;
import java.security.PublicKey;
import java.security.interfaces.ECPublicKey;
import java.security.spec.ECParameterSpec;
import java.security.spec.ECPoint;
import java.security.Security;

void foo(X509Certificate cert) throws Exception {
    Security.addProvider(new BouncyCastleProvider());
    
    PublicKey pk = cert.getPublicKey();
    // 先转成JCE标准的ECPublicKey
    ECPublicKey jceEcpk = (ECPublicKey) pk;
    ECParameterSpec ecParamSpec = jceEcpk.getParams();
    ECPoint ecPoint = jceEcpk.getW();
    
    // 构建BC的公钥规范并生成实例
    KeyFactory bcKeyFactory = KeyFactory.getInstance("EC", BouncyCastleProvider.PROVIDER_NAME);
    org.bouncycastle.jce.spec.ECParameterSpec bcEcParamSpec = 
        org.bouncycastle.jce.spec.ECParameterSpec.getInstance(ecParamSpec);
    org.bouncycastle.math.ec.ECPoint bcEcPoint = 
        bcEcParamSpec.getCurve().createPoint(ecPoint.getAffineX().toByteArray(), ecPoint.getAffineY().toByteArray());
    ECPublicKeySpec bcKeySpec = new ECPublicKeySpec(bcEcPoint, bcEcParamSpec);
    
    ECPublicKey bcEcpk = (ECPublicKey) bcKeyFactory.generatePublic(bcKeySpec);
}

注意事项：

• 需确保项目中已引入BouncyCastle的依赖（如bcprov-jdk15on）
• BouncyCastle提供者只需全局注册一次，无需每次转换都注册

内容的提问来源于stack exchange，提问作者chris01