@RequestMapping({"flag"})   // 定义根路径
public class FlagController
{
  @Autowired
  private FlagService flagService;
  
  public FlagController() {}
  
  // 接收类似 /flag/getflag/1111路径 用post请求
  @RequestMapping(value={"/getflag/{email:[0-9a-zA-Z']+}"}, method={org.springframework.web.bind.annotation.RequestMethod.POST})
  public String getFlag(@PathVariable("email") String email, ModelMap model)
  {
    Flag flag = flagService.getFlagByEmail(email);
    return "Encrypted flag : " + flag.getFlag();
  }
  @RequestMapping({"/testflag/{flag}"})
  public String submitFlag(@PathVariable("flag") String flag, ModelMap model)
  {
    String[] fs = flag.split("[{}]");
    Long longFlag = Long.valueOf(fs[1]);
    int i = flagService.exist(flag);
    if (i > 0) {
      return "pass!!!";
    }
    return "failed!!!";
  }
}

SecretKeySpec signingKey = new SecretKeySpec("sdl welcome you !".getBytes(), "HmacSHA256");
Mac mac = Mac.getInstance("HmacSHA256");
mac.init(signingKey);
byte[] e = mac.doFinal(String.valueOf(email.trim()).getBytes());

Flag flago = new Flag();
flago.setId(Integer.valueOf(id));
flago.setFlag(byte2hex(data));
flago.setEmail(byte2hex(e));   # 设置email的值
flago.setOriginFlag(flag);
flago.setUuid(uuid);
flago.setOriginEmail(email);

import java.io.*;
import javax.crypto.spec.SecretKeySpec;
import javax.crypto.Mac;
import java.security.Key;

class test  
{
    public static void main (String[] args) throws java.lang.Exception
    {
        System.out.println("hi");
        SecretKeySpec signingKey = new SecretKeySpec("sdl welcome you !".getBytes(), "HmacSHA256");
        Mac mac = Mac.getInstance("HmacSHA256");
        mac.init(signingKey);
        String email = "3113936212117314317@didichuxing.com";   // 首页得到的email
        byte[] e = mac.doFinal(String.valueOf(email.trim()).getBytes());
        System.out.println(e);
        String tmp1 = byte2hex(e);
    }
}

String p = "sdl welcome you !".substring(0, "sdl welcome you !".length() - 1).trim().replace(" ", "");

// 这里是得到sdl.ks的绝对路径
String ksPath = ctx.getServletContext().getRealPath("/WEB-INF/classes/sdl.ks");
KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());

// 加载密钥文件
FileInputStream inputStream = new FileInputStream(ksPath);
keyStore.load(inputStream, p.toCharArray());
Key key = keyStore.getKey("www.didichuxing.com", p.toCharArray());

// 选择加密算法，这里是 RSA 加密算法
Cipher cipher = Cipher.getInstance(key.getAlgorithm());

// 1：代表加密模式； 2：代表解密模式
cipher.init(1, key);
byte[] data = cipher.doFinal(flag.getBytes());

// 设置flag
flago.setFlag(byte2hex(data));

import java.io.*;
import java.security.PublicKey;
import java.security.KeyStore;
import java.security.cert.Certificate;
import javax.crypto.Cipher;

class test  
{
    public static void main (String[] args) throws java.lang.Exception
    {
        String ksPath = "e:/WEB-INF_classes_sdl.ks";
        String p = "sdl welcome you !".substring(0, "sdl welcome you !".length() - 1).trim().replace(" ", "");

        System.out.println(KeyStore.getDefaultType());   // jks
        KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
        FileInputStream inputStream = new FileInputStream(ksPath);
        keyStore.load(inputStream, p.toCharArray());

        Certificate publicCertificate = keyStore.getCertificate("www.didichuxing.com");
        PublicKey publicKey = publicCertificate.getPublicKey();

        System.out.println(publicKey.getAlgorithm());   // rsa
        System.out.println(publicKey.getEncoded());

        String  miwen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

        Cipher cipher =Cipher.getInstance("RSA");
        cipher.init(2, publicKey);
        byte[] result = cipher.doFinal(hex2byte(miwen.getBytes()));
        System.out.println(new String(result));
    }

    public static byte[] hex2byte(byte[] b) {  
        if ((b.length % 2) != 0)  
            throw new IllegalArgumentException("长度不是偶数");  
        byte[] b2 = new byte[b.length / 2];  
        for (int n = 0; n < b.length; n += 2) {  
            String item = new String(b, n, 2);  
            b2[n / 2] = (byte) Integer.parseInt(item, 16);  
        }  
        return b2;  
    }
}