import java.lang.Math; // headers MUST be above the first class
import java.security.KeyStore;
import java.security.Provider;
import java.security.Security;
import java.util.*;

import ru.CryptoPro.JCP.JCP;
import ru.CryptoPro.JCSP.JCSP;
import ru.CryptoPro.JCSP.KeyStore.KeyStoreConfig;
import java.security.cert.X509Certificate;
import ru.CryptoPro.JCP.JCP;
import ru.CryptoPro.JCP.KeyStore.JCPPrivateKeyEntry;
import ru.CryptoPro.JCP.tools.Encoder;
import ru.CryptoPro.JCSP.JCSP;
import ru.CryptoPro.JCP.Key.GostPublicKey;
import java.security.*;

public class HelloWorldIvanko
{
public static final String ALIAS_2012_256 = "roslov190220287caa8f-a18f-45be-ade0-dde5142aeb78-copy";
public static final String PASSWORD_2012_256 = "";
public static final boolean askPinInWindow = true;

public static void log(String msg){
System.out.println(msg);
}

public static void main(String[] args) throws Exception
{
Provider jcsp = new JCSP();
Security.removeProvider(JCSP.PROVIDER_NAME);
Security.addProvider(jcsp);

signAndVerify(JCP.CRYPTOPRO_SIGN_2012_256_NAME,
ALIAS_2012_256, PASSWORD_2012_256.toCharArray(), askPinInWindow);
}


public static KeyStore getKS(String alias) throws Exception {
for (Object storeT : KeyStoreConfig.getInstance().getNames()) {
KeyStore store = KeyStore.getInstance(String.valueOf(storeT), JCSP.PROVIDER_NAME);
store.load(null, null);
Object c = (X509Certificate)store.getCertificate(alias);
if(null != c){
log(String.valueOf(storeT));
return store;
}
}
throw new Exception("no store found for " + alias);
}

public static void signAndVerify(String signAlgName, String alias,
char[] password, boolean askPinInWindow) throws Exception {

// Сообщение для подписи.
final String message = "Message for signature";

KeyStore keyStore = getKS(alias);

PrivateKey privateKey;
PublicKey publicKey;

if (askPinInWindow) {
privateKey = (PrivateKey) keyStore.getKey(alias, null);
publicKey = keyStore.getCertificate(alias).getPublicKey();
} // if
else {

KeyStore.ProtectionParameter protectedParam =
new KeyStore.PasswordProtection(password);

JCPPrivateKeyEntry entry = (JCPPrivateKeyEntry)
keyStore.getEntry(alias, protectedParam);

privateKey = entry.getPrivateKey();
publicKey = entry.getCertificate().getPublicKey();
}

Signature signer = Signature.getInstance(
signAlgName, JCSP.PROVIDER_NAME);

signer.initSign(privateKey);
signer.update(message.getBytes());

byte[] signature = signer.sign();

Encoder encoder = new Encoder();
System.out.println("Signature: " + encoder.encode(signature) +
"\nfor Message: " + message);

Signature validator = Signature.getInstance(
signAlgName, JCSP.PROVIDER_NAME);
validator.initVerify(publicKey);
validator.update(message.getBytes());

System.out.println("Signature verified: " +
validator.verify(signature));
}
}