iaik.security.ec.ecies

Class ECIES

java.lang.Object

javax.crypto.CipherSpi

iaik.security.ec.ecies.ECIES

Direct Known Subclasses:

ECIES.ECIESwithAES_CBC, ECIES.ECIESwithAES_CTR, ECIES.ECIESwithDESede_CBC

public class ECIES
extends CipherSpi

Implements the Elliptic Curve Integrated Encryption Scheme (ECIES) according to [1], with the following set of algorithms and schemes:

KeyAgreement:

• ECDH (*)

This is the default key agreement and also the only one currently supported. That's because in the ECIES implementation the ECIESParameterSpec object might be created from an ASN1 object and in SEC1-v2 the specification of the ASN1 object "ECIESParameters" does not contain a key agreement (ASN1) object. So this default key agreement ensures that both parties use the same agreement.

KDFs:

• ANSI-X9.63-KDF (*)

MACs:

• HMAC-SHA1-160 (*)
• HMAC-SHA-224-224
• HMAC-SHA-256-256
• HMAC-SHA-384-384
• HMAC-SHA-512-512
• CMAC-AES-128
• CMAC-AES-192
• CMAC-AES-256

The HMACs with truncated output listed in SEC1-v2 (e.g HMAC–SHA1-80 or HMAC–SHA-224–112) are currently not supported.

Ciphers:

• XOR encryption mode
• 3-key TDES (DESede)in CBC mode with PKCS5Padding
• AES-128 in CBC mode with PKCS5Padding (*)
• AES-192 in CBC mode with PKCS5Padding
• AES-256 in CBC mode with PKCS5Padding
• AES-128 in CTR mode with no padding
• AES-192 in CTR mode with no padding
• AES-256 in CTR mode with no padding

The IV value for all AES ciphers and TDES is 0x00...0

(*) denotes the default value.

References:

[1] Certicom Research. 2009. Standards for Efficient Cryptography - SEC 1: Elliptic Curve Cryptography v2.0

Author:

Christian Wagner, Christian Hanser, Simon Guggi

See Also:

ECIESParameterSpec

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ECIES.ECIESwithAES_CBC ECIES Cipher using AES128 in CBC mode and PKCS5Padding
static class	ECIES.ECIESwithAES_CTR ECIES Cipher using AES128 in CTR mode and NoPadding
static class	ECIES.ECIESwithDESede_CBC ECIES Cipher using DES in CBC mode and PKCS5Padding

Field Summary

Fields

Modifier and Type	Field and Description
static int	DECRYPT_MODE Constant used to initialize cipher in decryption mode.
static int	ENCRYPT_MODE Constant used to initialize cipher in encryption mode.
static iaik.asn1.ObjectID	OID object identifier
protected iaik.security.ec.ecies.RawECIES	rawECIES_

Constructor Summary

Constructors

Constructor and Description
ECIES() Creates a new instance.

Method Summary

Modifier and Type	Method and Description
protected byte[]	engineDoFinal(byte[] input, int inputOffset, int inputLen)
protected int	engineDoFinal(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset)
protected int	engineDoFinal(ByteBuffer input, ByteBuffer output)
protected int	engineGetBlockSize()
protected byte[]	engineGetIV()
protected int	engineGetKeySize(Key key)
protected int	engineGetOutputSize(int inputLen)
protected AlgorithmParameters	engineGetParameters()
protected void	engineInit(int opmode, Key key, AlgorithmParameterSpec params, SecureRandom random)
protected void	engineInit(int opmode, Key key, AlgorithmParameters params, SecureRandom random)
protected void	engineInit(int opmode, Key key, SecureRandom random)
protected void	engineSetMode(String mode)
protected void	engineSetPadding(String padding)
protected byte[]	engineUpdate(byte[] input, int inputOffset, int inputLen)
protected int	engineUpdate(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset)

Methods inherited from class javax.crypto.CipherSpi

engineUnwrap, engineUpdate, engineUpdateAAD, engineUpdateAAD, engineWrap

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ENCRYPT_MODE

public static final int ENCRYPT_MODE

Constant used to initialize cipher in encryption mode.

See Also:

Constant Field Values

DECRYPT_MODE

public static final int DECRYPT_MODE

Constant used to initialize cipher in decryption mode.

See Also:

Constant Field Values

OID

public static final iaik.asn1.ObjectID OID

object identifier

rawECIES_

protected final iaik.security.ec.ecies.RawECIES rawECIES_

Constructor Detail

ECIES

public ECIES()

Creates a new instance.

Method Detail

engineDoFinal

protected byte[] engineDoFinal(byte[] input,
                               int inputOffset,
                               int inputLen)
                        throws IllegalBlockSizeException,
                               BadPaddingException

Specified by:

engineDoFinal in class CipherSpi

Throws:

IllegalBlockSizeException

BadPaddingException

engineDoFinal

protected int engineDoFinal(byte[] input,
                            int inputOffset,
                            int inputLen,
                            byte[] output,
                            int outputOffset)
                     throws ShortBufferException,
                            IllegalBlockSizeException,
                            BadPaddingException

Specified by:

engineDoFinal in class CipherSpi

Throws:

ShortBufferException

IllegalBlockSizeException

BadPaddingException

engineDoFinal

protected int engineDoFinal(ByteBuffer input,
                            ByteBuffer output)
                     throws ShortBufferException,
                            IllegalBlockSizeException,
                            BadPaddingException

Overrides:

engineDoFinal in class CipherSpi

Throws:

ShortBufferException

IllegalBlockSizeException

BadPaddingException

engineGetBlockSize

protected int engineGetBlockSize()

Specified by:

engineGetBlockSize in class CipherSpi

engineGetIV

protected byte[] engineGetIV()

Specified by:

engineGetIV in class CipherSpi

engineGetKeySize

protected int engineGetKeySize(Key key)
                        throws InvalidKeyException

Overrides:

engineGetKeySize in class CipherSpi

Throws:

InvalidKeyException

engineGetOutputSize

protected int engineGetOutputSize(int inputLen)

Specified by:

engineGetOutputSize in class CipherSpi

engineGetParameters

protected AlgorithmParameters engineGetParameters()

Specified by:

engineGetParameters in class CipherSpi

engineInit

protected void engineInit(int opmode,
                          Key key,
                          SecureRandom random)
                   throws InvalidKeyException

Specified by:

engineInit in class CipherSpi

Throws:

InvalidKeyException

engineInit

protected void engineInit(int opmode,
                          Key key,
                          AlgorithmParameterSpec params,
                          SecureRandom random)
                   throws InvalidKeyException,
                          InvalidAlgorithmParameterException

Specified by:

engineInit in class CipherSpi

Throws:

InvalidKeyException

InvalidAlgorithmParameterException

engineInit

protected void engineInit(int opmode,
                          Key key,
                          AlgorithmParameters params,
                          SecureRandom random)
                   throws InvalidKeyException,
                          InvalidAlgorithmParameterException

Specified by:

engineInit in class CipherSpi

Throws:

InvalidKeyException

InvalidAlgorithmParameterException

engineSetMode

protected void engineSetMode(String mode)
                      throws NoSuchAlgorithmException

Specified by:

engineSetMode in class CipherSpi

Throws:

NoSuchAlgorithmException

engineSetPadding

protected void engineSetPadding(String padding)
                         throws NoSuchPaddingException

Specified by:

engineSetPadding in class CipherSpi

Throws:

NoSuchPaddingException

engineUpdate

protected byte[] engineUpdate(byte[] input,
                              int inputOffset,
                              int inputLen)

Specified by:

engineUpdate in class CipherSpi

engineUpdate

protected int engineUpdate(byte[] input,
                           int inputOffset,
                           int inputLen,
                           byte[] output,
                           int outputOffset)
                    throws ShortBufferException

Specified by:

engineUpdate in class CipherSpi

Throws:

ShortBufferException