iaik.pkcs.pkcs12

Class KeyFactory

java.lang.Object

javax.crypto.SecretKeyFactorySpi

iaik.pkcs.pkcs12.KeyFactory

Direct Known Subclasses:

KeyFactory.PBEWithSHA1AndDESedeKeyFactory, KeyFactory.PBEWithSHA1AndRC2_40KeyFactory

public class KeyFactory
extends javax.crypto.SecretKeyFactorySpi

SecretKeyFactory implementation for the PBE ciphers (PKCS#12).

Keys may appear in two representations within the Java Security environment:

• opaque, of type java.security.Key
• transparent, of some ...Spec type (specification, key material)

This SecretKey factory may be used for converting opaque secret keys (instances of javax.crypto.SecretKey, iaik.security.cipher.PBEKeyBMP) into transparent PBE key material (instances of javax.crypto.spec.PBEKeySpec) according to the PKCS#12 Personal Information Exchange Syntax Standard.

An application shall use the getInstance factory method of the javax.crypto.SecretKeyFactory engine class for accessing this PBE KeyFactory, e.g.:

 PBEKeySpec keySpec = new PBEKeySpec("password".toCharArray());
 SecretKeyFactory kf = SecretKeyFactory.getInstance("PKCS#12", "IAIK");
 SecretKey sk = kf.generateSecret(keySpec);
 

Version:

File Revision 13

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	KeyFactory.PBEWithSHA1AndDESedeKeyFactory PBE KeyFactory for the PBEWithSHA1AndDESede algorithm.
static class	KeyFactory.PBEWithSHA1AndRC2_40KeyFactory PBE KeyFactory for the PBEWithSHA1AndDESede algorithm.

Constructor Summary

Constructors

Constructor and Description
KeyFactory() Default constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected javax.crypto.SecretKey	engineGenerateSecret(java.security.spec.KeySpec keySpec) Converts the given key specification (key material) into a SecretKey object.
protected java.security.spec.KeySpec	engineGetKeySpec(javax.crypto.SecretKey secretKey, java.lang.Class classSpec) Converts the given secret key into the requested key specification (key material).
protected javax.crypto.SecretKey	engineTranslateKey(javax.crypto.SecretKey secretKey) Translates a key object of some unknown or untrusted provider into a secret key object of this key factory.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KeyFactory

public KeyFactory()

Default constructor.

Method Detail

engineGenerateSecret

protected javax.crypto.SecretKey engineGenerateSecret(java.security.spec.KeySpec keySpec)
                                               throws java.security.spec.InvalidKeySpecException

Converts the given key specification (key material) into a SecretKey object.

The supplied keySpec has to be an instance of javax.crypto.spec.PBEKeySpec holding the password to be converted to a SecretKey. Note that any additional information (like salt or iteration count) that may be provided by the PBEKeySpec is ignored by this KeyFactory. Salt and iteration count may be provided by a proper PBEParameterSpec when initializing a PBE cipher.

Specified by:

engineGenerateSecret in class javax.crypto.SecretKeyFactorySpi

Parameters:

keySpec - the specification (key material) to be converted into SecretKey representation.

Returns:

the SecretKey object as instance of iaik.security.cipher.PBEKeyBMP

Throws:

java.security.spec.InvalidKeySpecException - if the given key material cannot be converted into a SecretKey object by this key factory

engineGetKeySpec

protected java.security.spec.KeySpec engineGetKeySpec(javax.crypto.SecretKey secretKey,
                                          java.lang.Class classSpec)
                                               throws java.security.spec.InvalidKeySpecException

Converts the given secret key into the requested key specification (key material).

This method may be used for getting a javax.crypto.spec.PBEKeySpec from the given secret key. The supplied secret key has to be an instance of iaik.security.cipher.PBEKeyBMP.

Specified by:

engineGetKeySpec in class javax.crypto.SecretKeyFactorySpi

Parameters:

secretKey - the secret key to be converted

classSpec - the class implementing the requested secret key spec

Returns:

the key specification (key material) derived from the given secret key

Throws:

java.security.spec.InvalidKeySpecException - if the given secret key cannot be converted into the requested key specification object by this key factory

engineTranslateKey

protected javax.crypto.SecretKey engineTranslateKey(javax.crypto.SecretKey secretKey)
                                             throws java.security.InvalidKeyException

Translates a key object of some unknown or untrusted provider into a secret key object of this key factory.

Specified by:

engineTranslateKey in class javax.crypto.SecretKeyFactorySpi

Parameters:

secretKey - the key of some unknown or untrusted provider

Returns:

the translated key as instance of iaik.security.cipher.PBEKeyBMP

Throws:

java.security.InvalidKeyException - if the given key cannot be translated by this key factory