iaik.security.rsa

Class RSAPssKeyFactory

java.lang.Object

java.security.KeyFactorySpi

iaik.security.rsa.RSAPssKeyFactory

public final class RSAPssKeyFactory
extends java.security.KeyFactorySpi

KeyFactory for converting RSASSA-PSS keys into their encoded representation (and vice versa).
This KeyFactory may be used for converting a RSAPssPublicKey into a java.security.spec.X509EncodedKeySpec representing the public key in DER encoded format (and vice versa):

 RSAPssPublicKey publicKey = ...;
 KeyFactory kf = KeyFactory.getInstance("RSASSA-PSS", "IAIK");
 X509EncodedKeySpec x509KeySpec = (X509EncodedKeySpec)kf.getKeySpec(publicKey,
                                                                    X509EncodedKeySpec.class);
 byte[] encodedKey = x509KeySpec.getEncoded();
 

respectively:

 X509EncodedKeySpec x509KeySpec = new X509EncodedKeySpec(encodedKey);
 KeyFactory kf = KeyFactory.getInstance("RSASSA-PSS", "IAIK");
 RSAPssPublicKey publicKey = (RSAPssPublicKey) kf.generatePublic(x509KeySpec);
 

A RSAPssPrivateKey can be converted into a java.security.spec.PKCS8EncodedKeySpec (and vice versa):

 RSAPssPrivateKey privateKey = ...;
 KeyFactory kf = KeyFactory.getInstance("RSASSA-PSS", "IAIK");
 PKCS8EncodedKeySpec pkcs8KeySpec = (PKCS8EncodedKeySpec)kf.getKeySpec(privateKey,
                                                                       PKCS8EncodedKeySpec.class);
 byte[] encodedKey = pkcs8KeySpec.getEncoded();
 

respectively:

 PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(encodedKey);
 KeyFactory kf = KeyFactory.getInstance("RSASSA-PSS", "IAIK");
 RSAPssPrivateKey privateKey = (RSAPssPrivateKey) kf
     .generatePublic(pkcs8KeySpec);
 

Version:

File Revision 1

See Also:

RSAPssPublicKey, RSAPssPrivateKey, RSAPssKeyPairGenerator, KeyFactory, X509EncodedKeySpec, PKCS8EncodedKeySpec

Constructor Summary

Constructors

Constructor and Description
RSAPssKeyFactory() Default constructor for creating a RSAPssKeyFactory.

Method Summary

Methods

Modifier and Type	Method and Description
protected java.security.PrivateKey	engineGeneratePrivate(java.security.spec.KeySpec keySpec) Converts the given key specification to a RSAPssPrivateKey.
protected java.security.PublicKey	engineGeneratePublic(java.security.spec.KeySpec keySpec) Converts the given key specification to a RSAPssPublicKey.
protected java.security.spec.KeySpec	engineGetKeySpec(java.security.Key key, java.lang.Class classSpec) Converts the given key into the requested key specification (key material).
protected java.security.Key	engineTranslateKey(java.security.Key key) Translates the given key object of some unknown or untrusted provider into a key object supported by this RSA key factory.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RSAPssKeyFactory

public RSAPssKeyFactory()

Default constructor for creating a RSAPssKeyFactory. Applications shall use

 KeyFactory.getInstance("RSASSA-PSS", "IAIK");
 

for instantiating a RSAKeyFactory.

Method Detail

engineGeneratePrivate

protected java.security.PrivateKey engineGeneratePrivate(java.security.spec.KeySpec keySpec)
                                                  throws java.security.spec.InvalidKeySpecException

Converts the given key specification to a RSAPssPrivateKey.

The given KeySpec must be a PKCS8EncodedKeySpec representing the RSASSA-PSS key as DER encoded byte material.

Specified by:

engineGeneratePrivate in class java.security.KeyFactorySpi

Parameters:

keySpec - the key specification as PKCS8EncodedKeySpec

Returns:

the decoded RSAPssPrivateKey

Throws:

java.security.spec.InvalidKeySpecException - if the given key material is not a PKCS8EncodedKeySpec or a decoding error occurs

engineGeneratePublic

protected java.security.PublicKey engineGeneratePublic(java.security.spec.KeySpec keySpec)
                                                throws java.security.spec.InvalidKeySpecException

Converts the given key specification to a RSAPssPublicKey.

The given KeySpec must be a X509EncodedKeySpec representing the RSASSA-PSS key as DER encoded byte material.

Specified by:

engineGeneratePublic in class java.security.KeyFactorySpi

Parameters:

keySpec - the key specification as X509EncodedKeySpec

Returns:

the decoded RSAPssPublicKey

Throws:

java.security.spec.InvalidKeySpecException - if the given key material is not a X509EncodedKeySpec or a decoding error occurs

engineGetKeySpec

protected java.security.spec.KeySpec engineGetKeySpec(java.security.Key key,
                                          java.lang.Class classSpec)
                                               throws java.security.spec.InvalidKeySpecException

Converts the given key into the requested key specification (key material).

The given key may either be a RSAPssPublicKey or a RSAPssPrivateKey. If the key is a RSAPssPublicKey, this method only can create a X509EncodedKeySpec representing the key as DER encoded byte material. If the given key is a RSAPssPrivateKey, this method only can create a PKCS8EncodedKeySpec representing the key as DER encoded byte material.

Specified by:

engineGetKeySpec in class java.security.KeyFactorySpi

Parameters:

key - the key to be converted, which either may be a RSAPssPublicKey or a RSAPssPrivateKey.

classSpec - the key specification type into which the key shall be converted, which may be X509EncodedKeySpec if the given key is a RSAPssPublicKey, or a PKCS8EncodedKeySpec if the given key is a RSAPssPrivateKey

Returns:

the key specification (key material) derived from the given key

Throws:

java.security.spec.InvalidKeySpecException - if the given key cannot be converted into the requested key specification object by this key factory (i.e. if the given key is not a RSAPssPublicKey or a RSAPssPrivateKey, or the requested keySpec is not a X509EncodedKeySpec or a PKCS8EncodedKeySpec

engineTranslateKey

protected java.security.Key engineTranslateKey(java.security.Key key)
                                        throws java.security.InvalidKeyException

Translates the given key object of some unknown or untrusted provider into a key object supported by this RSA key factory. This method only can translate keys of type RSAPssPublicKey or RSAPssPrivateKey.

Specified by:

engineTranslateKey in class java.security.KeyFactorySpi

Parameters:

key - the key of some unknown or untrusted provider

Returns:

the translated key

Throws:

java.security.InvalidKeyException - if the given key cannot be translated by this key factory