iaik.pkcs.pkcs11.provider.keygenerators

Class PKCS11KeyDerivationSpec

java.lang.Object

iaik.pkcs.pkcs11.provider.spec.PKCS11Spec

iaik.pkcs.pkcs11.provider.keygenerators.PKCS11KeyGenerationSpec

iaik.pkcs.pkcs11.provider.keygenerators.PKCS11KeyDerivationSpec

All Implemented Interfaces:

java.security.spec.AlgorithmParameterSpec, java.security.spec.KeySpec

Direct Known Subclasses:

PKCS11EcbModeKeyDerivationSpec, PKCS11SSL3KeyAndMacDerivationParameterSpec, PKCS11SSL3MasterKeyDerivationSpec

public class PKCS11KeyDerivationSpec
extends PKCS11KeyGenerationSpec

Objects of this algorithm parameters class allows an application to control the derivation of PKCS#11 keys using the provided JCE key generators. This allows to specify the base key from which to derive a new key and the template for the new attributes of the new key.

Author:

Karl Scheibelhofer

Field Summary

Fields

Modifier and Type	Field and Description
protected iaik.pkcs.pkcs11.objects.SecretKey	baseKey_ The base for the new key.

Fields inherited from class iaik.pkcs.pkcs11.provider.keygenerators.PKCS11KeyGenerationSpec

keyTemplate_

Fields inherited from class iaik.pkcs.pkcs11.provider.spec.PKCS11Spec

tokenManager_, USE_PUBLIC_ROLE, USE_PUBLIC_SESSION, USE_READ_ONLY_SESSION, USE_READ_WRITE_SESSION, USE_SO_ROLE, USE_USER_ROLE, USE_USER_SESSION, usePin_, useRole_, useROSession_

Constructor Summary

Constructors

Constructor and Description
PKCS11KeyDerivationSpec(iaik.pkcs.pkcs11.objects.SecretKey baseKey, iaik.pkcs.pkcs11.objects.SecretKey keyTemplate) Constructor taking several parameters that control where and how the key should be generated.
PKCS11KeyDerivationSpec(TokenManager tokenManager, iaik.pkcs.pkcs11.objects.SecretKey baseKey, iaik.pkcs.pkcs11.objects.SecretKey keyTemplate, boolean useROSession, boolean useUserSession) Deprecated.

Method Summary

Modifier and Type	Method and Description
iaik.pkcs.pkcs11.objects.SecretKey	getBaseKey() Get the base key for the new key.

Methods inherited from class iaik.pkcs.pkcs11.provider.keygenerators.PKCS11KeyGenerationSpec

getKeyTemplate

Methods inherited from class iaik.pkcs.pkcs11.provider.spec.PKCS11Spec

getPin, getRole, getTokenManager, isUseAnonymousRole, isUseROSession, isUseRwSession, isUseSORole, isUseUserRole, isUseUserSession, setPin, setRole, setTokenManager, setUseAnonymousRole, setUseSORole, setUseUserRole

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

baseKey_

protected iaik.pkcs.pkcs11.objects.SecretKey baseKey_

The base for the new key.

Constructor Detail

PKCS11KeyDerivationSpec

public PKCS11KeyDerivationSpec(TokenManager tokenManager,
                               iaik.pkcs.pkcs11.objects.SecretKey baseKey,
                               iaik.pkcs.pkcs11.objects.SecretKey keyTemplate,
                               boolean useROSession,
                               boolean useUserSession)

Deprecated.

Constructor taking several parameters that control where and how the key should be generated.

Parameters:

tokenManager - The manager to handle the token.

baseKey - The base key to derive the new key from.

keyTemplate - The template for the new key.

useROSession - true (USE_READ_ONLY_SESSION), if the key should be generated using a read-only session. This is only possible for session-objects. false ( USE_READ_WRITE_SESSION) to use a read-write session.

useUserSession - true (USE_USER_SESSION), if the key should be generated using a user session. This is required for private objects (key); i.e. keys that have their private flag set. false (USE_PUBLIC_SESSION) to use a public session. This will only work for public objects.

PKCS11KeyDerivationSpec

public PKCS11KeyDerivationSpec(iaik.pkcs.pkcs11.objects.SecretKey baseKey,
                               iaik.pkcs.pkcs11.objects.SecretKey keyTemplate)

Constructor taking several parameters that control where and how the key should be generated.

Parameters:

baseKey - The base key to derive the new key from.

keyTemplate - The template for the new key.

Method Detail

getBaseKey

public iaik.pkcs.pkcs11.objects.SecretKey getBaseKey()

Get the base key for the new key.

Returns:

The template for the new key.