iaik.pkcs.pkcs11.provider.keypairgenerators

Class DhKeyPairGenerator

java.lang.Object

java.security.KeyPairGeneratorSpi

iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

iaik.pkcs.pkcs11.provider.keypairgenerators.DhKeyPairGenerator

All Implemented Interfaces:

PKCS11EngineClass

public class DhKeyPairGenerator
extends PKCS11KeyPairGenerator

An engine class for generating Diffie Hellman key-pairs on a token. The application must call initialize(AlgorithmParameterSpec, SecureRandom) before calling generateKeyPair(). Uses Diffie Hellman as specified in PKCS#3.

This implementation only supports 512, 768, 1024 and 2048 bit as key size. The default key size is 1024 bit.

Author:

Karl Scheibelhofer

Field Summary

Fields inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

initialized_, keyPairGenerationSpec_, pkcs11OperationInitialized_, session_, tokenManager_, usedMechanismInfos_, usedMechanisms_

Constructor Summary

Constructors

Constructor and Description
DhKeyPairGenerator() Construct new generator.

Method Summary

Modifier and Type	Method and Description
protected iaik.pkcs.pkcs11.objects.Object	createPrivateKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec) This implementation accepts internal parameters of type javax.crypto.spec.DHParameterSpec.
protected iaik.pkcs.pkcs11.objects.Object	createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec) This implementation accepts internal parameters of type javax.crypto.spec.DHParameterSpec.
protected java.lang.String	getAlgorithmName() Returns DH.
protected iaik.pkcs.pkcs11.Mechanism	getMechanism() Get the mechanism that this key-pair generator uses.
protected void	validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters) Check, if the given internal parameters are appropriate.

Methods inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

createPkcs11PrivateKey, createPkcs11PublicKey, finalize, finalizePkcs11Operation, generateKeyPair, getUsedMechanismFeatures, getUsedMechanisms, initialize, initialize, initializePkcs11Operation, initializeSession, isSupportedBy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DhKeyPairGenerator

public DhKeyPairGenerator()

Construct new generator.

Method Detail

getMechanism

protected iaik.pkcs.pkcs11.Mechanism getMechanism()

Get the mechanism that this key-pair generator uses.

Specified by:

getMechanism in class PKCS11KeyPairGenerator

Returns:

The mechanism that this key-pair generator uses.

Postconditions:

(result <> null)

getAlgorithmName

protected java.lang.String getAlgorithmName()

Returns DH.

Specified by:

getAlgorithmName in class PKCS11KeyPairGenerator

Returns:

DH.

Postconditions:

(result.equals("DH"))

createPrivateKeyCreationTemplate

protected iaik.pkcs.pkcs11.objects.Object createPrivateKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec)

This implementation accepts internal parameters of type javax.crypto.spec.DHParameterSpec. If the inner parameters are of a different type, this method ignores them. It adds these parameters to the key template, the parameters in the key template have a higher priority.

Overrides:

createPrivateKeyCreationTemplate in class PKCS11KeyPairGenerator

Parameters:

keyPairGenerationSpec - The algorithm parameters provided by the application.

Returns:

The key tempalte to serve as input for the PKCS#11 key-pair generation.

See Also:

PKCS11KeyPairGenerator.createPrivateKeyCreationTemplate(iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerationSpec)

Postconditions:

(result <> null)

Preconditions:

(keyPairGenerationSpec <> null)

createPublicKeyCreationTemplate

protected iaik.pkcs.pkcs11.objects.Object createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec)

This implementation accepts internal parameters of type javax.crypto.spec.DHParameterSpec. If the inner parameters are of a different type, this method ignores them. It adds these parameters to the key template, the parameters in the key template have a higher priority.

Overrides:

createPublicKeyCreationTemplate in class PKCS11KeyPairGenerator

Parameters:

keyPairGenerationSpec - The algorithm parameters provided by the application.

Returns:

The key tempalte to serve as input for the PKCS#11 key-pair generation.

See Also:

PKCS11KeyPairGenerator.createPublicKeyCreationTemplate(iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerationSpec)

Postconditions:

(result <> null)

Preconditions:

(keyPairGenerationSpec <> null)

validateAlgorithmParameterSpec

protected void validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters)
                                       throws java.security.InvalidAlgorithmParameterException

Check, if the given internal parameters are appropriate. This mean that the given parameter refers to the paremters got from the PKCS#11 paramters and not the This implementation accepts null or parameters of type javax.crypto.spec.DHParameterSpec.

Overrides:

validateAlgorithmParameterSpec in class PKCS11KeyPairGenerator

Parameters:

parameters - The parameters to check.

Throws:

java.security.InvalidAlgorithmParameterException - If the parameters are inappropriate.

See Also:

PKCS11KeyPairGenerator.validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec)