iaik.pkcs.pkcs11.provider.keypairgenerators

Class KeaKeyPairGenerator

java.lang.Object

java.security.KeyPairGeneratorSpi

iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

iaik.pkcs.pkcs11.provider.keypairgenerators.KeaKeyPairGenerator

All Implemented Interfaces:

PKCS11EngineClass

public class KeaKeyPairGenerator
extends PKCS11KeyPairGenerator

An engine class for generating KEA key-pairs on a token. The application must call initialize(AlgorithmParameterSpec, SecureRandom) before calling generateKeyPair().

This implementation only supports 512, 768 and 1024 bit as key size. The default key size is 1024 bit.

Author:

Karl Scheibelhofer

Field Summary

Fields inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

initialized_, keyPairGenerationSpec_, pkcs11OperationInitialized_, session_, tokenManager_, usedMechanismInfos_, usedMechanisms_

Constructor Summary

Constructors

Constructor and Description
KeaKeyPairGenerator() Construct new generator.

Method Summary

Modifier and Type	Method and Description
protected iaik.pkcs.pkcs11.objects.Object	createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec) This implementation accepts internal parameters of type java.security.spec.DSAParameterSpec.
protected java.lang.String	getAlgorithmName() Returns KEA.
protected iaik.pkcs.pkcs11.Mechanism	getMechanism() Get the mechanism that this key-pair generator uses.
protected void	validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters) Check, if the given internal parameters are appropriate.

Methods inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

createPkcs11PrivateKey, createPkcs11PublicKey, createPrivateKeyCreationTemplate, finalize, finalizePkcs11Operation, generateKeyPair, getUsedMechanismFeatures, getUsedMechanisms, initialize, initialize, initializePkcs11Operation, initializeSession, isSupportedBy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KeaKeyPairGenerator

public KeaKeyPairGenerator()

Construct new generator.

Method Detail

getMechanism

protected iaik.pkcs.pkcs11.Mechanism getMechanism()

Get the mechanism that this key-pair generator uses.

Specified by:

getMechanism in class PKCS11KeyPairGenerator

Returns:

The mechanism that this key-pair generator uses.

Postconditions:

(result <> null)

getAlgorithmName

protected java.lang.String getAlgorithmName()

Returns KEA.

Specified by:

getAlgorithmName in class PKCS11KeyPairGenerator

Returns:

KEA.

Postconditions:

(result.equals("KEA"))

createPublicKeyCreationTemplate

protected iaik.pkcs.pkcs11.objects.Object createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec)

This implementation accepts internal parameters of type java.security.spec.DSAParameterSpec. KEA uses the same parameters as DSA. If the inner parameters are of a different type, this method ignores them. It adds these parameters to the key template, the parameters in the key template have a higher priority.

Overrides:

createPublicKeyCreationTemplate in class PKCS11KeyPairGenerator

Parameters:

keyPairGenerationSpec - The algorithm parameters provided by the application.

Returns:

The key tempalte to serve as input for the PKCS#11 key-pair generation.

See Also:

PKCS11KeyPairGenerator.createPublicKeyCreationTemplate(iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerationSpec)

Postconditions:

(result <> null)

Preconditions:

(keyPairGenerationSpec <> null)

validateAlgorithmParameterSpec

protected void validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters)
                                       throws java.security.InvalidAlgorithmParameterException

Check, if the given internal parameters are appropriate. This mean that the given parameter refers to the paremters got from the PKCS#11 paramters and not the This implementation accepts null or parameters of type java.security.spec.DSAParameterSpec. KEA uses the same parameters as DSA.

Overrides:

validateAlgorithmParameterSpec in class PKCS11KeyPairGenerator

Parameters:

parameters - The parameters to check.

Throws:

java.security.InvalidAlgorithmParameterException - If the parameters are inappropriate.

See Also:

PKCS11KeyPairGenerator.validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec)