iaik.pkcs.pkcs11.provider.keypairgenerators

Class X942DhKeyPairGenerator

java.lang.Object

java.security.KeyPairGeneratorSpi

iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

iaik.pkcs.pkcs11.provider.keypairgenerators.X942DhKeyPairGenerator

All Implemented Interfaces:

PKCS11EngineClass

public class X942DhKeyPairGenerator
extends PKCS11KeyPairGenerator

An engine class for generating X9.42 Diffie Hellman key-pairs on a token. The application must call initialize(AlgorithmParameterSpec, SecureRandom) before calling generateKeyPair(). It uses Diffie Hellman as specified in ANSI x9.42.
The provided parameter specification includes a java.security.spec.DSAParameterSpec object which provides the prime, sub-prime and base component. This interface has been chosen because DSA requires the same parameters for generating key pairs.

This implementation only supports 512, 768, 1024 and 2048 bit as key size. The default key size is 1024 bit.

Author:

Karl Scheibelhofer

Field Summary

Fields inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

initialized_, keyPairGenerationSpec_, pkcs11OperationInitialized_, session_, tokenManager_, usedMechanismInfos_, usedMechanisms_

Constructor Summary

Constructors

Constructor and Description
X942DhKeyPairGenerator() Construct new generator.

Method Summary

Modifier and Type	Method and Description
protected iaik.pkcs.pkcs11.objects.Object	createPrivateKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec) Create the public key template to use as input for the key-pair generation.
protected iaik.pkcs.pkcs11.objects.Object	createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec) This implementation accepts internal parameters of type java.security.spec.DSAParameterSpec.
protected java.lang.String	getAlgorithmName() Returns DH/X9.42.
protected iaik.pkcs.pkcs11.Mechanism	getMechanism() Get the mechanism that this key-pair generator uses.
protected void	validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters) Check, if the given internal parameters are appropriate.

Methods inherited from class iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerator

createPkcs11PrivateKey, createPkcs11PublicKey, finalize, finalizePkcs11Operation, generateKeyPair, getUsedMechanismFeatures, getUsedMechanisms, initialize, initialize, initializePkcs11Operation, initializeSession, isSupportedBy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X942DhKeyPairGenerator

public X942DhKeyPairGenerator()

Construct new generator.

Method Detail

getMechanism

protected iaik.pkcs.pkcs11.Mechanism getMechanism()

Get the mechanism that this key-pair generator uses.

Specified by:

getMechanism in class PKCS11KeyPairGenerator

Returns:

The mechanism that this key-pair generator uses.

Postconditions:

(result <> null)

getAlgorithmName

protected java.lang.String getAlgorithmName()

Returns DH/X9.42.

Specified by:

getAlgorithmName in class PKCS11KeyPairGenerator

Returns:

DH/X9.42.

Postconditions:

(result.equals("DH/X9.42"))

createPrivateKeyCreationTemplate

protected iaik.pkcs.pkcs11.objects.Object createPrivateKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec)

Description copied from class: PKCS11KeyPairGenerator

Create the public key template to use as input for the key-pair generation. The default implementation ignores the internal algorithm parameters of the given parameters. An overriding methode may take the internal algorithm parameters into account.

Overrides:

createPrivateKeyCreationTemplate in class PKCS11KeyPairGenerator

Parameters:

keyPairGenerationSpec - The algorithm parameters provided by the application.

Returns:

The key tempalte to serve as input for the PKCS#11 key-pair generation.

createPublicKeyCreationTemplate

protected iaik.pkcs.pkcs11.objects.Object createPublicKeyCreationTemplate(PKCS11KeyPairGenerationSpec keyPairGenerationSpec)

This implementation accepts internal parameters of type java.security.spec.DSAParameterSpec. We use DSA parameters because they are the same as those for X9.42 DH, but for X9.42 DH there are no extra specs. If the inner parameters are of a different type, this method ignores them. It adds these parameters to the key template, the parameters in the key template have a higher priority.

Overrides:

createPublicKeyCreationTemplate in class PKCS11KeyPairGenerator

Parameters:

keyPairGenerationSpec - The algorithm parameters provided by the application.

Returns:

The key tempalte to serve as input for the PKCS#11 key-pair generation.

See Also:

PKCS11KeyPairGenerator.createPublicKeyCreationTemplate(iaik.pkcs.pkcs11.provider.keypairgenerators.PKCS11KeyPairGenerationSpec)

Postconditions:

(result <> null)

Preconditions:

(keyPairGenerationSpec <> null)

validateAlgorithmParameterSpec

protected void validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec parameters)
                                       throws java.security.InvalidAlgorithmParameterException

Check, if the given internal parameters are appropriate. This mean that the given parameter refers to the paremters got from the PKCS#11 paramters and not the This implementation accepts null or parameters of type java.security.spec.DSAParameterSpec. We use DSA parameters because they are the same as those for X9.42 DH, but for X9.42 DH there are no extra specs.

Overrides:

validateAlgorithmParameterSpec in class PKCS11KeyPairGenerator

Parameters:

parameters - The parameters to check.

Throws:

java.security.InvalidAlgorithmParameterException - If the parameters are inappropriate.

See Also:

PKCS11KeyPairGenerator.validateAlgorithmParameterSpec(java.security.spec.AlgorithmParameterSpec)