iaik.pkcs.pkcs11.provider.random

Class PKCS11RandomNoSetSeedSpi

java.lang.Object

java.security.SecureRandomSpi

iaik.pkcs.pkcs11.provider.random.PKCS11RandomSpi

iaik.pkcs.pkcs11.provider.random.PKCS11RandomNoSetSeedSpi

All Implemented Interfaces:

PKCS11EngineClass, java.io.Serializable

public class PKCS11RandomNoSetSeedSpi
extends PKCS11RandomSpi

An implementation of the SecureRandomSpi that uses a PKCS#11 token to gereate random data and seeds. It operates like the PKCS11RandomSpi, but does not try to write (set) any seed to the token. This implementation can be used, if the underlying token supports random generation but cannot be seeded externally.

Author:

Karl Scheibelhofer

See Also:

Serialized Form

Field Summary

Fields inherited from class iaik.pkcs.pkcs11.provider.random.PKCS11RandomSpi

pkcs11OperationInitialized_, session_, SOFTWARE_SECURE_RANDOM_ALGORITHM, softwareDelegate_, tokenManager_, useSoftwareDelegation_

Constructor Summary

Constructors

Constructor and Description
PKCS11RandomNoSetSeedSpi() This default constructor always links this random class to the first provider instance, because there are no means in the JCE to find out our provider instance.
PKCS11RandomNoSetSeedSpi(TokenManager tokenManager) This constructor links this random class to the given token manager.

Method Summary

Modifier and Type	Method and Description
protected void	engineSetSeed(byte[] seedBytes) Reseeds this random object if it uses a software delegate to process the requests; if it uses the token, any given seed bytes are ignored.

Methods inherited from class iaik.pkcs.pkcs11.provider.random.PKCS11RandomSpi

engineGenerateSeed, engineNextBytes, finalize, finalizePkcs11Operation, getSoftwareDelegateAlgorithm, initialize, initializePkcs11Operation, initializeSession, initializeSoftwareDelegate, isSupportedBy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PKCS11RandomNoSetSeedSpi

public PKCS11RandomNoSetSeedSpi()
                         throws IAIKPkcs11Exception

This default constructor always links this random class to the first provider instance, because there are no means in the JCE to find out our provider instance.

Throws:

IAIKPkcs11Exception - If there is no IAIKPkcs11 instance available.

PKCS11RandomNoSetSeedSpi

public PKCS11RandomNoSetSeedSpi(TokenManager tokenManager)
                         throws IAIKPkcs11Exception

This constructor links this random class to the given token manager. It uses this token manager to access the token.

Parameters:

tokenManager - The manager of the token we use for random generation.

Throws:

IAIKPkcs11Exception - If there is no IAIKPkcs11 instance available.

Method Detail

engineSetSeed

protected void engineSetSeed(byte[] seedBytes)
                      throws IAIKPkcs11Exception

Reseeds this random object if it uses a software delegate to process the requests; if it uses the token, any given seed bytes are ignored. The given seed supplements, rather than replaces, the existing seed. Thus, repeated calls are guaranteed never to reduce randomness.

Overrides:

engineSetSeed in class PKCS11RandomSpi

Parameters:

seedBytes - The seed bytes.

Throws:

IAIKPkcs11Exception - If seeding the random fails.

Preconditions:

(seedBytes <> null)