iaik.pkcs.pkcs11.provider.signatures.ecdsa

Class ExternalSha384EcdsaSignature

java.lang.Object

java.security.SignatureSpi

iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

iaik.pkcs.pkcs11.provider.signatures.ecdsa.ExternalSha384EcdsaSignature

All Implemented Interfaces:

PKCS11EngineClass

public class ExternalSha384EcdsaSignature
extends ExternalHashSignature

This is an implementation of a Signature class that uses the IAIK PKCS#11 wrapper to access the token. It only works with IAIKPKCS11PrivateKey and IAIKPKCS11PublicKey. This version uses the CKM_ECDSA mechanism to create the signature; i.e. it creates the hash off-card. This class generates the hash itself using a MessageDigest object. After hashing it sends the generated hash to the token for signing.

Field Summary

Fields

Modifier and Type	Field and Description
protected static java.lang.String	MESSAGE_DIGEST_ALGORITHM_NAME The JCA name of the message digest algorithm.
protected static java.lang.String	SIGNATURE_ALGORITHM_NAME The JCA standard name of this signature algorithm.

Fields inherited from class iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

messageDigest_

Fields inherited from class iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

currentKeyIsSoftwareKey_, initialized_, operationState_, pkcs11OperationInitialized_, privateKey_, publicKey_, session_, SIGN, softwareDelegate_, tokenManager_, usedMechanismInfos_, usedMechanisms_, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Constructor Summary

Constructors

Constructor and Description
ExternalSha384EcdsaSignature() Public default constructor to enable instantiation via Class.forName(String).

Method Summary

Modifier and Type	Method and Description
protected java.lang.String	getAlgorithmName() Get the JCA standard name of this signature algorithm.
protected iaik.pkcs.pkcs11.Mechanism	getMechanism() Get the mechanism of this signature object.
protected java.lang.String	getMessageDigestName() Returns the message digest's name that this object uses to hash the data.
protected byte[]	pkcs11Sign() Create the signature value (ANSI X9.62, same as X.509 format).
protected boolean	pkcs11Verify(byte[] signature) Verifies the given signature (ANSI X9.62, same as X.509 format).

Methods inherited from class iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

getMessageDigest, pkcs11InitSign, pkcs11InitVerify, pkcs11Update, pkcs11Update, prepareHash

Methods inherited from class iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

engineGetParameter, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineSign, engineUpdate, engineUpdate, engineVerify, finalize, finalizePkcs11Operation, getUsedMechanismFeatures, getUsedMechanisms, initializePkcs11Operation, initializeSession, initializeSoftwareDelegate, isSupportedBy, pkcs11GetParameter, pkcs11SetParameter, pkcs11SetParameter

Methods inherited from class java.security.SignatureSpi

clone, engineGetParameters, engineInitSign, engineSign, engineUpdate, engineVerify

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MESSAGE_DIGEST_ALGORITHM_NAME

protected static java.lang.String MESSAGE_DIGEST_ALGORITHM_NAME

The JCA name of the message digest algorithm.

SIGNATURE_ALGORITHM_NAME

protected static java.lang.String SIGNATURE_ALGORITHM_NAME

The JCA standard name of this signature algorithm.

Constructor Detail

ExternalSha384EcdsaSignature

public ExternalSha384EcdsaSignature()

Public default constructor to enable instantiation via Class.forName(String).

Method Detail

getAlgorithmName

protected java.lang.String getAlgorithmName()

Get the JCA standard name of this signature algorithm.

Specified by:

getAlgorithmName in class PKCS11Signature

Returns:

The JCA standard name of this signature algorithm.

Postconditions:

(result <> null)

getMessageDigestName

protected java.lang.String getMessageDigestName()

Returns the message digest's name that this object uses to hash the data. This is the JCA name.

Specified by:

getMessageDigestName in class ExternalHashSignature

Returns:

A message digest's JCA name.

Postconditions:

(result <> null)

getMechanism

protected iaik.pkcs.pkcs11.Mechanism getMechanism()

Get the mechanism of this signature object. This implementation returns a mechanism with CKM_ECDSA as ID.

Specified by:

getMechanism in class ExternalHashSignature

Returns:

The mechanism this object uses for signing and verification.

Postconditions:

(result <> null)

pkcs11Sign

protected byte[] pkcs11Sign()
                     throws java.security.SignatureException

Create the signature value (ANSI X9.62, same as X.509 format).

Overrides:

pkcs11Sign in class ExternalHashSignature

Returns:

A byte array holding the signature.

Throws:

java.security.SignatureException - If an error occurs when creating the signature.

Preconditions:

(operationState_ == SIGN) and (initialized_ == true)

pkcs11Verify

protected boolean pkcs11Verify(byte[] signature)
                        throws java.security.SignatureException

Verifies the given signature (ANSI X9.62, same as X.509 format).

Overrides:

pkcs11Verify in class ExternalHashSignature

Parameters:

signature - The signature bytes to be verified.

Returns:

true if signature is OK, false otherwise.

Throws:

java.security.SignatureException - If an error occurs when verifying the signature.

Preconditions:

(operationState_ == VERIFY) and (initialized_ == true)