iaik.pkcs.pkcs11.provider.signatures.rsa

Class ExternalMd2RsaSignature

java.lang.Object

java.security.SignatureSpi

iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

iaik.pkcs.pkcs11.provider.signatures.rsa.ExternalMd2RsaSignature

All Implemented Interfaces:

PKCS11EngineClass

public class ExternalMd2RsaSignature
extends ExternalHashSignature

This is an implementation of a Signature class that uses the IAIK PKCS#11 wrapper to access the token. It only works with IAIKPKCS11PrivateKey and IAIKPKCS11PublicKey. This version uses the CKM_RSA_PKCS mechanism to create the signature; i.e. it creates the hash off-card. This class generates the hash itself using a MessageDigest object. After hashing it send the generated hash to the token for signing. This class uses MD2 as hashing algorithm.

Author:

Karl Scheibelhofer

Field Summary

Fields

Modifier and Type	Field and Description
protected static java.lang.String	MESSAGE_DIGEST_ALGORITHM_NAME The JCA name of the messag digest algorithm.
protected static java.lang.String	SIGNATURE_ALGORITHM_NAME The JCA standard name of this signature algorithm.

Fields inherited from class iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

messageDigest_

Fields inherited from class iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

currentKeyIsSoftwareKey_, initialized_, operationState_, pkcs11OperationInitialized_, privateKey_, publicKey_, session_, SIGN, softwareDelegate_, tokenManager_, usedMechanismInfos_, usedMechanisms_, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Constructor Summary

Constructors

Constructor and Description
ExternalMd2RsaSignature() Public default constructor to enable instantiation via Class.forName(String).

Method Summary

Modifier and Type	Method and Description
protected java.lang.String	getAlgorithmName() Get the JCA standard name of this signautre algorithm.
protected iaik.pkcs.pkcs11.Mechanism	getMechanism() Get the mechanism of this signature object.
protected java.lang.String	getMessageDigestName() Returns the message digest's name that this object uses to hash the data.
protected byte[]	prepareHash(byte[] rawHash) Wraps the hash into a DigestInfo object.

Methods inherited from class iaik.pkcs.pkcs11.provider.signatures.ExternalHashSignature

getMessageDigest, pkcs11InitSign, pkcs11InitVerify, pkcs11Sign, pkcs11Update, pkcs11Update, pkcs11Verify

Methods inherited from class iaik.pkcs.pkcs11.provider.signatures.PKCS11Signature

engineGetParameter, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineSign, engineUpdate, engineUpdate, engineVerify, finalize, finalizePkcs11Operation, getUsedMechanismFeatures, getUsedMechanisms, initializePkcs11Operation, initializeSession, initializeSoftwareDelegate, isSupportedBy, pkcs11GetParameter, pkcs11SetParameter, pkcs11SetParameter

Methods inherited from class java.security.SignatureSpi

clone, engineGetParameters, engineInitSign, engineSign, engineUpdate, engineVerify

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MESSAGE_DIGEST_ALGORITHM_NAME

protected static java.lang.String MESSAGE_DIGEST_ALGORITHM_NAME

The JCA name of the messag digest algorithm.

SIGNATURE_ALGORITHM_NAME

protected static java.lang.String SIGNATURE_ALGORITHM_NAME

The JCA standard name of this signature algorithm.

Constructor Detail

ExternalMd2RsaSignature

public ExternalMd2RsaSignature()

Public default constructor to enable instantiation via Class.forName(String).

Method Detail

getAlgorithmName

protected java.lang.String getAlgorithmName()

Get the JCA standard name of this signautre algorithm.

Specified by:

getAlgorithmName in class PKCS11Signature

Returns:

The JCA standard name of this signautre algorithm.

Postconditions:

(result <> null)

getMessageDigestName

protected java.lang.String getMessageDigestName()

Returns the message digest's name that this object uses to hash the data. This is the JCA name.

Specified by:

getMessageDigestName in class ExternalHashSignature

Returns:

A message digest's JCA name.

Postconditions:

(result <> null)

getMechanism

protected iaik.pkcs.pkcs11.Mechanism getMechanism()

Get the mechanism of this signature object. This implementation returns a mechanism with CKM_RSA_PKCS as ID.

Specified by:

getMechanism in class ExternalHashSignature

Returns:

The mechanism this object uses for signing and verification.

Postconditions:

(result <> null)

prepareHash

protected byte[] prepareHash(byte[] rawHash)
                      throws IAIKPkcs11Exception

Wraps the hash into a DigestInfo object.

Overrides:

prepareHash in class ExternalHashSignature

Parameters:

rawHash - The raw hash value; i.e. the 16 bytes of a MD2 hash.

Returns:

The hash value in a DigestInfo object.

Throws:

IAIKPkcs11Exception - If the hash cannot be wrapped for any reason.

See Also:

DigestInfo