ch.epfl.dedis.lib.darc

Class SignerX509EC

java.lang.Object

ch.epfl.dedis.lib.darc.SignerX509EC

All Implemented Interfaces:

Signer

public abstract class SignerX509EC
extends Object
implements Signer

SignerX509EC represents a keycard that holds its private key and can only be used to sign but which will not reveal its private key. For the moment it _does_ hold its own private key, but in a later version this can be removed and then any call to `sign` needs to go to the card.

Nested Class Summary

Nested classes/interfaces inherited from interface ch.epfl.dedis.lib.darc.Signer

Signer.SignRequestRejectedException

Constructor Summary

Constructors

Constructor and Description
SignerX509EC()

Method Summary

Modifier and Type	Method and Description
Identity	getIdentity() Returns the identity of the signer.
Scalar	getPrivate() Returns the private key of the signer, or throws a CothorityCryptoException.
Point	getPublic() Returns the public key of the signer, or throws a CothorityCryptoException.
abstract PublicKey	getPublicKey() Return public key as a class
byte[]	publicBytes() Returns the specific public key representation of this signer
byte[]	serialize() Returns an array of bytes repesenting the signer.
abstract byte[]	sign(byte[] msg) Signs the sha256 hash of the message.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SignerX509EC

public SignerX509EC()

Method Detail

sign

public abstract byte[] sign(byte[] msg)
                     throws Signer.SignRequestRejectedException

Signs the sha256 hash of the message. It must return an array of bytes that can be verified by the corresponding identity-implementation.

Specified by:

sign in interface Signer

Parameters:

msg - the message

Returns:

the signature

Throws:

Signer.SignRequestRejectedException - if the signature request is rejected

getPrivate

public Scalar getPrivate()

Returns the private key of the signer, or throws a CothorityCryptoException.

Specified by:

getPrivate in interface Signer

Returns:

the private key

getPublic

public Point getPublic()

Returns the public key of the signer, or throws a CothorityCryptoException.

Specified by:

getPublic in interface Signer

Returns:

the public key

getIdentity

public Identity getIdentity()

Returns the identity of the signer.

Specified by:

getIdentity in interface Signer

Returns:

an identity

serialize

public byte[] serialize()
                 throws IOException

Returns an array of bytes repesenting the signer. The first byte must indicate the type.

Specified by:

serialize in interface Signer

Returns:

the serialized signer

Throws:

IOException - if something went wrong with I/O

publicBytes

public byte[] publicBytes()

Returns the specific public key representation of this signer

Returns:

the output bytes TODO: implement something that makes sense here and that can be used by IdentityX509EC. bytes returned by this method are internal, binary representation of X509 key. It should be possible to

1. create a (@Link X509EncodedKeySpec key in following way:

   new X509EncodedKeySpec(SignerX509EC.publicBytes)

2. analyse returned value by openssl command
3. use openssl to verify signature

EncodedKeySpec

getPublicKey

public abstract PublicKey getPublicKey()

Return public key as a class

Returns:

the PublicKey