com.tencent.kona.sun.security.rsa

Class RSAKeyFactory

java.lang.Object

java.security.KeyFactorySpi

com.tencent.kona.sun.security.rsa.RSAKeyFactory

Direct Known Subclasses:

RSAKeyFactory.Legacy, RSAKeyFactory.PSS

public class RSAKeyFactory
extends java.security.KeyFactorySpi

KeyFactory for RSA keys, e.g. "RSA", "RSASSA-PSS". Keys must be instances of PublicKey or PrivateKey and getAlgorithm() must return a value which matches the type which are specified during construction time of the KeyFactory object. For such keys, it supports conversion between the following: For public keys: . RSA PublicKey with an X.509 encoding . RSA PublicKey with an PKCS#1 encoding . RSAPublicKey . RSAPublicKeySpec . X509EncodedKeySpec For private keys: . RSA PrivateKey with a PKCS#8 encoding . RSA PrivateKey with a PKCS#1 encoding . RSAPrivateKey . RSAPrivateCrtKey . RSAPrivateKeySpec . RSAPrivateCrtKeySpec . PKCS8EncodedKeySpec (of course, CRT variants only for CRT keys) Note: as always, RSA keys should be at least 512 bits long

Since:

1.5

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	RSAKeyFactory.Legacy
static class	RSAKeyFactory.PSS

Field Summary

Fields

Modifier and Type	Field and Description
static int	MAX_MODLEN
static int	MAX_MODLEN_RESTRICT_EXP
static int	MAX_RESTRICTED_EXPLEN
static int	MIN_MODLEN

Constructor Summary

Constructors

Constructor and Description
RSAKeyFactory(RSAUtil.KeyType type)

Method Summary

Modifier and Type	Method and Description
static void	checkKeyLengths(int modulusLen, java.math.BigInteger exponent, int minModulusLen, int maxModulusLen) Check the length of an RSA key modulus/exponent to make sure it is not too short or long.
protected java.security.PrivateKey	engineGeneratePrivate(java.security.spec.KeySpec keySpec)
protected java.security.PublicKey	engineGeneratePublic(java.security.spec.KeySpec keySpec)
protected <T extends java.security.spec.KeySpec> T	engineGetKeySpec(java.security.Key key, java.lang.Class<T> keySpec)
protected java.security.Key	engineTranslateKey(java.security.Key key) Translate an RSA key into a SunRsaSign RSA key.
static java.security.interfaces.RSAKey	toRSAKey(java.security.Key key) Static method to convert Key into an instance of RSAPublicKeyImpl or RSAPrivate(Crt)KeyImpl.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MIN_MODLEN

public static final int MIN_MODLEN

See Also:

Constant Field Values

MAX_MODLEN

public static final int MAX_MODLEN

See Also:

Constant Field Values

MAX_MODLEN_RESTRICT_EXP

public static final int MAX_MODLEN_RESTRICT_EXP

See Also:

Constant Field Values

MAX_RESTRICTED_EXPLEN

public static final int MAX_RESTRICTED_EXPLEN

See Also:

Constant Field Values

Constructor Detail

RSAKeyFactory

public RSAKeyFactory(RSAUtil.KeyType type)

Method Detail

toRSAKey

public static java.security.interfaces.RSAKey toRSAKey(java.security.Key key)
                                                throws java.security.InvalidKeyException

Static method to convert Key into an instance of RSAPublicKeyImpl or RSAPrivate(Crt)KeyImpl. If the key is not an RSA key or cannot be used, throw an InvalidKeyException. Used by RSASignature and RSACipher.

Throws:

java.security.InvalidKeyException

checkKeyLengths

public static void checkKeyLengths(int modulusLen,
                                   java.math.BigInteger exponent,
                                   int minModulusLen,
                                   int maxModulusLen)
                            throws java.security.InvalidKeyException

Check the length of an RSA key modulus/exponent to make sure it is not too short or long. Some impls have their own min and max key sizes that may or may not match with a system defined value.

Parameters:

modulusLen - the bit length of the RSA modulus.

exponent - the RSA exponent

minModulusLen - if > 0, check to see if modulusLen is at least this long, otherwise unused.

maxModulusLen - caller will allow this max number of bits. Allow the smaller of the system-defined maximum and this param.

Throws:

java.security.InvalidKeyException - if any of the values are unacceptable.

engineTranslateKey

protected java.security.Key engineTranslateKey(java.security.Key key)
                                        throws java.security.InvalidKeyException

Translate an RSA key into a SunRsaSign RSA key. If conversion is not possible, throw an InvalidKeyException. See also JCA doc.

Specified by:

engineTranslateKey in class java.security.KeyFactorySpi

Throws:

java.security.InvalidKeyException

engineGeneratePublic

protected java.security.PublicKey engineGeneratePublic(java.security.spec.KeySpec keySpec)
                                                throws java.security.spec.InvalidKeySpecException

Specified by:

engineGeneratePublic in class java.security.KeyFactorySpi

Throws:

java.security.spec.InvalidKeySpecException

engineGeneratePrivate

protected java.security.PrivateKey engineGeneratePrivate(java.security.spec.KeySpec keySpec)
                                                  throws java.security.spec.InvalidKeySpecException

Specified by:

engineGeneratePrivate in class java.security.KeyFactorySpi

Throws:

java.security.spec.InvalidKeySpecException

engineGetKeySpec

protected <T extends java.security.spec.KeySpec> T engineGetKeySpec(java.security.Key key,
                                                                    java.lang.Class<T> keySpec)
                                                             throws java.security.spec.InvalidKeySpecException

Specified by:

engineGetKeySpec in class java.security.KeyFactorySpi

Throws:

java.security.spec.InvalidKeySpecException