org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory クラス

org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory の継承関係図

org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory 連携図

公開メンバ関数
	ECDSAKeyFactory (SignatureAlgorithm signatureAlgorithm, String dnName) throws InvalidParameterException, NoSuchProviderException, NoSuchAlgorithmException, InvalidAlgorithmParameterException, SignatureException, InvalidKeyException, CertificateEncodingException
Certificate	generateV3Certificate (Date startDate, Date expirationDate, String dnName) throws CertificateEncodingException, InvalidKeyException, IllegalStateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException
ECDSAPrivateKey	getPrivateKey ()
ECDSAPublicKey	getPublicKey ()
Certificate	getCertificate ()
Key< E, F >	getKey ()

非公開変数類
SignatureAlgorithm	signatureAlgorithm
KeyPair	keyPair
ECDSAPrivateKey	ecdsaPrivateKey
ECDSAPublicKey	ecdsaPublicKey
Certificate	certificate

詳解

Factory to create asymmetric Public and Private Keys for the Elliptic Curve Digital Signature Algorithm (ECDSA)

著者

Javier Rojas Blum

バージョン

June 15, 2016

構築子と解体子

ECDSAKeyFactory()

org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.ECDSAKeyFactory ( SignatureAlgorithm  signatureAlgorithm, String  dnName  ) throws InvalidParameterException, NoSuchProviderException, NoSuchAlgorithmException, InvalidAlgorithmParameterException, SignatureException, InvalidKeyException, CertificateEncodingException

inline

                                                                                                                      {
        if (signatureAlgorithm == null) {
            throw new InvalidParameterException("The signature algorithm cannot be null");
        }

        this.signatureAlgorithm = signatureAlgorithm;

        ECParameterSpec ecSpec = ECNamedCurveTable.getParameterSpec(signatureAlgorithm.getCurve().getName());

        KeyPairGenerator keyGen = KeyPairGenerator.getInstance("ECDSA", "BC");
        keyGen.initialize(ecSpec, new SecureRandom());

        this.keyPair = keyGen.generateKeyPair();
        BCECPrivateKey privateKeySpec = (BCECPrivateKey) keyPair.getPrivate();
        BCECPublicKey publicKeySpec = (BCECPublicKey) keyPair.getPublic();

        BigInteger x = publicKeySpec.getQ().getX().toBigInteger();
        BigInteger y = publicKeySpec.getQ().getY().toBigInteger();
        BigInteger d = privateKeySpec.getD();

        this.ecdsaPrivateKey = new ECDSAPrivateKey(d);
        this.ecdsaPublicKey = new ECDSAPublicKey(signatureAlgorithm, x, y);

        if (StringUtils.isNotBlank(dnName)) {
            // Create certificate
            GregorianCalendar startDate = new GregorianCalendar(); // time from which certificate is valid
            GregorianCalendar expiryDate = new GregorianCalendar(); // time after which certificate is not valid
            expiryDate.add(Calendar.YEAR, 1);
            BigInteger serialNumber = new BigInteger(1024, new Random()); // serial number for certificate

            X509V1CertificateGenerator certGen = new X509V1CertificateGenerator();
            X500Principal principal = new X500Principal(dnName);

            certGen.setSerialNumber(serialNumber);
            certGen.setIssuerDN(principal);
            certGen.setNotBefore(startDate.getTime());
            certGen.setNotAfter(expiryDate.getTime());
            certGen.setSubjectDN(principal); // note: same as issuer
            certGen.setPublicKey(keyPair.getPublic());
            certGen.setSignatureAlgorithm("SHA256WITHECDSA");

            X509Certificate x509Certificate = certGen.generate(privateKeySpec, "BC");
            this.certificate = new Certificate(signatureAlgorithm, x509Certificate);
        }
    }

関数詳解

generateV3Certificate()

Certificate org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.generateV3Certificate ( Date  startDate, Date  expirationDate, String  dnName  ) throws CertificateEncodingException, InvalidKeyException, IllegalStateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException

inline

                                                                                                                                                                                                                                                        {
        // Create certificate
        BigInteger serialNumber = new BigInteger(1024, new Random()); // serial number for certificate

        X509V3CertificateGenerator certGen = new X509V3CertificateGenerator();
        X500Principal principal = new X500Principal(dnName);

        certGen.setSerialNumber(serialNumber);
        certGen.setIssuerDN(principal);
        certGen.setNotBefore(startDate);
        certGen.setNotAfter(expirationDate);
        certGen.setSubjectDN(principal); // note: same as issuer
        certGen.setPublicKey(keyPair.getPublic());
        certGen.setSignatureAlgorithm(signatureAlgorithm.getAlgorithm());

        X509Certificate x509Certificate = certGen.generate(keyPair.getPrivate(), "BC");
        return new Certificate(signatureAlgorithm, x509Certificate);
    }

getCertificate()

Certificate org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.getCertificate ( )

inline

                                        {
        return certificate;
    }

getKey()

Key<E, F> org.xdi.oxauth.model.crypto.KeyFactory< E extends PrivateKey, F extends PublicKey >.getKey ( )

inlineinherited

                              {
        Key key = new Key();

        key.setPrivateKey(getPrivateKey());
        key.setPublicKey(getPublicKey());
        key.setCertificate(getCertificate());

        return key;
    }

getPrivateKey()

ECDSAPrivateKey org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.getPrivateKey ( )

inline

                                           {
        return ecdsaPrivateKey;
    }

getPublicKey()

ECDSAPublicKey org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.getPublicKey ( )

inline

                                         {
        return ecdsaPublicKey;
    }

メンバ詳解

certificate

Certificate org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.certificate

private

ecdsaPrivateKey

ECDSAPrivateKey org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.ecdsaPrivateKey

private

ecdsaPublicKey

ECDSAPublicKey org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.ecdsaPublicKey

private

keyPair

KeyPair org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.keyPair

private

signatureAlgorithm

SignatureAlgorithm org.xdi.oxauth.model.crypto.signature.ECDSAKeyFactory.signatureAlgorithm

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Model/src/main/java/org/xdi/oxauth/model/crypto/signature/ECDSAKeyFactory.java