com.google.crypto.tink.signature

Class RsaSsaPssSignKeyManager

java.lang.Object

com.google.crypto.tink.internal.KeyTypeManager<KeyProtoT>

com.google.crypto.tink.internal.PrivateKeyTypeManager<RsaSsaPssPrivateKey,RsaSsaPssPublicKey>

com.google.crypto.tink.signature.RsaSsaPssSignKeyManager

public final class RsaSsaPssSignKeyManager
extends PrivateKeyTypeManager<RsaSsaPssPrivateKey,RsaSsaPssPublicKey>

This key manager generates new RsaSsaPssPrivateKey keys and produces new instances of RsaSsaPssSignJce.

Nested Class Summary

Nested classes/interfaces inherited from class com.google.crypto.tink.internal.KeyTypeManager

KeyTypeManager.KeyFactory<KeyFormatProtoT extends com.google.protobuf.MessageLite,KeyProtoT extends com.google.protobuf.MessageLite>

Method Summary

Modifier and Type	Method and Description
String	getKeyType() Returns the type URL that identifies the key type of keys managed by this KeyManager.
RsaSsaPssPublicKey	getPublicKey(RsaSsaPssPrivateKey privKeyProto) Creates a public key from the given private key.
int	getVersion() Returns the version number of this KeyManager.
KeyTypeManager.KeyFactory<RsaSsaPssKeyFormat,RsaSsaPssPrivateKey>	keyFactory() Returns the KeyTypeManager.KeyFactory for this key type.
KeyData.KeyMaterialType	keyMaterialType() Returns the KeyData.KeyMaterialType for this proto.
RsaSsaPssPrivateKey	parseKey(com.google.protobuf.ByteString byteString) Parses a serialized key proto.
static KeyTemplate	rawRsa3072PssSha256F4Template()
static KeyTemplate	rawRsa4096PssSha512F4Template()
static void	registerPair(boolean newKeyAllowed) Registers the RsaSsaPssSignKeyManager and the RsaSsaPssVerifyKeyManager with the registry, so that the the RsaSsaPss-Keys can be used with Tink.
static KeyTemplate	rsa3072PssSha256F4Template()
static KeyTemplate	rsa4096PssSha512F4Template()
void	validateKey(RsaSsaPssPrivateKey keyProto) Checks if the given keyProto is a valid key.

Methods inherited from class com.google.crypto.tink.internal.PrivateKeyTypeManager

getPublicKeyClass

Methods inherited from class com.google.crypto.tink.internal.KeyTypeManager

fipsStatus, firstSupportedPrimitiveClass, getKeyClass, getPrimitive, supportedPrimitives

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getKeyType

public String getKeyType()

Description copied from class: KeyTypeManager

Returns the type URL that identifies the key type of keys managed by this KeyManager.

Specified by:

getKeyType in class KeyTypeManager<RsaSsaPssPrivateKey>

getVersion

public int getVersion()

Description copied from class: KeyTypeManager

Returns the version number of this KeyManager.

Specified by:

getVersion in class KeyTypeManager<RsaSsaPssPrivateKey>

getPublicKey

public RsaSsaPssPublicKey getPublicKey(RsaSsaPssPrivateKey privKeyProto)
                                throws GeneralSecurityException

Description copied from class: PrivateKeyTypeManager

Creates a public key from the given private key.

Specified by:

getPublicKey in class PrivateKeyTypeManager<RsaSsaPssPrivateKey,RsaSsaPssPublicKey>

Throws:

GeneralSecurityException

keyMaterialType

public KeyData.KeyMaterialType keyMaterialType()

Description copied from class: KeyTypeManager

Returns the KeyData.KeyMaterialType for this proto.

Specified by:

keyMaterialType in class KeyTypeManager<RsaSsaPssPrivateKey>

parseKey

public RsaSsaPssPrivateKey parseKey(com.google.protobuf.ByteString byteString)
                             throws com.google.protobuf.InvalidProtocolBufferException

Description copied from class: KeyTypeManager

Parses a serialized key proto.

Implement as return KeyProtoT.parseFrom(byteString);.

Specified by:

parseKey in class KeyTypeManager<RsaSsaPssPrivateKey>

Throws:

com.google.protobuf.InvalidProtocolBufferException

validateKey

public void validateKey(RsaSsaPssPrivateKey keyProto)
                 throws GeneralSecurityException

Description copied from class: KeyTypeManager

Checks if the given keyProto is a valid key.

Specified by:

validateKey in class KeyTypeManager<RsaSsaPssPrivateKey>

Throws:

GeneralSecurityException - if the passed keyProto is not valid in any way.

keyFactory

public KeyTypeManager.KeyFactory<RsaSsaPssKeyFormat,RsaSsaPssPrivateKey> keyFactory()

Description copied from class: KeyTypeManager

Returns the KeyTypeManager.KeyFactory for this key type.

By default, this throws an UnsupportedOperationException. Hence, if an implementation does not support creating primitives, no implementation is required.

Overrides:

keyFactory in class KeyTypeManager<RsaSsaPssPrivateKey>

registerPair

public static void registerPair(boolean newKeyAllowed)
                         throws GeneralSecurityException

Registers the RsaSsaPssSignKeyManager and the RsaSsaPssVerifyKeyManager with the registry, so that the the RsaSsaPss-Keys can be used with Tink.

Throws:

GeneralSecurityException

rsa3072PssSha256F4Template

public static final KeyTemplate rsa3072PssSha256F4Template()

Returns:

A KeyTemplate that generates new instances of RSA-SSA-PSS key pairs with the following parameters:

• Signature hash: SHA256.
• MGF1 hash: SHA256.
• Salt length: 32 (i.e., SHA256's output length).
• Modulus size: 3072 bit.
• Public exponent: 65537 (aka F4).
• Prefix type: KeyTemplate.OutputPrefixType#TINK.

rawRsa3072PssSha256F4Template

public static final KeyTemplate rawRsa3072PssSha256F4Template()

Returns:

A KeyTemplate that generates new instances of RSA-SSA-PSS key pairs with the following parameters:

• Signature hash: SHA256.
• MGF1 hash: SHA256.
• Salt length: 32 (i.e., SHA256's output length).
• Modulus size: 3072 bit.
• Public exponent: 65537 (aka F4).
• Prefix type: KeyTemplate.OutputPrefixType#RAW (no prefix).

Keys generated from this template create signatures compatible with OpenSSL and other libraries.

rsa4096PssSha512F4Template

public static final KeyTemplate rsa4096PssSha512F4Template()

Returns:

A KeyTemplate that generates new instances of RSA-SSA-PSS key pairs with the following parameters:

• Signature hash: SHA512.
• MGF1 hash: SHA512.
• Salt length: 64 (i.e., SHA512's output length).
• Modulus size: 4096 bit.
• Public exponent: 65537 (aka F4).
• Prefix type: KeyTemplate.OutputPrefixType#TINK.

rawRsa4096PssSha512F4Template

public static final KeyTemplate rawRsa4096PssSha512F4Template()

Returns:

A KeyTemplate that generates new instances of RSA-SSA-PSS key pairs with the following parameters:

• Signature hash: SHA512.
• MGF1 hash: SHA512.
• Salt length: 64 (i.e., SHA512's output length).
• Modulus size: 4096 bit.
• Public exponent: 65537 (aka F4).
• Prefix type: KeyTemplate.OutputPrefixType#RAW (no prefix).

Keys generated from this template create signatures compatible with OpenSSL and other libraries.