com.ibm.crypto.fips.provider

Class ECPrivateKey

java.lang.Object

com.ibm.security.pkcsutil.PKCSDerObject

com.ibm.security.pkcs8.PrivateKeyInfo

com.ibm.crypto.fips.provider.ECPrivateKey

All Implemented Interfaces:

java.io.Serializable, java.lang.Cloneable, java.security.interfaces.ECKey, java.security.interfaces.ECPrivateKey, java.security.Key, java.security.PrivateKey

public final class ECPrivateKey
extends com.ibm.security.pkcs8.PrivateKeyInfo
implements java.security.interfaces.ECPrivateKey, java.security.interfaces.ECKey, java.io.Serializable

Key implementation for EC private keys. ASN.1 syntax for EC private keys from SEC 1 v1.5 (draft):

 EXPLICIT TAGS

 ECPrivateKey ::= SEQUENCE {
   version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
   privateKey OCTET STRING,
   parameters [0] ECDomainParameters {{ SECGCurveNames }} OPTIONAL,
   publicKey [1] BIT STRING OPTIONAL
 }
 

We currently ignore the optional parameters and publicKey fields. We require that the parameters are encoded as part of the AlgorithmIdentifier, not in the private key structure.

Since:

1.6

Author:

Kevin Driver, Mike Ault

See Also:

Serialized Form

Field Summary

Fields inherited from class com.ibm.security.pkcs8.PrivateKeyInfo

version

Constructor Summary

Constructors

Constructor and Description
ECPrivateKey(java.math.BigInteger s, java.security.spec.ECParameterSpec params) Construct a key from its components.
ECPrivateKey(byte[] encoded) Construct a key from its encoding.

Method Summary

Methods

Modifier and Type	Method and Description
java.security.spec.ECParameterSpec	getParams()
java.math.BigInteger	getS()
void	zeroize() This function zeroizes the key so that it isn't in memory

Methods inherited from class com.ibm.security.pkcs8.PrivateKeyInfo

addAttribute, addAttributes, clone, encode, equals, getAlgorithm, getAlgorithmId, getAttribute, getAttributes, getEncoded, getFormat, getKeyBytes, hasAttribute, hasAttributes, hashCode, parseKey, parseKey, toString

Methods inherited from class com.ibm.security.pkcsutil.PKCSDerObject

encode, getObjectIdentifier, write

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.security.Key

getAlgorithm, getEncoded, getFormat

Constructor Detail

ECPrivateKey

public ECPrivateKey(byte[] encoded)
             throws java.security.InvalidKeyException

Construct a key from its encoding.

Parameters:

encoded -

Throws:

java.security.InvalidKeyException

ECPrivateKey

public ECPrivateKey(java.math.BigInteger s,
            java.security.spec.ECParameterSpec params)
             throws java.security.InvalidKeyException,
                    java.security.spec.InvalidParameterSpecException

Construct a key from its components.

Parameters:

s -

params -

Throws:

java.security.InvalidKeyException

java.security.spec.InvalidParameterSpecException

Method Detail

getS

public java.math.BigInteger getS()

Specified by:

getS in interface java.security.interfaces.ECPrivateKey

getParams

public java.security.spec.ECParameterSpec getParams()

Specified by:

getParams in interface java.security.interfaces.ECKey

zeroize

public void zeroize()

This function zeroizes the key so that it isn't in memory