Class PK11KeyPairGenerator

public static final PQGParams PQG1024

Pre-cooked PQG values for 1024-bit keypairs, along with the seed, counter, and H values needed to verify them.

public static final PQGParams PQG512

Pre-cooked PQG values for 512-bit keypairs, along with the seed, counter, and H values needed to verify them.

public static final PQGParams PQG768

Pre-cooked PQG values for 768-bit keypairs, along with the seed, counter, and H values needed to verify them.

public PK11KeyPairGenerator(PK11Token token,
                            KeyPairAlgorithm algorithm)
            throws NoSuchAlgorithmException,
                   TokenException

Constructor for PK11KeyPairGenerator.

Parameters:

token - The PKCS #11 token that the keypair will be generated on.

algorithm - The type of key that will be generated. Currently, KeyPairAlgorithm.RSA and KeyPairAlgorithm.DSA are supported.

public KeyPair generateKeyPair()
            throws TokenException

Generates a key pair on a token. Uses parameters if they were passed in through a call to initialize, otherwise uses defaults.

Overrides:

generateKeyPair in interface KeyPairGeneratorSpi

public void initialize(AlgorithmParameterSpec params,
                       SecureRandom random)
            throws InvalidAlgorithmParameterException

Initializes this KeyPairGenerator with the given algorithm-specific parameters.

Overrides:

initialize in interface KeyPairGeneratorSpi

Parameters:

params - The algorithm-specific parameters that will govern key pair generation.

random - Ignored

public void initialize(int strength,
                       SecureRandom random)
            throws InvalidParameterException

Initializes this KeyPairGenerator with the given key strength.

For DSA key generation, pre-cooked PQG values will be used be used if the key size is 512, 768, or 1024. Otherwise, an InvalidParameterException will be thrown.

Overrides:

initialize in interface KeyPairGeneratorSpi

Parameters:

strength - The strength (size) of the keys that will be generated.

random - Ignored

public boolean keygenOnInternalToken()

Overrides:

keygenOnInternalToken in interface KeyPairGeneratorSpi

Returns:

true if the keypair generation will be done on the internal token and then moved to this token.

public void temporaryPairs(boolean temp)

Overrides:

temporaryPairs in interface KeyPairGeneratorSpi