0N/A/*
2362N/A * Copyright (c) 2006, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
2362N/A * published by the Free Software Foundation. Oracle designates this
0N/A * particular file as subject to the "Classpath" exception as provided
2362N/A * by Oracle in the LICENSE file that accompanied this code.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/A
0N/Apackage sun.security.ec;
0N/A
0N/Aimport java.io.IOException;
0N/Aimport java.math.BigInteger;
0N/A
0N/Aimport java.security.*;
0N/Aimport java.security.interfaces.*;
0N/Aimport java.security.spec.*;
0N/A
0N/Aimport sun.security.util.*;
0N/Aimport sun.security.x509.AlgorithmId;
0N/Aimport sun.security.pkcs.PKCS8Key;
0N/A
0N/A/**
0N/A * Key implementation for EC private keys.
0N/A *
0N/A * ASN.1 syntax for EC private keys from SEC 1 v1.5 (draft):
0N/A *
0N/A * <pre>
0N/A * EXPLICIT TAGS
0N/A *
0N/A * ECPrivateKey ::= SEQUENCE {
0N/A * version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
0N/A * privateKey OCTET STRING,
0N/A * parameters [0] ECDomainParameters {{ SECGCurveNames }} OPTIONAL,
0N/A * publicKey [1] BIT STRING OPTIONAL
0N/A * }
0N/A * </pre>
0N/A *
0N/A * We currently ignore the optional parameters and publicKey fields. We
0N/A * require that the parameters are encoded as part of the AlgorithmIdentifier,
0N/A * not in the private key structure.
0N/A *
0N/A * @since 1.6
0N/A * @author Andreas Sterbenz
0N/A */
0N/Apublic final class ECPrivateKeyImpl extends PKCS8Key implements ECPrivateKey {
0N/A
0N/A private static final long serialVersionUID = 88695385615075129L;
0N/A
0N/A private BigInteger s; // private value
0N/A private ECParameterSpec params;
0N/A
0N/A /**
0N/A * Construct a key from its encoding. Called by the ECKeyFactory and
0N/A * the SunPKCS11 code.
0N/A */
0N/A public ECPrivateKeyImpl(byte[] encoded) throws InvalidKeyException {
0N/A decode(encoded);
0N/A }
0N/A
0N/A /**
0N/A * Construct a key from its components. Used by the
0N/A * KeyFactory and the SunPKCS11 code.
0N/A */
0N/A public ECPrivateKeyImpl(BigInteger s, ECParameterSpec params)
0N/A throws InvalidKeyException {
0N/A this.s = s;
0N/A this.params = params;
0N/A // generate the encoding
0N/A algid = new AlgorithmId
0N/A (AlgorithmId.EC_oid, ECParameters.getAlgorithmParameters(params));
0N/A try {
0N/A DerOutputStream out = new DerOutputStream();
0N/A out.putInteger(1); // version 1
0N/A byte[] privBytes = ECParameters.trimZeroes(s.toByteArray());
0N/A out.putOctetString(privBytes);
0N/A DerValue val =
0N/A new DerValue(DerValue.tag_Sequence, out.toByteArray());
0N/A key = val.toByteArray();
0N/A } catch (IOException exc) {
0N/A // should never occur
0N/A throw new InvalidKeyException(exc);
0N/A }
0N/A }
0N/A
0N/A // see JCA doc
0N/A public String getAlgorithm() {
0N/A return "EC";
0N/A }
0N/A
0N/A // see JCA doc
0N/A public BigInteger getS() {
0N/A return s;
0N/A }
0N/A
0N/A // see JCA doc
0N/A public ECParameterSpec getParams() {
0N/A return params;
0N/A }
0N/A
0N/A /**
0N/A * Parse the key. Called by PKCS8Key.
0N/A */
0N/A protected void parseKeyBits() throws InvalidKeyException {
0N/A try {
0N/A DerInputStream in = new DerInputStream(key);
0N/A DerValue derValue = in.getDerValue();
0N/A if (derValue.tag != DerValue.tag_Sequence) {
0N/A throw new IOException("Not a SEQUENCE");
0N/A }
0N/A DerInputStream data = derValue.data;
0N/A int version = data.getInteger();
0N/A if (version != 1) {
0N/A throw new IOException("Version must be 1");
0N/A }
0N/A byte[] privData = data.getOctetString();
0N/A s = new BigInteger(1, privData);
0N/A while (data.available() != 0) {
0N/A DerValue value = data.getDerValue();
0N/A if (value.isContextSpecific((byte)0)) {
0N/A // ignore for now
0N/A } else if (value.isContextSpecific((byte)1)) {
0N/A // ignore for now
0N/A } else {
0N/A throw new InvalidKeyException("Unexpected value: " + value);
0N/A }
0N/A }
0N/A AlgorithmParameters algParams = this.algid.getParameters();
0N/A if (algParams == null) {
0N/A throw new InvalidKeyException("EC domain parameters must be "
0N/A + "encoded in the algorithm identifier");
0N/A }
0N/A params = algParams.getParameterSpec(ECParameterSpec.class);
0N/A } catch (IOException e) {
0N/A throw new InvalidKeyException("Invalid EC private key", e);
0N/A } catch (InvalidParameterSpecException e) {
0N/A throw new InvalidKeyException("Invalid EC private key", e);
0N/A }
0N/A }
0N/A
0N/A // return a string representation of this key for debugging
0N/A public String toString() {
0N/A return "Sun EC private key, " + params.getCurve().getField().getFieldSize()
0N/A + " bits\n private value: "
0N/A + s + "\n parameters: " + params;
0N/A }
0N/A
0N/A}