0N/A/*
2362N/A * Copyright (c) 1996, 2007, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
2362N/A * published by the Free Software Foundation. Oracle designates this
0N/A * particular file as subject to the "Classpath" exception as provided
2362N/A * by Oracle in the LICENSE file that accompanied this code.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/A
0N/A
0N/Apackage sun.security.ssl;
0N/A
0N/Aimport java.util.Arrays;
0N/A
0N/Aimport java.security.*;
0N/A
0N/A/**
0N/A * Signature implementation for the SSL/TLS RSA Signature variant with both
0N/A * MD5 and SHA-1 MessageDigests. Used for explicit RSA server authentication
0N/A * (RSA signed server key exchange for RSA_EXPORT and DHE_RSA) and RSA client
0N/A * authentication (RSA signed certificate verify message).
0N/A *
0N/A * It conforms to the standard JCA Signature API. It is registered in the
0N/A * SunJSSE provider to avoid more complicated getInstance() code and
0N/A * negative interaction with the JCA mechanisms for hardware providers.
0N/A *
0N/A * The class should be instantiated via the getInstance() method in this class,
0N/A * which returns the implementation from the prefered provider. The internal
0N/A * implementation allows the hashes to be explicitly set, which is required
0N/A * for RSA client authentication. It can be obtained via the
0N/A * getInternalInstance() method.
0N/A *
0N/A * This class is not thread safe.
0N/A *
0N/A */
0N/Apublic final class RSASignature extends SignatureSpi {
0N/A
0N/A private final Signature rawRsa;
0N/A private MessageDigest md5, sha;
0N/A
0N/A // flag indicating if the MessageDigests are in reset state
0N/A private boolean isReset;
0N/A
0N/A public RSASignature() throws NoSuchAlgorithmException {
0N/A super();
0N/A rawRsa = JsseJce.getSignature(JsseJce.SIGNATURE_RAWRSA);
0N/A isReset = true;
0N/A }
0N/A
0N/A /**
0N/A * Get an implementation for the RSA signature. Follows the standard
0N/A * JCA getInstance() model, so it return the implementation from the
0N/A * provider with the highest precedence, which may be this class.
0N/A */
0N/A static Signature getInstance() throws NoSuchAlgorithmException {
0N/A return JsseJce.getSignature(JsseJce.SIGNATURE_SSLRSA);
0N/A }
0N/A
0N/A /**
0N/A * Get an internal implementation for the RSA signature. Used for RSA
0N/A * client authentication, which needs the ability to set the digests
0N/A * to externally provided values via the setHashes() method.
0N/A */
0N/A static Signature getInternalInstance()
0N/A throws NoSuchAlgorithmException, NoSuchProviderException {
0N/A return Signature.getInstance(JsseJce.SIGNATURE_SSLRSA, "SunJSSE");
0N/A }
0N/A
0N/A /**
0N/A * Set the MD5 and SHA hashes to the provided objects.
0N/A */
0N/A static void setHashes(Signature sig, MessageDigest md5, MessageDigest sha) {
0N/A sig.setParameter("hashes", new MessageDigest[] {md5, sha});
0N/A }
0N/A
0N/A /**
0N/A * Reset the MessageDigests unless they are already reset.
0N/A */
0N/A private void reset() {
0N/A if (isReset == false) {
0N/A md5.reset();
0N/A sha.reset();
0N/A isReset = true;
0N/A }
0N/A }
0N/A
0N/A private static void checkNull(Key key) throws InvalidKeyException {
0N/A if (key == null) {
0N/A throw new InvalidKeyException("Key must not be null");
0N/A }
0N/A }
0N/A
0N/A protected void engineInitVerify(PublicKey publicKey)
0N/A throws InvalidKeyException {
0N/A checkNull(publicKey);
0N/A reset();
0N/A rawRsa.initVerify(publicKey);
0N/A }
0N/A
0N/A protected void engineInitSign(PrivateKey privateKey)
0N/A throws InvalidKeyException {
0N/A engineInitSign(privateKey, null);
0N/A }
0N/A
0N/A protected void engineInitSign(PrivateKey privateKey, SecureRandom random)
0N/A throws InvalidKeyException {
0N/A checkNull(privateKey);
0N/A reset();
0N/A rawRsa.initSign(privateKey, random);
0N/A }
0N/A
0N/A // lazily initialize the MessageDigests
0N/A private void initDigests() {
0N/A if (md5 == null) {
0N/A md5 = JsseJce.getMD5();
0N/A sha = JsseJce.getSHA();
0N/A }
0N/A }
0N/A
0N/A protected void engineUpdate(byte b) {
0N/A initDigests();
0N/A isReset = false;
0N/A md5.update(b);
0N/A sha.update(b);
0N/A }
0N/A
0N/A protected void engineUpdate(byte[] b, int off, int len) {
0N/A initDigests();
0N/A isReset = false;
0N/A md5.update(b, off, len);
0N/A sha.update(b, off, len);
0N/A }
0N/A
0N/A private byte[] getDigest() throws SignatureException {
0N/A try {
0N/A initDigests();
0N/A byte[] data = new byte[36];
0N/A md5.digest(data, 0, 16);
0N/A sha.digest(data, 16, 20);
0N/A isReset = true;
0N/A return data;
0N/A } catch (DigestException e) {
0N/A // should never occur
0N/A throw new SignatureException(e);
0N/A }
0N/A }
0N/A
0N/A protected byte[] engineSign() throws SignatureException {
0N/A rawRsa.update(getDigest());
0N/A return rawRsa.sign();
0N/A }
0N/A
0N/A protected boolean engineVerify(byte[] sigBytes) throws SignatureException {
0N/A return engineVerify(sigBytes, 0, sigBytes.length);
0N/A }
0N/A
0N/A protected boolean engineVerify(byte[] sigBytes, int offset, int length)
0N/A throws SignatureException {
0N/A rawRsa.update(getDigest());
0N/A return rawRsa.verify(sigBytes, offset, length);
0N/A }
0N/A
0N/A protected void engineSetParameter(String param, Object value)
0N/A throws InvalidParameterException {
0N/A if (param.equals("hashes") == false) {
0N/A throw new InvalidParameterException
0N/A ("Parameter not supported: " + param);
0N/A }
0N/A if (value instanceof MessageDigest[] == false) {
0N/A throw new InvalidParameterException
0N/A ("value must be MessageDigest[]");
0N/A }
0N/A MessageDigest[] digests = (MessageDigest[])value;
0N/A md5 = digests[0];
0N/A sha = digests[1];
0N/A }
0N/A
0N/A protected Object engineGetParameter(String param)
0N/A throws InvalidParameterException {
0N/A throw new InvalidParameterException("Parameters not supported");
0N/A }
0N/A
0N/A}