com.distrimind.bouncycastle.pqc.crypto.util.SubjectPublicKeyInfoFactory Maven / Gradle / Ivy
package com.distrimind.bouncycastle.pqc.crypto.util;
import java.io.IOException;
import com.distrimind.bouncycastle.asn1.DEROctetString;
import com.distrimind.bouncycastle.asn1.DERSequence;
import com.distrimind.bouncycastle.asn1.isara.IsaraObjectIdentifiers;
import com.distrimind.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers;
import com.distrimind.bouncycastle.asn1.x509.AlgorithmIdentifier;
import com.distrimind.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
import com.distrimind.bouncycastle.pqc.crypto.frodo.FrodoPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.mceliece.McElieceCCA2PublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.newhope.NHPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.qtesla.QTESLAPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.saber.SABERPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.sphincs.SPHINCSPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.sphincsplus.SPHINCSPlusPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.xmss.XMSSMTPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.xmss.XMSSPublicKeyParameters;
import com.distrimind.bouncycastle.crypto.params.AsymmetricKeyParameter;
import com.distrimind.bouncycastle.pqc.asn1.CMCEPublicKey;
import com.distrimind.bouncycastle.pqc.asn1.McElieceCCA2PublicKey;
import com.distrimind.bouncycastle.pqc.asn1.PQCObjectIdentifiers;
import com.distrimind.bouncycastle.pqc.asn1.SPHINCS256KeyParams;
import com.distrimind.bouncycastle.pqc.asn1.XMSSKeyParams;
import com.distrimind.bouncycastle.pqc.asn1.XMSSMTKeyParams;
import com.distrimind.bouncycastle.pqc.asn1.XMSSMTPublicKey;
import com.distrimind.bouncycastle.pqc.asn1.XMSSPublicKey;
import com.distrimind.bouncycastle.pqc.crypto.cmce.CMCEPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.lms.Composer;
import com.distrimind.bouncycastle.pqc.crypto.lms.HSSPublicKeyParameters;
import com.distrimind.bouncycastle.pqc.crypto.lms.LMSPublicKeyParameters;
/**
* Factory to create ASN.1 subject public key info objects from lightweight public keys.
*/
public class SubjectPublicKeyInfoFactory
{
private SubjectPublicKeyInfoFactory()
{
}
/**
* Create a SubjectPublicKeyInfo public key.
*
* @param publicKey the key to be encoded into the info object.
* @return a SubjectPublicKeyInfo representing the key.
* @throws java.io.IOException on an error encoding the key
*/
public static SubjectPublicKeyInfo createSubjectPublicKeyInfo(AsymmetricKeyParameter publicKey)
throws IOException
{
if (publicKey instanceof QTESLAPublicKeyParameters)
{
QTESLAPublicKeyParameters keyParams = (QTESLAPublicKeyParameters)publicKey;
AlgorithmIdentifier algorithmIdentifier = Utils.qTeslaLookupAlgID(keyParams.getSecurityCategory());
return new SubjectPublicKeyInfo(algorithmIdentifier, keyParams.getPublicData());
}
else if (publicKey instanceof SPHINCSPublicKeyParameters)
{
SPHINCSPublicKeyParameters params = (SPHINCSPublicKeyParameters)publicKey;
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PQCObjectIdentifiers.sphincs256,
new SPHINCS256KeyParams(Utils.sphincs256LookupTreeAlgID(params.getTreeDigest())));
return new SubjectPublicKeyInfo(algorithmIdentifier, params.getKeyData());
}
else if (publicKey instanceof NHPublicKeyParameters)
{
NHPublicKeyParameters params = (NHPublicKeyParameters)publicKey;
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PQCObjectIdentifiers.newHope);
return new SubjectPublicKeyInfo(algorithmIdentifier, params.getPubData());
}
else if (publicKey instanceof LMSPublicKeyParameters)
{
LMSPublicKeyParameters params = (LMSPublicKeyParameters)publicKey;
byte[] encoding = Composer.compose().u32str(1).bytes(params).build();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PKCSObjectIdentifiers.id_alg_hss_lms_hashsig);
return new SubjectPublicKeyInfo(algorithmIdentifier, new DEROctetString(encoding));
}
else if (publicKey instanceof HSSPublicKeyParameters)
{
HSSPublicKeyParameters params = (HSSPublicKeyParameters)publicKey;
byte[] encoding = Composer.compose().u32str(params.getL()).bytes(params.getLMSPublicKey()).build();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PKCSObjectIdentifiers.id_alg_hss_lms_hashsig);
return new SubjectPublicKeyInfo(algorithmIdentifier, new DEROctetString(encoding));
}
else if (publicKey instanceof SPHINCSPlusPublicKeyParameters)
{
SPHINCSPlusPublicKeyParameters params = (SPHINCSPlusPublicKeyParameters)publicKey;
byte[] encoding = params.getEncoded();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(Utils.sphincsPlusOidLookup(params.getParameters()));
return new SubjectPublicKeyInfo(algorithmIdentifier, new DEROctetString(encoding));
}
else if (publicKey instanceof CMCEPublicKeyParameters)
{
CMCEPublicKeyParameters params = (CMCEPublicKeyParameters)publicKey;
byte[] encoding = params.getEncoded();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(Utils.mcElieceOidLookup(params.getParameters()));
// https://datatracker.ietf.org/doc/draft-uni-qsckeys/
return new SubjectPublicKeyInfo(algorithmIdentifier, new CMCEPublicKey(encoding));
}
else if (publicKey instanceof XMSSPublicKeyParameters)
{
XMSSPublicKeyParameters keyParams = (XMSSPublicKeyParameters)publicKey;
byte[] publicSeed = keyParams.getPublicSeed();
byte[] root = keyParams.getRoot();
byte[] keyEnc = keyParams.getEncoded();
if (keyEnc.length > publicSeed.length + root.length)
{
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(IsaraObjectIdentifiers.id_alg_xmss);
return new SubjectPublicKeyInfo(algorithmIdentifier, new DEROctetString(keyEnc));
}
else
{
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PQCObjectIdentifiers.xmss,
new XMSSKeyParams(keyParams.getParameters().getHeight(), Utils.xmssLookupTreeAlgID(keyParams.getTreeDigest())));
return new SubjectPublicKeyInfo(algorithmIdentifier, new XMSSPublicKey(publicSeed, root));
}
}
else if (publicKey instanceof XMSSMTPublicKeyParameters)
{
XMSSMTPublicKeyParameters keyParams = (XMSSMTPublicKeyParameters)publicKey;
byte[] publicSeed = keyParams.getPublicSeed();
byte[] root = keyParams.getRoot();
byte[] keyEnc = keyParams.getEncoded();
if (keyEnc.length > publicSeed.length + root.length)
{
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(IsaraObjectIdentifiers.id_alg_xmssmt);
return new SubjectPublicKeyInfo(algorithmIdentifier, new DEROctetString(keyEnc));
}
else
{
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PQCObjectIdentifiers.xmss_mt, new XMSSMTKeyParams(keyParams.getParameters().getHeight(), keyParams.getParameters().getLayers(),
Utils.xmssLookupTreeAlgID(keyParams.getTreeDigest())));
return new SubjectPublicKeyInfo(algorithmIdentifier, new XMSSMTPublicKey(keyParams.getPublicSeed(), keyParams.getRoot()));
}
}
else if (publicKey instanceof McElieceCCA2PublicKeyParameters)
{
McElieceCCA2PublicKeyParameters pub = (McElieceCCA2PublicKeyParameters)publicKey;
McElieceCCA2PublicKey mcEliecePub = new McElieceCCA2PublicKey(pub.getN(), pub.getT(), pub.getG(), Utils.getAlgorithmIdentifier(pub.getDigest()));
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(PQCObjectIdentifiers.mcElieceCca2);
return new SubjectPublicKeyInfo(algorithmIdentifier, mcEliecePub);
}
else if (publicKey instanceof FrodoPublicKeyParameters)
{
FrodoPublicKeyParameters params = (FrodoPublicKeyParameters)publicKey;
byte[] encoding = params.getEncoded();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(Utils.frodoOidLookup(params.getParameters()));
return new SubjectPublicKeyInfo(algorithmIdentifier, (new DEROctetString(encoding)));
}
else if (publicKey instanceof SABERPublicKeyParameters)
{
SABERPublicKeyParameters params = (SABERPublicKeyParameters)publicKey;
byte[] encoding = params.getEncoded();
AlgorithmIdentifier algorithmIdentifier = new AlgorithmIdentifier(Utils.saberOidLookup(params.getParameters()));
// https://datatracker.ietf.org/doc/draft-uni-qsckeys/
return new SubjectPublicKeyInfo(algorithmIdentifier, new DERSequence(new DEROctetString(encoding)));
}
else
{
throw new IOException("key parameters not recognized");
}
}
}