org.bouncycastle.pqc.jcajce.provider.sphincs.SignatureSpi Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of bcprov-jdk15on Show documentation
Show all versions of bcprov-jdk15on Show documentation
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.
The newest version!
package org.bouncycastle.pqc.jcajce.provider.sphincs;
import java.security.InvalidKeyException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.SecureRandom;
import java.security.SignatureException;
import java.security.spec.AlgorithmParameterSpec;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.nist.NISTObjectIdentifiers;
import org.bouncycastle.crypto.CipherParameters;
import org.bouncycastle.crypto.Digest;
import org.bouncycastle.crypto.digests.SHA3Digest;
import org.bouncycastle.crypto.digests.SHA512Digest;
import org.bouncycastle.crypto.digests.SHA512tDigest;
import org.bouncycastle.pqc.crypto.sphincs.SPHINCS256Signer;
public class SignatureSpi
extends java.security.SignatureSpi
{
private final ASN1ObjectIdentifier treeDigest;
private Digest digest;
private SPHINCS256Signer signer;
private SecureRandom random;
protected SignatureSpi(Digest digest, ASN1ObjectIdentifier treeDigest, SPHINCS256Signer signer)
{
this.digest = digest;
this.treeDigest = treeDigest;
this.signer = signer;
}
protected void engineInitVerify(PublicKey publicKey)
throws InvalidKeyException
{
if (publicKey instanceof BCSphincs256PublicKey)
{
BCSphincs256PublicKey key = (BCSphincs256PublicKey)publicKey;
if (!treeDigest.equals(key.getTreeDigest()))
{
throw new InvalidKeyException("SPHINCS-256 signature for tree digest: " + key.getTreeDigest());
}
CipherParameters param = key.getKeyParams();
digest.reset();
signer.init(false, param);
}
else
{
throw new InvalidKeyException("unknown public key passed to SPHINCS-256");
}
}
protected void engineInitSign(PrivateKey privateKey, SecureRandom random)
throws InvalidKeyException
{
this.random = random;
engineInitSign(privateKey);
}
protected void engineInitSign(PrivateKey privateKey)
throws InvalidKeyException
{
if (privateKey instanceof BCSphincs256PrivateKey)
{
BCSphincs256PrivateKey key = (BCSphincs256PrivateKey)privateKey;
if (!treeDigest.equals(key.getTreeDigest()))
{
throw new InvalidKeyException("SPHINCS-256 signature for tree digest: " + key.getTreeDigest());
}
CipherParameters param = key.getKeyParams();
// random not required for SPHINCS.
// if (random != null)
// {
// param = new ParametersWithRandom(param, random);
// }
digest.reset();
signer.init(true, param);
}
else
{
throw new InvalidKeyException("unknown private key passed to SPHINCS-256");
}
}
protected void engineUpdate(byte b)
throws SignatureException
{
digest.update(b);
}
protected void engineUpdate(byte[] b, int off, int len)
throws SignatureException
{
digest.update(b, off, len);
}
protected byte[] engineSign()
throws SignatureException
{
byte[] hash = new byte[digest.getDigestSize()];
digest.doFinal(hash, 0);
try
{
byte[] sig = signer.generateSignature(hash);
return sig;
}
catch (Exception e)
{
throw new SignatureException(e.toString());
}
}
protected boolean engineVerify(byte[] sigBytes)
throws SignatureException
{
byte[] hash = new byte[digest.getDigestSize()];
digest.doFinal(hash, 0);
return signer.verifySignature(hash, sigBytes);
}
protected void engineSetParameter(AlgorithmParameterSpec params)
{
// TODO
throw new UnsupportedOperationException("engineSetParameter unsupported");
}
/**
* @deprecated replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
*/
protected void engineSetParameter(String param, Object value)
{
throw new UnsupportedOperationException("engineSetParameter unsupported");
}
/**
* @deprecated
*/
protected Object engineGetParameter(String param)
{
throw new UnsupportedOperationException("engineSetParameter unsupported");
}
static public class withSha512
extends SignatureSpi
{
public withSha512()
{
super(new SHA512Digest(), NISTObjectIdentifiers.id_sha512_256, new SPHINCS256Signer(new SHA512tDigest(256), new SHA512Digest()));
}
}
static public class withSha3_512
extends SignatureSpi
{
public withSha3_512()
{
super(new SHA3Digest(512), NISTObjectIdentifiers.id_sha3_256, new SPHINCS256Signer(new SHA3Digest(256), new SHA3Digest(512)));
}
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy