org.bouncycastle.tls.SignatureScheme Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of bctls-jdk14 Show documentation
Show all versions of bctls-jdk14 Show documentation
The Bouncy Castle Java APIs for TLS and DTLS.
package org.bouncycastle.tls;
import org.bouncycastle.tls.crypto.CryptoHashAlgorithm;
import org.bouncycastle.tls.crypto.TlsCryptoUtils;
public class SignatureScheme
{
/*
* RFC 8446
*/
public static final int rsa_pkcs1_sha1 = 0x0201;
public static final int ecdsa_sha1 = 0x0203;
public static final int rsa_pkcs1_sha256 = 0x0401;
public static final int rsa_pkcs1_sha384 = 0x0501;
public static final int rsa_pkcs1_sha512 = 0x0601;
public static final int ecdsa_secp256r1_sha256 = 0x0403;
public static final int ecdsa_secp384r1_sha384 = 0x0503;
public static final int ecdsa_secp521r1_sha512 = 0x0603;
public static final int rsa_pss_rsae_sha256 = 0x0804;
public static final int rsa_pss_rsae_sha384 = 0x0805;
public static final int rsa_pss_rsae_sha512 = 0x0806;
public static final int ed25519 = 0x0807;
public static final int ed448 = 0x0808;
public static final int rsa_pss_pss_sha256 = 0x0809;
public static final int rsa_pss_pss_sha384 = 0x080A;
public static final int rsa_pss_pss_sha512 = 0x080B;
/*
* RFC 8734
*/
public static final int ecdsa_brainpoolP256r1tls13_sha256 = 0x081A;
public static final int ecdsa_brainpoolP384r1tls13_sha384 = 0x081B;
public static final int ecdsa_brainpoolP512r1tls13_sha512 = 0x081C;
/*
* RFC 8998
*/
public static final int sm2sig_sm3 = 0x0708;
/*
* RFC 8446 reserved for private use (0xFE00..0xFFFF)
*/
public static int from(SignatureAndHashAlgorithm sigAndHashAlg)
{
if (null == sigAndHashAlg)
{
throw new NullPointerException();
}
return from(sigAndHashAlg.getHash(), sigAndHashAlg.getSignature());
}
public static int from(short hashAlgorithm, short signatureAlgorithm)
{
return ((hashAlgorithm & 0xFF) << 8) | (signatureAlgorithm & 0xFF);
}
public static int getCryptoHashAlgorithm(int signatureScheme)
{
switch (signatureScheme)
{
case ed25519:
case ed448:
return -1;
case ecdsa_brainpoolP256r1tls13_sha256:
case rsa_pss_pss_sha256:
case rsa_pss_rsae_sha256:
return CryptoHashAlgorithm.sha256;
case ecdsa_brainpoolP384r1tls13_sha384:
case rsa_pss_pss_sha384:
case rsa_pss_rsae_sha384:
return CryptoHashAlgorithm.sha384;
case ecdsa_brainpoolP512r1tls13_sha512:
case rsa_pss_pss_sha512:
case rsa_pss_rsae_sha512:
return CryptoHashAlgorithm.sha512;
case sm2sig_sm3:
return CryptoHashAlgorithm.sm3;
default:
{
short hashAlgorithm = getHashAlgorithm(signatureScheme);
if (HashAlgorithm.Intrinsic == hashAlgorithm || !HashAlgorithm.isRecognized(hashAlgorithm))
{
return -1;
}
return TlsCryptoUtils.getHash(hashAlgorithm);
}
}
}
public static String getName(int signatureScheme)
{
switch (signatureScheme)
{
case rsa_pkcs1_sha1:
return "rsa_pkcs1_sha1";
case ecdsa_sha1:
return "ecdsa_sha1";
case rsa_pkcs1_sha256:
return "rsa_pkcs1_sha256";
case rsa_pkcs1_sha384:
return "rsa_pkcs1_sha384";
case rsa_pkcs1_sha512:
return "rsa_pkcs1_sha512";
case ecdsa_secp256r1_sha256:
return "ecdsa_secp256r1_sha256";
case ecdsa_secp384r1_sha384:
return "ecdsa_secp384r1_sha384";
case ecdsa_secp521r1_sha512:
return "ecdsa_secp521r1_sha512";
case rsa_pss_rsae_sha256:
return "rsa_pss_rsae_sha256";
case rsa_pss_rsae_sha384:
return "rsa_pss_rsae_sha384";
case rsa_pss_rsae_sha512:
return "rsa_pss_rsae_sha512";
case ed25519:
return "ed25519";
case ed448:
return "ed448";
case rsa_pss_pss_sha256:
return "rsa_pss_pss_sha256";
case rsa_pss_pss_sha384:
return "rsa_pss_pss_sha384";
case rsa_pss_pss_sha512:
return "rsa_pss_pss_sha512";
case ecdsa_brainpoolP256r1tls13_sha256:
return "ecdsa_brainpoolP256r1tls13_sha256";
case ecdsa_brainpoolP384r1tls13_sha384:
return "ecdsa_brainpoolP384r1tls13_sha384";
case ecdsa_brainpoolP512r1tls13_sha512:
return "ecdsa_brainpoolP512r1tls13_sha512";
case sm2sig_sm3:
return "sm2sig_sm3";
default:
return "UNKNOWN";
}
}
/**
* For TLS 1.3+ usage, some signature schemes are constrained to use a particular
* ({@link NamedGroup}. Not relevant for TLS 1.2 and below.
*/
public static int getNamedGroup(int signatureScheme)
{
switch (signatureScheme)
{
case ecdsa_brainpoolP256r1tls13_sha256:
return NamedGroup.brainpoolP256r1tls13;
case ecdsa_brainpoolP384r1tls13_sha384:
return NamedGroup.brainpoolP384r1tls13;
case ecdsa_brainpoolP512r1tls13_sha512:
return NamedGroup.brainpoolP512r1tls13;
case ecdsa_secp256r1_sha256:
return NamedGroup.secp256r1;
case ecdsa_secp384r1_sha384:
return NamedGroup.secp384r1;
case ecdsa_secp521r1_sha512:
return NamedGroup.secp521r1;
case sm2sig_sm3:
return NamedGroup.curveSM2;
default:
return -1;
}
}
/** @deprecated Use {@link #getCryptoHashAlgorithm(int) instead. */
public static int getRSAPSSCryptoHashAlgorithm(int signatureScheme)
{
switch (signatureScheme)
{
case rsa_pss_pss_sha256:
case rsa_pss_rsae_sha256:
return CryptoHashAlgorithm.sha256;
case rsa_pss_pss_sha384:
case rsa_pss_rsae_sha384:
return CryptoHashAlgorithm.sha384;
case rsa_pss_pss_sha512:
case rsa_pss_rsae_sha512:
return CryptoHashAlgorithm.sha512;
default:
return -1;
}
}
public static short getHashAlgorithm(int signatureScheme)
{
return (short)((signatureScheme >>> 8) & 0xFF);
}
public static short getSignatureAlgorithm(int signatureScheme)
{
// TODO[RFC 8998] sm2sig_sm3
return (short)(signatureScheme & 0xFF);
}
public static SignatureAndHashAlgorithm getSignatureAndHashAlgorithm(int signatureScheme)
{
return SignatureAndHashAlgorithm.getInstance(
getHashAlgorithm(signatureScheme),
getSignatureAlgorithm(signatureScheme));
}
public static String getText(int signatureScheme)
{
return getName(signatureScheme) + "(0x" + Integer.toHexString(signatureScheme) + ")";
}
public static boolean isPrivate(int signatureScheme)
{
return (signatureScheme >>> 9) == 0xFE;
}
public static boolean isECDSA(int signatureScheme)
{
switch (signatureScheme)
{
case ecdsa_brainpoolP256r1tls13_sha256:
case ecdsa_brainpoolP384r1tls13_sha384:
case ecdsa_brainpoolP512r1tls13_sha512:
return true;
default:
return SignatureAlgorithm.ecdsa == getSignatureAlgorithm(signatureScheme);
}
}
public static boolean isRSAPSS(int signatureScheme)
{
switch (signatureScheme)
{
case rsa_pss_rsae_sha256:
case rsa_pss_rsae_sha384:
case rsa_pss_rsae_sha512:
case rsa_pss_pss_sha256:
case rsa_pss_pss_sha384:
case rsa_pss_pss_sha512:
return true;
default:
return false;
}
}
}