com.google.crypto.tink.signature

Class EcdsaSignKeyManager

java.lang.Object

com.google.crypto.tink.signature.EcdsaSignKeyManager

public final class EcdsaSignKeyManager
extends Object

This key manager generates new EcdsaPrivateKey keys and produces new instances of EcdsaSignJce.

Method Summary

Modifier and Type	Method and Description
static KeyTemplate	ecdsaP256Template()
static KeyTemplate	rawEcdsaP256Template()
static void	registerPair(boolean newKeyAllowed) Registers the EcdsaSignKeyManager and the EcdsaVerifyKeyManager with the registry, so that the the Ecdsa-Keys can be used with Tink.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

registerPair

public static void registerPair(boolean newKeyAllowed)
                         throws GeneralSecurityException

Registers the EcdsaSignKeyManager and the EcdsaVerifyKeyManager with the registry, so that the the Ecdsa-Keys can be used with Tink.

Throws:

GeneralSecurityException

ecdsaP256Template

public static final KeyTemplate ecdsaP256Template()

Returns:

A KeyTemplate that generates new instances of ECDSA keys with the following parameters:

• Hash function: SHA256
• Curve: NIST P-256
• Signature encoding: DER (this is the encoding that Java uses).
• Prefix type: KeyTemplate.OutputPrefixType#TINK.

rawEcdsaP256Template

public static final KeyTemplate rawEcdsaP256Template()

Returns:

A KeyTemplate that generates new instances of ECDSA keys with the following parameters:

• Hash function: SHA256
• Curve: NIST P-256
• Signature encoding: DER (this is the encoding that Java uses).
• Prefix type: RAW (no prefix).

Keys generated from this template create raw signatures of exactly 64 bytes. It is compatible with JWS and most other libraries.