APIdia Launch Partner
Top Description Fields Constructors Methods
javax.crypto

public Class SecretKeyFactory

extends Object
Class Inheritance
Imports
java.util.*, java.security.*, .Provider.Service, java.security.spec.*, sun.security.jca.*, .GetInstance.Instance

This class represents a factory for secret keys.

Key factories are used to convert keys (opaque cryptographic keys of type Key) into key specifications (transparent representations of the underlying key material), and vice versa. Secret key factories operate only on secret (symmetric) keys.

Key factories are bidirectional, i.e., they allow to build an opaque key object from a given key specification (key material), or to retrieve the underlying key material of a key object in a suitable format.

Application developers should refer to their provider's documentation to find out which key specifications are supported by the generateSecret and getKeySpec methods. For example, the DESede (Triple DES) secret key factory supplied by the "SunJCE" provider supports DESedeKeySpec as a transparent representation of Triple DES keys.

Every implementation of the Java platform is required to support the following standard SecretKeyFactory algorithms:

These algorithms are described in the SecretKeyFactory section of the Java Security Standard Algorithm Names Specification. Consult the release documentation for your implementation to see if any other algorithms are supported.
Author
Jan Luehe
Since
1.4
External Specification
Java Security Standard Algorithm Names
See Also
SecretKey, javax.crypto.spec.DESedeKeySpec, javax.crypto.spec.PBEKeySpec

Field Summary

Modifier and TypeField and Description
private final String
private final Object
private Provider
private Iterator<Provider.Service>
private volatile SecretKeyFactorySpi

Constructor Summary

AccessConstructor and Description
protected
SecretKeyFactory(SecretKeyFactorySpi
the delegate
keyFacSpi
,
Provider
the provider
provider
,
String
the secret key algorithm
algorithm
)

Creates a SecretKeyFactory object.

private

Method Summary

Modifier and TypeMethod and Description
public final SecretKey

Returns:

the secret key
generateSecret
(KeySpec
the specification (key material) of the secret key
keySpec
)

Generates a SecretKey object from the provided key specification (key material).

public final String

Returns:

the algorithm name of this SecretKeyFactory object.
getAlgorithm
()

Returns the algorithm name of this SecretKeyFactory object.

public static final SecretKeyFactory

Returns:

the new SecretKeyFactory object
getInstance
(String
the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.
algorithm
)

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

public static final SecretKeyFactory

Returns:

the new SecretKeyFactory object
getInstance
(String
the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.
algorithm
,
String
the name of the provider.
provider
)

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

public static final SecretKeyFactory

Returns:

the new SecretKeyFactory object
getInstance
(String
the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.
algorithm
,
Provider
the provider.
provider
)

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

public final KeySpec

Returns:

the underlying key specification (key material) in the requested format
getKeySpec
(SecretKey
the key
key
,
Class<?>
the requested format in which the key material shall be returned
keySpec
)

Returns a specification (key material) of the given key object in the requested format.

public final Provider

Returns:

the provider of this SecretKeyFactory object
getProvider
()

Returns the provider of this SecretKeyFactory object.

private SecretKeyFactorySpi
nextSpi(SecretKeyFactorySpi oldSpi)

Update the active spi of this class and return the next implementation for failover.

public final SecretKey

Returns:

the translated key
translateKey
(SecretKey
the key whose provider is unknown or untrusted
key
)

Translates a key object, whose provider may be unknown or potentially untrusted, into a corresponding key object of this secret key factory.

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

algorithmback to summary
private final String algorithm
lockback to summary
private final Object lock
providerback to summary
private Provider provider
serviceIteratorback to summary
private Iterator<Provider.Service> serviceIterator
spiback to summary
private volatile SecretKeyFactorySpi spi

Constructor Detail

SecretKeyFactoryback to summary
protected SecretKeyFactory(SecretKeyFactorySpi keyFacSpi, Provider provider, String algorithm)

Creates a SecretKeyFactory object.

Parameters
keyFacSpi:SecretKeyFactorySpi

the delegate

provider:Provider

the provider

algorithm:String

the secret key algorithm

SecretKeyFactoryback to summary
private SecretKeyFactory(String algorithm) throws NoSuchAlgorithmException

Method Detail

generateSecretback to summary
public final SecretKey generateSecret(KeySpec keySpec) throws InvalidKeySpecException

Generates a SecretKey object from the provided key specification (key material).

Parameters
keySpec:KeySpec

the specification (key material) of the secret key

Returns:SecretKey

the secret key

Exceptions
InvalidKeySpecException:
if the given key specification is inappropriate for this secret key factory to produce a secret key.
getAlgorithmback to summary
public final String getAlgorithm()

Returns the algorithm name of this SecretKeyFactory object.

This is the same name that was specified in one of the getInstance calls that created this SecretKeyFactory object.

Returns:String

the algorithm name of this SecretKeyFactory object.

getInstanceback to summary
public static final SecretKeyFactory getInstance(String algorithm) throws NoSuchAlgorithmException

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

This method traverses the list of registered security providers, starting with the most preferred provider. A new SecretKeyFactory object encapsulating the SecretKeyFactorySpi implementation from the first provider that supports the specified algorithm is returned.

Note that the list of registered providers may be retrieved via the Security.getProviders() method.

Implementation Note

The JDK Reference Implementation additionally uses the jdk.security.provider.preferred Security property to determine the preferred provider order for the specified algorithm. This may be different from the order of providers returned by Security.getProviders().

Parameters
algorithm:String

the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.

Returns:SecretKeyFactory

the new SecretKeyFactory object

Exceptions
NoSuchAlgorithmException:
if no Provider supports a SecretKeyFactorySpi implementation for the specified algorithm
NullPointerException:
if algorithm is null
External Specification
Java Security Standard Algorithm Names
See Also
java.security.Provider
getInstanceback to summary
public static final SecretKeyFactory getInstance(String algorithm, String provider) throws NoSuchAlgorithmException, NoSuchProviderException

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

A new SecretKeyFactory object encapsulating the SecretKeyFactorySpi implementation from the specified provider is returned. The specified provider must be registered in the security provider list.

Note that the list of registered providers may be retrieved via the Security.getProviders() method.

Parameters
algorithm:String

the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.

provider:String

the name of the provider.

Returns:SecretKeyFactory

the new SecretKeyFactory object

Exceptions
NoSuchAlgorithmException:
if a SecretKeyFactorySpi implementation for the specified algorithm is not available from the specified provider
NoSuchProviderException:
if the specified provider is not registered in the security provider list
IllegalArgumentException:
if the provider is null or empty
NullPointerException:
if algorithm is null
External Specification
Java Security Standard Algorithm Names
See Also
java.security.Provider
getInstanceback to summary
public static final SecretKeyFactory getInstance(String algorithm, Provider provider) throws NoSuchAlgorithmException

Returns a SecretKeyFactory object that converts secret keys of the specified algorithm.

A new SecretKeyFactory object encapsulating the SecretKeyFactorySpi implementation from the specified provider object is returned. Note that the specified provider object does not have to be registered in the provider list.

Parameters
algorithm:String

the standard name of the requested secret key algorithm. See the SecretKeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.

provider:Provider

the provider.

Returns:SecretKeyFactory

the new SecretKeyFactory object

Exceptions
NoSuchAlgorithmException:
if a SecretKeyFactorySpi implementation for the specified algorithm is not available from the specified Provider object
IllegalArgumentException:
if the provider is null
NullPointerException:
if algorithm is null
External Specification
Java Security Standard Algorithm Names
See Also
java.security.Provider
getKeySpecback to summary
public final KeySpec getKeySpec(SecretKey key, Class<?> keySpec) throws InvalidKeySpecException

Returns a specification (key material) of the given key object in the requested format.

Parameters
key:SecretKey

the key

keySpec:Class<?>

the requested format in which the key material shall be returned

Returns:KeySpec

the underlying key specification (key material) in the requested format

Exceptions
InvalidKeySpecException:
if the requested key specification is inappropriate for the given key (e.g., the algorithms associated with key and keySpec do not match, or key references a key on a cryptographic hardware device whereas keySpec is the specification of a software-based key), or the given key cannot be dealt with (e.g., the given key has an algorithm or format not supported by this secret key factory).
getProviderback to summary
public final Provider getProvider()

Returns the provider of this SecretKeyFactory object.

Returns:Provider

the provider of this SecretKeyFactory object

nextSpiback to summary
private SecretKeyFactorySpi nextSpi(SecretKeyFactorySpi oldSpi)

Update the active spi of this class and return the next implementation for failover. If no more implementations are available, this method returns null. However, the active spi of this class is never set to null.

translateKeyback to summary
public final SecretKey translateKey(SecretKey key) throws InvalidKeyException

Translates a key object, whose provider may be unknown or potentially untrusted, into a corresponding key object of this secret key factory.

Parameters
key:SecretKey

the key whose provider is unknown or untrusted

Returns:SecretKey

the translated key

Exceptions
InvalidKeyException:
if the given key cannot be processed by this secret key factory.