APIdia Launch Partner

Top Description Fields Constructors Methods

sun.security.ssl

public Class KAKeyDerivation

Class Inheritance

extends Object
implements SSLKeyDerivation

java.lang.Object
sun.security.ssl.KAKeyDerivation

All Implemented Interfaces

sun.security.ssl.SSLKeyDerivation

Imports

javax.crypto.DecapsulateException, .KDF, .KEM, .KeyAgreement, .SecretKey, javax.crypto.spec.HKDFParameterSpec, javax.net.ssl.SSLHandshakeException, java.io.IOException, java.security.GeneralSecurityException, .InvalidKeyException, .KeyFactory, .PrivateKey, .Provider, .PublicKey, .SecureRandom, java.security.spec.X509EncodedKeySpec, sun.security.util.KeyUtil

A common class for creating various KeyDerivation types.

Field Summary

Modifier and Type	Field and Description
private final String	algorithmName
private final HandshakeContext	context
private final byte[]	keyshare
private final PrivateKey	localPrivateKey
private final PublicKey	peerPublicKey
private final Provider	provider
private static final String	t13KeyDerivationAlgorithm

Constructor Summary

Access	Constructor and Description
pack-priv	KAKeyDerivation(String algorithmName, HandshakeContext context, PrivateKey localPrivateKey, PublicKey peerPublicKey)
pack-priv	KAKeyDerivation(String algorithmName, NamedGroup namedGroup, HandshakeContext context, PrivateKey localPrivateKey, PublicKey peerPublicKey, byte[] keyshare)

Method Summary

Modifier and Type	Method and Description
private SecretKey	deriveHandshakeSecret(String label, SecretKey sharedSecret)
public SecretKey	deriveKey(String type) Implements sun.security.ssl.SSLKeyDerivation.deriveKey.
pack-priv KEM.Encapsulated	encapsulate(String algorithm, SecureRandom random) This method is called by the server to perform KEM encapsulation.
private SecretKey	t12DeriveKey() Handle the TLSv1-1.2 objects, which don't use the HKDF algorithms.
private SecretKey	t13DeriveKey(String type) Handle the TLSv1.3 objects, which use the HKDF algorithms.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

algorithmName	back to summary
private final String algorithmName

context	back to summary
private final HandshakeContext context

keyshare	back to summary
private final byte[] keyshare

localPrivateKey	back to summary
private final PrivateKey localPrivateKey

peerPublicKey	back to summary
private final PublicKey peerPublicKey

provider	back to summary
private final Provider provider

t13KeyDerivationAlgorithm	back to summary
private static final String t13KeyDerivationAlgorithm

Constructor Detail

KAKeyDerivation	back to summary
pack-priv KAKeyDerivation(String algorithmName, HandshakeContext context, PrivateKey localPrivateKey, PublicKey peerPublicKey)

KAKeyDerivation	back to summary
pack-priv KAKeyDerivation(String algorithmName, NamedGroup namedGroup, HandshakeContext context, PrivateKey localPrivateKey, PublicKey peerPublicKey, byte[] keyshare)

Method Detail

deriveHandshakeSecret	back to summary
private SecretKey deriveHandshakeSecret(String label, SecretKey sharedSecret) throws GeneralSecurityException, IOException

deriveKey

back to summary

public SecretKey deriveKey(String type) throws IOException

Implements sun.security.ssl.SSLKeyDerivation.deriveKey.

Annotations

@Override

encapsulate	back to summary
pack-priv KEM.Encapsulated encapsulate(String algorithm, SecureRandom random) throws IOException This method is called by the server to perform KEM encapsulation. It uses the client's public key (sent by the client as a keyshare) to encapsulate a shared secret and returns the encapsulated message. Package-private, used from KeyShareExtension.SHKeyShareProducer:: produce().

t12DeriveKey	back to summary
private SecretKey t12DeriveKey() throws IOException Handle the TLSv1-1.2 objects, which don't use the HKDF algorithms.

t13DeriveKey	back to summary
private SecretKey t13DeriveKey(String type) throws IOException Handle the TLSv1.3 objects, which use the HKDF algorithms.