io.jsonwebtoken.impl.crypto

Class EllipticCurveProvider

java.lang.Object

io.jsonwebtoken.impl.crypto.EllipticCurveProvider

Direct Known Subclasses:

EllipticCurveSignatureValidator, EllipticCurveSigner

public abstract class EllipticCurveProvider
extends Object

ElliptiCurve crypto provider.

Since:

0.5

Field Summary

Fields

Modifier and Type	Field and Description
protected SignatureAlgorithm	alg
static SecureRandom	DEFAULT_SECURE_RANDOM JJWT's default SecureRandom number generator.
protected Key	key

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	EllipticCurveProvider(SignatureAlgorithm alg, Key key)

Method Summary

Modifier and Type	Method and Description
protected Signature	createSignatureInstance()
static KeyPair	generateKeyPair() Generates a new secure-random key pair assuming strength enough for the SignatureAlgorithm.ES512 algorithm.
static KeyPair	generateKeyPair(SignatureAlgorithm alg) Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using JJWT's default SecureRandom instance.
static KeyPair	generateKeyPair(SignatureAlgorithm alg, SecureRandom random) Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator.
static KeyPair	generateKeyPair(String jcaAlgorithmName, String jcaProviderName, SignatureAlgorithm alg, SecureRandom random) Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator via the specified JCA provider and algorithm name.
protected Signature	getSignatureInstance()
protected boolean	isBouncyCastleAvailable()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SECURE_RANDOM

public static final SecureRandom DEFAULT_SECURE_RANDOM

JJWT's default SecureRandom number generator. This RNG is initialized using the JVM default as follows:

 static {
     DEFAULT_SECURE_RANDOM = new SecureRandom();
     DEFAULT_SECURE_RANDOM.nextBytes(new byte[64]);
 }
 

nextBytes is called to force the RNG to initialize itself if not already initialized. The byte array is not used and discarded immediately for garbage collection.

alg

protected final SignatureAlgorithm alg

key

protected final Key key

Constructor Detail

EllipticCurveProvider

protected EllipticCurveProvider(SignatureAlgorithm alg,
                                Key key)

Method Detail

generateKeyPair

public static KeyPair generateKeyPair()

Generates a new secure-random key pair assuming strength enough for the SignatureAlgorithm.ES512 algorithm. This is a convenience method that immediately delegates to generateKeyPair(SignatureAlgorithm) using SignatureAlgorithm.ES512 as the method argument.

Returns:

a new secure-randomly-generated key pair assuming strength enough for the SignatureAlgorithm.ES512 algorithm.

See Also:

generateKeyPair(SignatureAlgorithm), generateKeyPair(SignatureAlgorithm, SecureRandom), generateKeyPair(String, String, SignatureAlgorithm, SecureRandom)

generateKeyPair

public static KeyPair generateKeyPair(SignatureAlgorithm alg)

Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using JJWT's default SecureRandom instance. This is a convenience method that immediately delegates to generateKeyPair(SignatureAlgorithm, SecureRandom).

Parameters:

alg - the algorithm indicating strength, must be one of ES256, ES384 or ES512

Returns:

a new secure-randomly generated key pair of sufficient strength for the specified SignatureAlgorithm (must be one of ES256, ES384 or ES512) using JJWT's default SecureRandom instance.

See Also:

generateKeyPair(), generateKeyPair(SignatureAlgorithm, SecureRandom), generateKeyPair(String, String, SignatureAlgorithm, SecureRandom)

generateKeyPair

public static KeyPair generateKeyPair(SignatureAlgorithm alg,
                                      SecureRandom random)

Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator. This is a convenience method that immediately delegates to generateKeyPair(String, String, SignatureAlgorithm, SecureRandom) using "ECDSA" as the jcaAlgorithmName and "BC" as the jcaProviderName since EllipticCurve requires the use of an external JCA provider (BC stands for BouncyCastle. This will work as expected as long as the BouncyCastle dependency is in the runtime classpath.

Parameters:

alg - alg the algorithm indicating strength, must be one of ES256, ES384 or ES512

random - the SecureRandom generator to use during key generation.

Returns:

a new secure-randomly generated key pair of sufficient strength for the specified SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator.

See Also:

generateKeyPair(), generateKeyPair(SignatureAlgorithm), generateKeyPair(String, String, SignatureAlgorithm, SecureRandom)

generateKeyPair

public static KeyPair generateKeyPair(String jcaAlgorithmName,
                                      String jcaProviderName,
                                      SignatureAlgorithm alg,
                                      SecureRandom random)

Generates a new secure-random key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator via the specified JCA provider and algorithm name.

Parameters:

jcaAlgorithmName - the JCA name of the algorithm to use for key pair generation, for example, ECDSA.

jcaProviderName - the JCA provider name of the algorithm implementation, for example BC for BouncyCastle.

alg - alg the algorithm indicating strength, must be one of ES256, ES384 or ES512

random - the SecureRandom generator to use during key generation.

Returns:

a new secure-randomly generated key pair of sufficient strength for the specified Elliptic Curve SignatureAlgorithm (must be one of ES256, ES384 or ES512) using the specified SecureRandom random number generator via the specified JCA provider and algorithm name.

See Also:

generateKeyPair(), generateKeyPair(SignatureAlgorithm), generateKeyPair(SignatureAlgorithm, SecureRandom)

createSignatureInstance

protected Signature createSignatureInstance()

getSignatureInstance

protected Signature getSignatureInstance()
                                  throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

isBouncyCastleAvailable

protected boolean isBouncyCastleAvailable()