public static class TlsPrfGenerator.V12 extends TlsPrfGenerator
TLS 1.2 uses a different hash algorithm than 1.0/1.1 for the PRF calculations. As of 2010, there is no PKCS11-level support for TLS 1.2 PRF calculations, and no known OS's have an internal variant we could use. Therefore for TLS 1.2, we are updating JSSE to request a different provider algorithm: "SunTls12Prf". If we reused the name "SunTlsPrf", the PKCS11 provider would need be updated to fail correctly when presented with the wrong version number (via Provider.Service.supportsParameters()), and add the appropriate supportsParamters() checks into KeyGenerators (not currently there).
TlsPrfGenerator.V10, TlsPrfGenerator.V12LABEL_CLIENT_WRITE_KEY, LABEL_EXTENDED_MASTER_SECRET, LABEL_IV_BLOCK, LABEL_KEY_EXPANSION, LABEL_MASTER_SECRET, LABEL_SERVER_WRITE_KEY, SSL3_CONST| 构造器和说明 |
|---|
V12() |
| 限定符和类型 | 方法和说明 |
|---|---|
protected SecretKey |
engineGenerateKey() |
concat, doTLS10PRF, doTLS10PRF, doTLS12PRF, doTLS12PRF, engineGenerateKey0, engineInit, engineInit, engineInit, genPadprotected SecretKey engineGenerateKey()
engineGenerateKey 在类中 KeyGeneratorSpiCopyright © 2023. All rights reserved.