org.openeuler.sun.security.ssl

类 HKDF

java.lang.Object

org.openeuler.sun.security.ssl.HKDF

final class HKDF
extends Object

An implementation of the HKDF key derivation algorithm outlined in RFC 5869, specific to the needs of TLS 1.3 key derivation in JSSE. This is not a general purpose HKDF implementation and is suited only to single-key output derivations. HKDF objects are created by specifying a message digest algorithm. That digest algorithm will be used by the HMAC function as part of the HKDF derivation process.

字段概要

字段

限定符和类型	字段和说明
private String	hmacAlg
private int	hmacLen
private Mac	hmacObj

构造器概要

构造器

构造器和说明
HKDF(String hashAlg) Create an HDKF object, specifying the underlying message digest algorithm.

方法概要

限定符和类型	方法和说明
(专用程序包) SecretKey	expand(SecretKey pseudoRandKey, byte[] info, int outLen, String keyAlg) Perform the HKDF-Expand derivation for a single-key output.
(专用程序包) SecretKey	extract(byte[] salt, SecretKey inputKey, String keyAlg) Perform the HMAC-Extract derivation.
(专用程序包) SecretKey	extract(SecretKey salt, SecretKey inputKey, String keyAlg) Perform the HMAC-Extract derivation.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

hmacAlg

private final String hmacAlg

hmacObj

private final Mac hmacObj

hmacLen

private final int hmacLen

构造器详细资料

HKDF

HKDF(String hashAlg)
throws NoSuchAlgorithmException

Create an HDKF object, specifying the underlying message digest algorithm.

参数:

hashAlg - a standard name corresponding to a supported message digest algorithm.

抛出:

NoSuchAlgorithmException - if that message digest algorithm does not have an HMAC variant supported on any available provider.

方法详细资料

extract

SecretKey extract(SecretKey salt,
                  SecretKey inputKey,
                  String keyAlg)
           throws InvalidKeyException

Perform the HMAC-Extract derivation.

参数:

salt - a salt value, implemented as a SecretKey. A null value is allowed, which will internally use an array of zero bytes the same size as the underlying hash output length.

inputKey - the input keying material provided as a SecretKey.

keyAlg - the algorithm name assigned to the resulting SecretKey object.

返回:

a SecretKey that is the result of the HKDF extract operation.

抛出:

InvalidKeyException - if the salt parameter cannot be used to initialize the underlying HMAC.

extract

SecretKey extract(byte[] salt,
                  SecretKey inputKey,
                  String keyAlg)
           throws InvalidKeyException

Perform the HMAC-Extract derivation.

参数:

salt - a salt value as cleartext bytes. A null value is allowed, which will internally use an array of zero bytes the same size as the underlying hash output length.

inputKey - the input keying material provided as a SecretKey.

keyAlg - the algorithm name assigned to the resulting SecretKey object.

返回:

a SecretKey that is the result of the HKDF extract operation.

抛出:

InvalidKeyException - if the salt parameter cannot be used to initialize the underlying HMAC.

expand

SecretKey expand(SecretKey pseudoRandKey,
                 byte[] info,
                 int outLen,
                 String keyAlg)
          throws InvalidKeyException

Perform the HKDF-Expand derivation for a single-key output.

参数:

pseudoRandKey - the pseudo random key (PRK).

info - optional context-specific info. A null value is allowed in which case a zero-length byte array will be used.

outLen - the length of the resulting SecretKey

keyAlg - the algorithm name applied to the resulting SecretKey

返回:

the resulting key derivation as a SecretKey object

抛出:

InvalidKeyException - if the underlying HMAC operation cannot be initialized using the provided pseudoRandKey object.