Package org.apache.kerby.kerberos.kerb.crypto.dh

package org.apache.kerby.kerberos.kerb.crypto.dh
  • Classes
    Class
    Description
    DhGroup
    "When using the Diffie-Hellman key agreement method, implementations MUST support Oakley 1024-bit Modular Exponential (MODP) well-known group 2 [RFC2412] and Oakley 2048-bit MODP well-known group 14 [RFC3526] and SHOULD support Oakley 4096-bit MODP well-known group 16 [RFC3526]."
    DiffieHellmanClient
    The client-side of Diffie-Hellman key agreement for Kerberos PKINIT.
    DiffieHellmanServer
    The server-side of Diffie-Hellman key agreement for Kerberos PKINIT.
    OctetString2Key
    From RFC 4556: Define the function octetstring2key() as follows: octetstring2key(x) == random-to-key(K-truncate( SHA1(0x00 | x) | SHA1(0x01 | x) | SHA1(0x02 | x) | ... )) where x is an octet string; | is the concatenation operator; 0x00, 0x01, 0x02, etc. are each represented as a single octet; random- to-key() is an operation that generates a protocol key from a bitstring of length K; and K-truncate truncates its input to the first K bits.