com.entrust.toolkit.security.crypto.dsa

Class DsaWithSha256Signature

java.lang.Object

java.security.SignatureSpi

java.security.Signature

com.entrust.toolkit.security.crypto.signature.DigitalSignature

com.entrust.toolkit.security.crypto.dsa.DsaSignature

com.entrust.toolkit.security.crypto.dsa.DsaWithSha256Signature

All Implemented Interfaces:

ExtendedSignature

public final class DsaWithSha256Signature
extends DsaSignature

The DSA signature algorithm with SHA-256 as the underlying hash function.

This implementation calculates the hash internally, thus it is the message itself (being signed or verified) that is passed in through the update() API.

An instance of this algorithm can be obtained using the Java Cryptography Architecture (JCA), by requesting a 'SHA256withDSA' digital signature from the Entrust cryptographic service provider. This can be done using the following call:

Signature.getInstance("SHA256withDSA", "Entrust");

Warning:

The standard for DSA, FIPS186 (-3 and -4), specifies subgroup size 224 or 256 for group 2048, and 256 for 3072. It (indirectly) recommends the hashsize equal the subgroup size. The FIPS186-5 recommended that this algorithm SHOULD no longer be used for digital signature generation, only for digital signature verification.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

9.0

See Also:

DsaSignature

Field Summary

Fields inherited from class java.security.Signature

SIGN, state, UNINITIALIZED, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Constructor Summary

Constructors

Constructor and Description
DsaWithSha256Signature() The constructor; creates a new instance of the SHA256withDSA digital signature algorithm.

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.dsa.DsaSignature

getDigitalSignatureImpl

Methods inherited from class com.entrust.toolkit.security.crypto.signature.DigitalSignature

assertParametersValid, engineGetParameter, engineGetParameters, engineInitSign, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineSign, engineSign, engineUpdate, engineUpdate, engineVerify, engineVerify, generateDefaultParameters, getDigest, getPrng, toAlgorithmParameters

Methods inherited from class java.security.Signature

clone, getAlgorithm, getInstance, getInstance, getInstance, getParameter, getParameters, getProvider, initSign, initSign, initVerify, initVerify, setParameter, setParameter, sign, sign, toString, update, update, update, update, verify, verify

Methods inherited from class java.security.SignatureSpi

engineUpdate

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

DsaWithSha256Signature

public DsaWithSha256Signature()

The constructor; creates a new instance of the SHA256withDSA digital signature algorithm.

Applications should not use this constructor, instead the signature algorithm should be requested from the appropriate JCA/JCE cryptographic service provider as follows: Signature.getInstance("SHA256withDSA", "Entrust").

FIPS 140-2:

FIPS Service: Modify Object

This API is part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; use of this API causes the caller to assume the FIPS 140-2 user role and accesses the following FIPS 140-2 logical interfaces:

• control input interface (API call)
• status output interface (exceptions)