com.entrust.toolkit.security.crypto.ec

Class EcdsaWithSha1Signature

java.lang.Object

java.security.SignatureSpi

java.security.Signature

com.entrust.toolkit.security.crypto.signature.DigitalSignature

com.entrust.toolkit.security.crypto.ec.EcdsaSignature

com.entrust.toolkit.security.crypto.ec.EcdsaWithSha1Signature

All Implemented Interfaces:

ExtendedSignature

public final class EcdsaWithSha1Signature
extends EcdsaSignature

The ECDSA signature algorithm with SHA-1 as the underlying hash function.

This implementation calculates the hash internally, thus it is the message itself (being signed or verified) that is passed in through the update() API.

An instance of this algorithm can be obtained using the Java Cryptography Architecture (JCA), by requesting a 'SHA1withECDSA' digital signature from the Entrust cryptographic service provider. This can be done using the following call:

Signature.getInstance("SHA1withECDSA", "Entrust");

Warning:

SHA-1 was designed to provide 80-bits of security, but attacks have been discovered that reduce the security even further. Additionally, as of January 1, 2011, NIST recommends that at least 112-bits of security be used when generating digital signatures. Thus, this algorithm SHOULD no longer be used for digital signature generation, only for digital signature verification.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

7.2 SP2

See Also:

EcdsaSignature

Field Summary

Fields inherited from class java.security.Signature

SIGN, state, UNINITIALIZED, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Constructor Summary

Constructors

Constructor and Description
EcdsaWithSha1Signature() The constructor; creates a new instance of the SHA1withECDSA digital signature algorithm.

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.ec.EcdsaSignature

getDigitalSignatureImpl

Methods inherited from class com.entrust.toolkit.security.crypto.signature.DigitalSignature

assertParametersValid, engineGetParameter, engineGetParameters, engineInitSign, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineSign, engineSign, engineUpdate, engineUpdate, engineVerify, engineVerify, generateDefaultParameters, getDigest, getPrng, toAlgorithmParameters

Methods inherited from class java.security.Signature

clone, getAlgorithm, getInstance, getInstance, getInstance, getParameter, getParameters, getProvider, initSign, initSign, initVerify, initVerify, setParameter, setParameter, sign, sign, toString, update, update, update, update, verify, verify

Methods inherited from class java.security.SignatureSpi

engineUpdate

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

EcdsaWithSha1Signature

public EcdsaWithSha1Signature()

The constructor; creates a new instance of the SHA1withECDSA digital signature algorithm.

Applications should not use this constructor, instead the signature algorithm should be requested from the appropriate JCA/JCE cryptographic service provider as follows: Signature.getInstance("SHA1withECDSA", "Entrust").

FIPS 140-2:

FIPS Service: Modify Object

This API is part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; use of this API causes the caller to assume the FIPS 140-2 user role and accesses the following FIPS 140-2 logical interfaces:

• control input interface (API call)
• status output interface (exceptions)