com.entrust.toolkit.security.crypto.mac

Class Sha256HMacKeyGenerator

java.lang.Object

javax.crypto.KeyGeneratorSpi

com.entrust.toolkit.security.crypto.mac.HMacKeyGenerator

com.entrust.toolkit.security.crypto.mac.Sha256HMacKeyGenerator

public final class Sha256HMacKeyGenerator
extends HMacKeyGenerator

A software based implementation of the HmacSHA256 key generation algorithm.

It is designed to generate symmetric keys that can be used with the HmacSHA256 keyed-hashing for message authentication (HMAC) algorithm. An instance of this algorithm can be obtained using the Java Cryptography Architecture (JCA), by requesting an 'HmacSHA256' key generator from the Entrust cryptographic service provider. This can be done using the following call:

KeyGenerator.getInstance("HmacSHA256", "Entrust");

The keys that are generated are in 'RAW' format. These keys can be of any length (any number of bytes), but it is recommended that they be at least 256 bits (32 bytes) in length. This algorithm does not use algorithm parameters; if provided during initialization they will be ignored.

This class SHOULD NOT be used directly; it should only be used through the JCA/JCE.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

7.2

See Also:

Sha256HMac

Constructor Summary

Constructors

Constructor and Description
Sha256HMacKeyGenerator() The constructor; creates a new instance of the HmacSHA256 key generation algorithm.

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.mac.HMacKeyGenerator

engineGenerateKey, engineInit, engineInit, engineInit

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Sha256HMacKeyGenerator

public Sha256HMacKeyGenerator()

The constructor; creates a new instance of the HmacSHA256 key generation algorithm.

Applications should not use this constructor, instead the key generation algorithm should be requested from the appropriate JCA/JCE cryptographic service provider as follows: KeyGenerator.getInstance("HmacSHA256", "Entrust").

FIPS 140-2:

FIPS Service: Modify Object

This API is part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; use of this API causes the caller to assume the FIPS 140-2 user role and accesses the following FIPS 140-2 logical interfaces:

• control input interface (API call)
• status output interface (exceptions)