com.entrust.toolkit.security.crypto.dsa

Class DsaSignature

java.lang.Object

java.security.SignatureSpi

java.security.Signature

com.entrust.toolkit.security.crypto.signature.DigitalSignature

com.entrust.toolkit.security.crypto.dsa.DsaSignature

All Implemented Interfaces:

ExtendedSignature

Direct Known Subclasses:

DsaWithNoneSignature, DsaWithSha1Signature

public abstract class DsaSignature
extends DigitalSignature

The super-class of all Digital Signature Algorithm (DSA) signature algorithms in Entrust's digital signature algorithm architecture; it contains all the common functionality used by Entrust's DSA digital signature algorithms.

The following key types are currently supported:

• Standard DSA public/private keys (software keys); instances of java.security.interfaces.DSAPublicKey or java.security.interfaces.DSAPrivateKey.
• Entrust confined DSA private keys (secure software keys); instances of DsaConfinedPrivateKey.
• DSA private keys that reside on smart cards and are accessible via PKCS #11 (token keys); instances of TokenDSAPrivateKey .
• DSA private keys that reside in CAPI and are accessible via the Microsoft CryptoAPI (CAPI keys); instance of CapiDsaPrivateKey.

When the signature algorithm is initialized with a key, an appropriate underlying DSA algorithm implementation is automatically selected based on the type of key passed in.

A DSA digital signature algorithm instance can be obtained using the Java Cryptography Architecture (JCA), by requesting the '<digestAlgorithm>withDSA' algorithm from the Entrust cryptographic service provider. This can be done using the following call:

Signature.getInstance("<digestAlgorithm>withDSA", "Entrust");

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

8.0

See Also:

FIPS PUB 186-3, Digital Signature Standard (DSS)

Field Summary

Fields inherited from class java.security.Signature

SIGN, state, UNINITIALIZED, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Method Summary

Methods

Modifier and Type	Method and Description
protected com.entrust.toolkit.security.crypto.signature.DigitalSignatureImpl	getDigitalSignatureImpl(java.lang.String implClassName) Instantiates the internal signature algorithm implementation from the indicated class.

Methods inherited from class com.entrust.toolkit.security.crypto.signature.DigitalSignature

assertParametersValid, engineGetParameter, engineGetParameters, engineInitSign, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineSign, engineSign, engineUpdate, engineUpdate, engineVerify, engineVerify, generateDefaultParameters, getDigest, getPrng, toAlgorithmParameters

Methods inherited from class java.security.Signature

clone, getAlgorithm, getInstance, getInstance, getInstance, getParameter, getParameters, getProvider, initSign, initSign, initVerify, initVerify, setParameter, setParameter, sign, sign, toString, update, update, update, update, verify, verify

Methods inherited from class java.security.SignatureSpi

engineUpdate

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Detail

getDigitalSignatureImpl

protected final com.entrust.toolkit.security.crypto.signature.DigitalSignatureImpl getDigitalSignatureImpl(java.lang.String implClassName)
                                                                                                    throws java.lang.RuntimeException

Description copied from class: DigitalSignature

Instantiates the internal signature algorithm implementation from the indicated class.

This API is necessary so that the signature algorithm implementation classes can exist in a different package and not require public constructors.

FIPS 140-2:

FIPS Service: Query Object

Although this API is externally accessible (protected), it is intended for internal use only and MUST NOT be called externally by the operator when operating in FIPS mode. Since its use is prohibited, this API is not part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module.

Specified by:

getDigitalSignatureImpl in class DigitalSignature

Parameters:

implClassName - the name of the class for the signature algorithm implementation

Returns:

the signature algorithm implementation

Throws:

java.lang.RuntimeException - if the signature algorithm implementation could not be instantiated