com.entrust.toolkit.security.crypto.random

Class X9_31

java.lang.Object

java.security.SecureRandomSpi

com.entrust.toolkit.security.crypto.random.FIPS140_2Compliant

com.entrust.toolkit.security.crypto.random.X9_31

All Implemented Interfaces:

java.io.Serializable

Direct Known Subclasses:

X9_31using3DES, X9_31usingAES256

public abstract class X9_31
extends FIPS140_2Compliant

The super-class of all FIPS 140-2 complaint pseudo-random number generator implementations that are based on the algorithm defined in ANSI X9.31 Appendix A.2.4.

The algorithm described below employs symmetric cipher encryption using a symmetric key, represented as ede*K. It also requires a seed value V, and a date/time vector DT which is updated for each iteration of the algorithm. The symmetric key, seed value, and any parameters used with the cipher MUST be kept secret.

 I = ede*K(DT)
 R = ede*K(I xor V)
 V = ede*K(R xor I)
 

All values in the algorithm above are the same size as the block size of the cipher that is used. The algorithm is initialized upon instantiation; it is then repeatedly executed as random bytes are requested.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

7.0

See Also:

Serialized Form

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.random.FIPS140_2Compliant

engineGenerateSeed, engineNextBytes, engineSetSeed

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait