io.getlime.security.powerauth.server.keyfactory

Class PowerAuthServerKeyFactory

java.lang.Object

io.getlime.security.powerauth.server.keyfactory.PowerAuthServerKeyFactory

public class PowerAuthServerKeyFactory
extends Object

Key factory used on server side to generate PowerAuth related keys.

Author:

Petr Dvorak

Constructor Summary

Constructors

Constructor and Description
PowerAuthServerKeyFactory()

Method Summary

Modifier and Type	Method and Description
SecretKey	generateServerEndryptedVaultKey(SecretKey masterSecretKey) Generate a transport key KEY_ENCRYPTED_VAULT from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	generateServerMasterSecretKey(PrivateKey serverPrivateKey, PublicKey devicePublicKey) Generate a master secret key KEY_MASTER_SECRET using the server private key KEY_SERVER_PRIVATE and device public key KEY_DEVICE_PUBLIC.
SecretKey	generateServerSignatureBiometryKey(SecretKey masterSecretKey) Generate a signature key KEY_SIGNATURE_BIOMETRY from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	generateServerSignatureKnowledgeKey(SecretKey masterSecretKey) Generate a signature key KEY_SIGNATURE_KNOWLEDGE from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	generateServerSignaturePossessionKey(SecretKey masterSecretKey) Generate a signature key KEY_SIGNATURE_POSSESSION from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	generateServerTransportKey(SecretKey masterSecretKey) Generate a transport key KEY_TRANSPORT from master secret key KEY_MASTER_SECRET using KDF.
List<SecretKey>	keysForSignatureType(String signatureType, SecretKey masterSecretKey) Generate a list with signature keys for given signature type and master secret

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PowerAuthServerKeyFactory

public PowerAuthServerKeyFactory()

Method Detail

keysForSignatureType

public List<SecretKey> keysForSignatureType(String signatureType,
                                            SecretKey masterSecretKey)

Generate a list with signature keys for given signature type and master secret

Parameters:

signatureType - Requested signature type

masterSecretKey - Master Key Secret

Returns:

List with keys constructed from master secret that are needed to get requested signature type.

generateServerEndryptedVaultKey

public SecretKey generateServerEndryptedVaultKey(SecretKey masterSecretKey)

Generate a transport key KEY_ENCRYPTED_VAULT from master secret key KEY_MASTER_SECRET using KDF.

Parameters:

masterSecretKey - Master secret key KEY_MASTER_SECRET.

Returns:

An instance of signature key KEY_ENCRYPTED_VAULT.

See Also:

KeyGenerator.deriveSecretKey(SecretKey, long)

generateServerMasterSecretKey

public SecretKey generateServerMasterSecretKey(PrivateKey serverPrivateKey,
                                               PublicKey devicePublicKey)
                                        throws InvalidKeyException

Generate a master secret key KEY_MASTER_SECRET using the server private key KEY_SERVER_PRIVATE and device public key KEY_DEVICE_PUBLIC.

Parameters:

serverPrivateKey - Server private key KEY_SERVER_PRIVATE.

devicePublicKey - Device public key KEY_DEVICE_PUBLIC.

Returns:

Computed symmetric key KEY_MASTER_SECRET.

Throws:

InvalidKeyException - In case some provided key is invalid.

generateServerSignatureBiometryKey

public SecretKey generateServerSignatureBiometryKey(SecretKey masterSecretKey)

Generate a signature key KEY_SIGNATURE_BIOMETRY from master secret key KEY_MASTER_SECRET using KDF.

Parameters:

masterSecretKey - Master secret key KEY_MASTER_SECRET.

Returns:

An instance of signature key KEY_SIGNATURE_BIOMETRY.

See Also:

KeyGenerator.deriveSecretKey(SecretKey, long)

generateServerSignatureKnowledgeKey

public SecretKey generateServerSignatureKnowledgeKey(SecretKey masterSecretKey)

Generate a signature key KEY_SIGNATURE_KNOWLEDGE from master secret key KEY_MASTER_SECRET using KDF.

Parameters:

masterSecretKey - Master secret key KEY_MASTER_SECRET.

Returns:

An instance of signature key KEY_SIGNATURE_KNOWLEDGE.

See Also:

KeyGenerator.deriveSecretKey(SecretKey, long)

generateServerSignaturePossessionKey

public SecretKey generateServerSignaturePossessionKey(SecretKey masterSecretKey)

Generate a signature key KEY_SIGNATURE_POSSESSION from master secret key KEY_MASTER_SECRET using KDF.

Parameters:

masterSecretKey - Master secret key KEY_MASTER_SECRET.

Returns:

An instance of signature key KEY_SIGNATURE_POSSESSION.

See Also:

KeyGenerator.deriveSecretKey(SecretKey, long)

generateServerTransportKey

public SecretKey generateServerTransportKey(SecretKey masterSecretKey)

Generate a transport key KEY_TRANSPORT from master secret key KEY_MASTER_SECRET using KDF.

Parameters:

masterSecretKey - Master secret key KEY_MASTER_SECRET.

Returns:

An instance of signature key KEY_TRANSPORT.

See Also:

KeyGenerator.deriveSecretKey(SecretKey, long)