io.jsonwebtoken.impl.crypto

Class EllipticCurveSignatureValidator

java.lang.Object

io.jsonwebtoken.impl.crypto.EllipticCurveProvider

io.jsonwebtoken.impl.crypto.EllipticCurveSignatureValidator

All Implemented Interfaces:

SignatureValidator

public class EllipticCurveSignatureValidator
extends EllipticCurveProvider
implements SignatureValidator

Field Summary

Fields

Modifier and Type	Field and Description
protected SignatureAlgorithm	alg
static java.security.SecureRandom	DEFAULT_SECURE_RANDOM JJWT's default SecureRandom number generator.
protected java.security.Key	key

Constructor Summary

Constructors

Constructor and Description
EllipticCurveSignatureValidator(SignatureAlgorithm alg, java.security.Key key)

Method Summary

Methods

Modifier and Type	Method and Description
protected java.security.Signature	createSignatureInstance()
protected boolean	doVerify(java.security.Signature sig, java.security.PublicKey publicKey, byte[] data, byte[] signature)
protected java.security.Signature	getSignatureInstance()
protected boolean	isBouncyCastleAvailable()
boolean	isValid(byte[] data, byte[] signature)

Methods inherited from class io.jsonwebtoken.impl.crypto.EllipticCurveProvider

generateKeyPair, generateKeyPair, generateKeyPair, generateKeyPair, getSignatureByteArrayLength, transcodeSignatureToConcat, transcodeSignatureToDER

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SECURE_RANDOM

public static final java.security.SecureRandom DEFAULT_SECURE_RANDOM

JJWT's default SecureRandom number generator. This RNG is initialized using the JVM default as follows:

 static {
     DEFAULT_SECURE_RANDOM = new SecureRandom();
     DEFAULT_SECURE_RANDOM.nextBytes(new byte[64]);
 }
 

nextBytes is called to force the RNG to initialize itself if not already initialized. The byte array is not used and discarded immediately for garbage collection.

alg

protected final SignatureAlgorithm alg

key

protected final java.security.Key key

Constructor Detail

EllipticCurveSignatureValidator

public EllipticCurveSignatureValidator(SignatureAlgorithm alg,
                               java.security.Key key)

Method Detail

isValid

public boolean isValid(byte[] data,
              byte[] signature)

Specified by:

isValid in interface SignatureValidator

doVerify

protected boolean doVerify(java.security.Signature sig,
               java.security.PublicKey publicKey,
               byte[] data,
               byte[] signature)
                    throws java.security.InvalidKeyException,
                           java.security.SignatureException

Throws:

java.security.InvalidKeyException

java.security.SignatureException

createSignatureInstance

protected java.security.Signature createSignatureInstance()

getSignatureInstance

protected java.security.Signature getSignatureInstance()
                                                throws java.security.NoSuchAlgorithmException

Throws:

java.security.NoSuchAlgorithmException

isBouncyCastleAvailable

protected boolean isBouncyCastleAvailable()