freenet.crypt

Class ECDH

java.lang.Object

freenet.crypt.ECDH

public class ECDH
extends java.lang.Object

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ECDH.Curves

Field Summary

Fields

Modifier and Type	Field and Description
ECDH.Curves	curve

Constructor Summary

Constructors

Constructor and Description
ECDH(ECDH.Curves curve) Initialize the ECDH Exchange: this will draw some entropy

Method Summary

Modifier and Type	Method and Description
static void	blockingInit() Initialize the key pair generators, which in turn will create the global SecureRandom, which may block waiting for entropy from /dev/random on unix-like systems.
byte[]	getAgreedSecret(java.security.interfaces.ECPublicKey pubkey) Completes the ECDH exchange: this is CPU intensive
java.security.interfaces.ECPublicKey	getPublicKey()
static java.security.interfaces.ECPublicKey	getPublicKey(byte[] data, ECDH.Curves curve) Returns an ECPublicKey from bytes obtained using ECPublicKey.getEncoded()
byte[]	getPublicKeyNetworkFormat() Return the public key as a byte[] in network format

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

curve

public final ECDH.Curves curve

Constructor Detail

ECDH

public ECDH(ECDH.Curves curve)

Initialize the ECDH Exchange: this will draw some entropy

Parameters:

curve -

Method Detail

getAgreedSecret

public byte[] getAgreedSecret(java.security.interfaces.ECPublicKey pubkey)

Completes the ECDH exchange: this is CPU intensive

Parameters:

pubkey -

Returns:

a SecretKey or null if it fails **THE OUTPUT SHOULD ALWAYS GO THROUGH A KDF**

getPublicKey

public java.security.interfaces.ECPublicKey getPublicKey()

getPublicKey

public static java.security.interfaces.ECPublicKey getPublicKey(byte[] data,
                                                                ECDH.Curves curve)

Returns an ECPublicKey from bytes obtained using ECPublicKey.getEncoded()

Parameters:

data -

Returns:

ECPublicKey or null if it fails

blockingInit

public static void blockingInit()

Initialize the key pair generators, which in turn will create the global SecureRandom, which may block waiting for entropy from /dev/random on unix-like systems. So this should be called on startup during the "may block for entropy" stage. Note that because this can block, we still have to do lazy initialisation: We do NOT want to have it blocking *at time of loading the classes*, as this will likely appear as the node completely failing to load. Running this after fproxy has started, with a warning timer, allows us to tell the user what is going on if it takes a while.

getPublicKeyNetworkFormat

public byte[] getPublicKeyNetworkFormat()

Return the public key as a byte[] in network format