public class KeyFactory extends Object
Key
) into key specifications (transparent representations of the underlying key material), and vice versa. Key factories are bidirectional. That is, they allow you to build an opaque key object from a given key specification (key material), or to retrieve the underlying key material of a key object in a suitable format.
Multiple compatible key specifications may exist for the same key. For example, a DSA public key may be specified using DSAPublicKeySpec
or X509EncodedKeySpec
. A key factory can be used to translate between compatible key specifications.
The following is an example of how to use a key factory in order to instantiate a DSA public key from its encoding. Assume Alice has received a digital signature from Bob. Bob also sent her his public key (in encoded format) to verify his signature. Alice then performs the following actions:
X509EncodedKeySpec bobPubKeySpec = new X509EncodedKeySpec(bobEncodedPubKey); KeyFactory keyFactory = KeyFactory.getInstance("DSA"); PublicKey bobPubKey = keyFactory.generatePublic(bobPubKeySpec); Signature sig = Signature.getInstance("DSA"); sig.initVerify(bobPubKey); sig.update(data); sig.verify(signature);
Every implementation of the Java platform is required to support the following standard KeyFactory
algorithms:
DiffieHellman
DSA
RSA
Modifier | Constructor | Description |
---|---|---|
protected |
Creates a KeyFactory object. |
Modifier and Type | Method | Description |
---|---|---|
final PrivateKey |
generatePrivate |
Generates a private key object from the provided key specification (key material). |
final PublicKey |
generatePublic |
Generates a public key object from the provided key specification (key material). |
final String |
getAlgorithm() |
Gets the name of the algorithm associated with this KeyFactory . |
static KeyFactory |
getInstance |
Returns a KeyFactory object that converts public/private keys of the specified algorithm. |
static KeyFactory |
getInstance |
Returns a KeyFactory object that converts public/private keys of the specified algorithm. |
static KeyFactory |
getInstance |
Returns a KeyFactory object that converts public/private keys of the specified algorithm. |
final <T extends KeySpec> |
getKeySpec |
Returns a specification (key material) of the given key object. |
final Provider |
getProvider() |
Returns the provider of this key factory object. |
final Key |
translateKey |
Translates a key object, whose provider may be unknown or potentially untrusted, into a corresponding key object of this key factory. |
protected KeyFactory(KeyFactorySpi keyFacSpi, Provider provider, String algorithm)
KeyFactory
object.keyFacSpi
- the delegateprovider
- the provideralgorithm
- the name of the algorithm to associate with this KeyFactory
public static KeyFactory getInstance(String algorithm) throws NoSuchAlgorithmException
KeyFactory
object that converts public/private keys of the specified algorithm. This method traverses the list of registered security providers, starting with the most preferred provider. A new KeyFactory
object encapsulating the KeyFactorySpi
implementation from the first provider that supports the specified algorithm is returned.
Note that the list of registered providers may be retrieved via the Security.getProviders()
method.
jdk.security.provider.preferred
Security
property to determine the preferred provider order for the specified algorithm. This may be different from the order of providers returned by Security.getProviders()
.algorithm
- the name of the requested key algorithm. See the KeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.KeyFactory
objectNoSuchAlgorithmException
- if no Provider
supports a KeyFactorySpi
implementation for the specified algorithmNullPointerException
- if algorithm
is null
public static KeyFactory getInstance(String algorithm, String provider) throws NoSuchAlgorithmException, NoSuchProviderException
KeyFactory
object that converts public/private keys of the specified algorithm. A new KeyFactory
object encapsulating the KeyFactorySpi
implementation from the specified provider is returned. The specified provider must be registered in the security provider list.
Note that the list of registered providers may be retrieved via the Security.getProviders()
method.
algorithm
- the name of the requested key algorithm. See the KeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.provider
- the name of the provider.KeyFactory
objectIllegalArgumentException
- if the provider name is null
or emptyNoSuchAlgorithmException
- if a KeyFactorySpi
implementation for the specified algorithm is not available from the specified providerNoSuchProviderException
- if the specified provider is not registered in the security provider listNullPointerException
- if algorithm
is null
public static KeyFactory getInstance(String algorithm, Provider provider) throws NoSuchAlgorithmException
KeyFactory
object that converts public/private keys of the specified algorithm. A new KeyFactory
object encapsulating the KeyFactorySpi
implementation from the specified provider is returned. Note that the specified provider does not have to be registered in the provider list.
algorithm
- the name of the requested key algorithm. See the KeyFactory section in the Java Security Standard Algorithm Names Specification for information about standard algorithm names.provider
- the provider.KeyFactory
objectIllegalArgumentException
- if the specified provider is null
NoSuchAlgorithmException
- if a KeyFactorySpi
implementation for the specified algorithm is not available from the specified Provider
objectNullPointerException
- if algorithm
is null
public final Provider getProvider()
public final String getAlgorithm()
KeyFactory
.KeyFactory
public final PublicKey generatePublic(KeySpec keySpec) throws InvalidKeySpecException
keySpec
- the specification (key material) of the public key.InvalidKeySpecException
- if the given key specification is inappropriate for this key factory to produce a public key.public final PrivateKey generatePrivate(KeySpec keySpec) throws InvalidKeySpecException
keySpec
- the specification (key material) of the private key.InvalidKeySpecException
- if the given key specification is inappropriate for this key factory to produce a private key.public final <T extends KeySpec> T getKeySpec(Key key, Class<T> keySpec) throws InvalidKeySpecException
keySpec
identifies the specification class in which the key material should be returned. It could, for example, be DSAPublicKeySpec.class
, to indicate that the key material should be returned in an instance of the DSAPublicKeySpec
class.T
- the type of the key specification to be returnedkey
- the key.keySpec
- the specification class in which the key material should be returned.InvalidKeySpecException
- if the requested key specification is inappropriate for the given key, or the given key cannot be processed (e.g., the given key has an unrecognized algorithm or format).public final Key translateKey(Key key) throws InvalidKeyException
key
- the key whose provider is unknown or untrusted.InvalidKeyException
- if the given key cannot be processed by this key factory.
© 1993, 2023, Oracle and/or its affiliates. All rights reserved.
Documentation extracted from Debian's OpenJDK Development Kit package.
Licensed under the GNU General Public License, version 2, with the Classpath Exception.
Various third party code in OpenJDK is licensed under different licenses (see Debian package).
Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
https://docs.oracle.com/en/java/javase/21/docs/api/java.base/java/security/KeyFactory.html