SHOW Signed

net.rim.device.api.crypto
Class ECDHKeyAgreement

java.lang.Object
  |
  +--net.rim.device.api.crypto.ECDHKeyAgreement

public final class ECDHKeyAgreement

extends Object

Implements the elliptic curve analog of the Diffie-Hellman algorithm.

Elliptic Curve cryptography is defined in various standards including P1363 and ANSI X9.62.

Category:

Signed: This element is only accessible by signed clients. If you intend to use this element, please contact RIM to establish the necessary agreements that will allow you to have your COD files signed. Signing is only required for use on the device, development under the JDE can occur without signing the CODs.
Certicom: This element is part of the Certicom Cryptography APIs. The Certicom Cryptography APIs provide the tools you need, including ECC based algorithms, to integrate high performance data security into your applications, such as public key data encryption and decryption, digital signatures, and data authentication. Since the Certicom Cryptography API is already in the JDE, its use will remove the need for you to engage in time and resource intensive security integration so that you have lower development costs and a faster time to market. Use of the Certicom Cryptography API requires a license from Certicom. Please contact Certicom directly for more information on licensing fees and conditions.

Certicom Contact Information

Phone:613-254-9258

Email: sales@certicom.com

Website: http://www.certicom.com/rim

Since:

JDE 3.6.0

Method Summary

static byte[]

generateSharedSecret(ECPrivateKey localPrivateKey, ECPublicKey remotePublicKey, boolean useCofactor) Generates the shared secret for elliptic curve Diffie-Hellman key agreement using a given public key (from another party) and a private key with the option of the cofactor of the elliptic curve being used in the shared secret calculations.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

generateSharedSecret

public static byte[] generateSharedSecret(ECPrivateKey localPrivateKey,
                                          ECPublicKey remotePublicKey,
                                          boolean useCofactor)
                                   throws InvalidCryptoSystemException,
                                          CryptoTokenException,
                                          CryptoUnsupportedOperationException

Generates the shared secret for elliptic curve Diffie-Hellman key agreement using a given public key (from another party) and a private key with the option of the cofactor of the elliptic curve being used in the shared secret calculations. The cofactor is used to prevent small subgroup attacks. Note that using the cofactor is the defacto standard for elliptic curve operations.

Parameters:

localPrivateKey - The local private key to use.

remotePublicKey - The remote public key to use.

useCofactor - If true, the cofactor of the elliptic curve is used in the calculations. If false, it is not used. Note, setting this value to TRUE is the most common usage.

Returns:

A byte array containing the shared secret data. Note that the value returned is the raw shared secret, which technically is an element of the finite field that the elliptic curve is defined over. The caller can then take this byte array and feed it into any PseudoRandomSource to create a symmetric key, etc.

Throws:

InvalidCryptoSystemException - Thrown if the local crypto system is different than the remote crypto system

CryptoTokenException - Thrown if an error occurs with the crypto token or the crypto token is invalid.

CryptoUnsupportedOperationException - Thrown if a call is made to an unsupported operation.

Since:

JDE 4.0.2

Category:

Signed: This element is only accessible by signed clients. If you intend to use this element, please contact RIM to establish the necessary agreements that will allow you to have your COD files signed. Signing is only required for use on the device, development under the JDE can occur without signing the CODs.
Certicom: This element is part of the Certicom Cryptography APIs. The Certicom Cryptography APIs provide the tools you need, including ECC based algorithms, to integrate high performance data security into your applications, such as public key data encryption and decryption, digital signatures, and data authentication. Since the Certicom Cryptography API is already in the JDE, its use will remove the need for you to engage in time and resource intensive security integration so that you have lower development costs and a faster time to market. Use of the Certicom Cryptography API requires a license from Certicom. Please contact Certicom directly for more information on licensing fees and conditions.

Certicom Contact Information

Phone:613-254-9258

Email: sales@certicom.com

Website: http://www.certicom.com/rim