Package com.hierynomus.sshj.signature

Class SignatureSkEcdsa

java.lang.Object

net.schmizz.sshj.signature.AbstractSignature

net.schmizz.sshj.signature.AbstractSignatureDSA

com.hierynomus.sshj.signature.AbstractSecurityKeySignature

com.hierynomus.sshj.signature.SignatureSkEcdsa

All Implemented Interfaces:

Signature

public class SignatureSkEcdsa
extends AbstractSecurityKeySignature

Signature for the sk-ecdsa-sha2-nistp256@openssh.com FIDO/U2F key type.

The authenticator produces an ASN.1 DER ECDSA signature; on the SSH wire it is encoded as the two integers r and s as mpints, exactly like a plain ecdsa-sha2-nistp256 signature. This class converts between the two encodings. The verification engine is always SHA-256 (the "sha2-nistp256" of the key type).

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SignatureSkEcdsa.Factory

Field Summary

Fields inherited from class net.schmizz.sshj.signature.AbstractSignature

signature

Constructor Summary

Constructors

Constructor	Description
SignatureSkEcdsa()

Method Summary

Modifier and Type	Method	Description
protected byte[]	deviceSignatureToSsh(byte[] derSignature)	Convert the authenticator's native signature into the SSH raw-signature encoding (r||s as two mpints for ECDSA, unchanged for Ed25519).
protected byte[]	sshSignatureToDevice(byte[] sshRawSignature)	Convert the SSH raw-signature encoding read off the wire into the byte format the JCA verification engine expects (DER for ECDSA, unchanged for Ed25519).

Methods inherited from class com.hierynomus.sshj.signature.AbstractSecurityKeySignature

encode, initSign, initVerify, isSignaturePreEncoded, sha256, sign, update, verify

Methods inherited from class net.schmizz.sshj.signature.AbstractSignatureDSA

encodeAsnSignature

Methods inherited from class net.schmizz.sshj.signature.AbstractSignature

extractSig, getSignatureName, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SignatureSkEcdsa

public SignatureSkEcdsa()

Method Details

sshSignatureToDevice

protected byte[] sshSignatureToDevice(byte[] sshRawSignature)
                               throws Buffer.BufferException

Description copied from class: AbstractSecurityKeySignature

Convert the SSH raw-signature encoding read off the wire into the byte format the JCA verification engine expects (DER for ECDSA, unchanged for Ed25519).

Specified by:

sshSignatureToDevice in class AbstractSecurityKeySignature

Throws:

Buffer.BufferException

deviceSignatureToSsh

protected byte[] deviceSignatureToSsh(byte[] derSignature)

Description copied from class: AbstractSecurityKeySignature

Convert the authenticator's native signature into the SSH raw-signature encoding (r||s as two mpints for ECDSA, unchanged for Ed25519).

Specified by:

deviceSignatureToSsh in class AbstractSecurityKeySignature