io.jsonwebtoken.impl.crypto

Class EllipticCurveSignatureValidator

java.lang.Object

io.jsonwebtoken.impl.crypto.EllipticCurveProvider

io.jsonwebtoken.impl.crypto.EllipticCurveSignatureValidator

All Implemented Interfaces:

SignatureValidator

public class EllipticCurveSignatureValidator
extends EllipticCurveProvider
implements SignatureValidator

Field Summary

Fields

Modifier and Type	Field and Description
protected SignatureAlgorithm	alg
static SecureRandom	DEFAULT_SECURE_RANDOM JJWT's default SecureRandom number generator.
protected Key	key

Constructor Summary

Constructors

Constructor and Description
EllipticCurveSignatureValidator(SignatureAlgorithm alg, Key key)

Method Summary

Methods

Modifier and Type	Method and Description
protected Signature	createSignatureInstance()
protected boolean	doVerify(Signature sig, PublicKey publicKey, byte[] data, byte[] signature)
protected Signature	getSignatureInstance()
protected boolean	isBouncyCastleAvailable()
boolean	isValid(byte[] data, byte[] signature)

Methods inherited from class io.jsonwebtoken.impl.crypto.EllipticCurveProvider

generateKeyPair, generateKeyPair, generateKeyPair, generateKeyPair, getSignatureByteArrayLength, transcodeSignatureToConcat, transcodeSignatureToDER

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SECURE_RANDOM

public static final SecureRandom DEFAULT_SECURE_RANDOM

JJWT's default SecureRandom number generator. This RNG is initialized using the JVM default as follows:

 static {
     DEFAULT_SECURE_RANDOM = new SecureRandom();
     DEFAULT_SECURE_RANDOM.nextBytes(new byte[64]);
 }
 

nextBytes is called to force the RNG to initialize itself if not already initialized. The byte array is not used and discarded immediately for garbage collection.

alg

protected final SignatureAlgorithm alg

key

protected final Key key

Constructor Detail

EllipticCurveSignatureValidator

public EllipticCurveSignatureValidator(SignatureAlgorithm alg,
                               Key key)

Method Detail

isValid

public boolean isValid(byte[] data,
              byte[] signature)

Specified by:

isValid in interface SignatureValidator

doVerify

protected boolean doVerify(Signature sig,
               PublicKey publicKey,
               byte[] data,
               byte[] signature)
                    throws InvalidKeyException,
                           SignatureException

Throws:

InvalidKeyException

SignatureException

createSignatureInstance

protected Signature createSignatureInstance()

getSignatureInstance

protected Signature getSignatureInstance()
                                  throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

isBouncyCastleAvailable

protected boolean isBouncyCastleAvailable()