On 2015-12-24 11:53, Vladimir Dzhuvinov wrote:
Hi Ilari,

Thank you for making this new contribution to the JOSE suite.

The Java library for JOSE that I maintain includes methods for converting
> between JWK instances and the standard Java types for representing keys.
> My reading of the spec is that the established Java DHPublicKey
> 
<https://docs.oracle.com/javase/7/docs/api/javax/crypto/interfaces/DHPublicKey.html>
 /
> DHPrivateKey 
<https://docs.oracle.com/javase/7/docs/api/javax/crypto/interfaces/DHPrivateKey.html>
> interfaces would be the best match for the proposed "OKP" JWK. Does this make 
sense?

Hi Vladimir,

Is your goal to eventually make this a part of standard java?
I would be interested in cooperating on a OpenJDK contribution.

Regardless of that my experiences with named EC curves in Java
(without BouncyCastle installed) would speak against reusing DH*
since there is no place for "crv" (or whatever it will be called...)
and "x" is called Y.

https://docs.oracle.com/javase/7/docs/api/javax/crypto/spec/DHPublicKeySpec.html

I would therefore consider starting with a new key type (OKP*).

If something "standard-ish" is the target, I would try to get some
feedback on an early proposal.

Regards,
Anders


The current JWK types map as follows:

  * "OCT" JWKs map to / from javax.crypto.SecretKey

  * "RSA" JWKs map to / from java.security.interfaces.RSA{Public|Private}Key

  * "EC" JWKs map to / from java.security.interfaces.EC{Public|Private}Key


Can you recommend Java implementations of the new algs? I'm looking for a good 
place to start in order to add support for them in JOSE.

Thanks,

Vladimir

--
Vladimir Dzhuvinov



_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose


_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to