1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
package org.spongycastle.crypto.params;
import org.spongycastle.crypto.DerivationParameters;
import org.spongycastle.util.Arrays;
/**
* Note that counter is only supported at the location presented in the
* NIST SP 800-108 specification, not in the additional locations present
* in the CAVP test vectors.
*/
public final class KDFFeedbackParameters
implements DerivationParameters
{
// could be any valid value, using 32, don't know why
private static final int UNUSED_R = -1;
private final byte[] ki;
private final byte[] iv;
private final boolean useCounter;
private final int r;
private final byte[] fixedInputData;
private KDFFeedbackParameters(byte[] ki, byte[] iv, byte[] fixedInputData, int r, boolean useCounter)
{
if (ki == null)
{
throw new IllegalArgumentException("A KDF requires Ki (a seed) as input");
}
this.ki = Arrays.clone(ki);
if (fixedInputData == null)
{
this.fixedInputData = new byte[0];
}
else
{
this.fixedInputData = Arrays.clone(fixedInputData);
}
this.r = r;
if (iv == null)
{
this.iv = new byte[0];
}
else
{
this.iv = Arrays.clone(iv);
}
this.useCounter = useCounter;
}
public static KDFFeedbackParameters createWithCounter(
byte[] ki, final byte[] iv, byte[] fixedInputData, int r)
{
if (r != 8 && r != 16 && r != 24 && r != 32)
{
throw new IllegalArgumentException("Length of counter should be 8, 16, 24 or 32");
}
return new KDFFeedbackParameters(ki, iv, fixedInputData, r, true);
}
public static KDFFeedbackParameters createWithoutCounter(
byte[] ki, final byte[] iv, byte[] fixedInputData)
{
return new KDFFeedbackParameters(ki, iv, fixedInputData, UNUSED_R, false);
}
public byte[] getKI()
{
return ki;
}
public byte[] getIV()
{
return iv;
}
public boolean useCounter()
{
return useCounter;
}
public int getR()
{
return r;
}
public byte[] getFixedInputData()
{
return Arrays.clone(fixedInputData);
}
}
|
