CryptoServerCXI.Key Class Reference

This class is used to encapsulate CXI keys. More...

Public Member Functions
	Key (byte[] value) throws CryptoServerException
	Creates a key object from the given data. More...
boolean	isHandle ()
	Inquires if the key contains a key handle. More...
byte[]	getEncoded ()
	Returns the key in its encoded (serialized) form. More...
KeyAttributes	getAttributes () throws CryptoServerException
	Returns the key attributes. More...
byte[]	getUName () throws NoSuchAlgorithmException, CryptoServerException
	Returns the unique key name. More...

Detailed Description

This class is used to encapsulate CXI keys.

A key can either contain

• a handle to a key that is stored on the CryptoServer (internal storage)
• a key blob of type 'Backup Blob' that contains the attributes and components of the key (external storage). A key blob contains the attributes and components of the key, see Format of Key Blobs. The key components withinf the key blob are encrypted with the CryptoServer's Master Box Key (MBK). Additionally a key blob is protected against manipulation with a check value, which is a MAC over all key blob items, calculated with a MBK derived key.

Note

On cryptographic operations the CryptoServer accepts a key handle as well as a key blobs. In case of a key handle the key will be loaded from the internal database, otherwise, in case of a key blob, the chack value (MAC) of the key is checked and the key is decrypted with the MBK.