Java SunPKCS11 JCE RSA key wrapping exception -

-

i have 2 rsa key pairs on 1 device: rsa1 , rsa2. wrap rsa1 private key rsa2 public key using ckm_rsa_pkcs mechanis.

i have following code:

        keystore ks = keystore.getinstance("pkcs11", p);         ks.load(null, pin);          x509certificate cert1 = (x509certificate) ks.getcertificate("rsa1");         publickey pubk1 = cert1.getpublickey();         privatekey privk1 = (privatekey) ks.getkey("rsa1", pin);          x509certificate cert2 = (x509certificate) ks.getcertificate("rsa2");         publickey pubk2 = cert2.getpublickey();         privatekey privk2 = (privatekey) ks.getkey("rsa2", pin);          cipher cipher = cipher.getinstance("rsa/ecb/pkcs1padding", p);         cipher.init(cipher.wrap_mode, pubk2); // here exception         byte[] output = cipher.dofinal(privk1.getencoded());

i following exception:

exception in thread "main" java.security.invalidkeyexception: not create rsa public key     @ sun.security.pkcs11.p11rsakeyfactory.impltranslatepublickey(p11rsakeyfactory.java:70)     @ sun.security.pkcs11.p11keyfactory.enginetranslatekey(p11keyfactory.java:128)     @ sun.security.pkcs11.p11keyfactory.convertkey(p11keyfactory.java:65)     @ sun.security.pkcs11.p11rsacipher.implinit(p11rsacipher.java:187)     @ sun.security.pkcs11.p11rsacipher.engineinit(p11rsacipher.java:160)     @ javax.crypto.cipher.init(cipher.java:1210)     @ javax.crypto.cipher.init(cipher.java:1153)     @ testwrap.go(testwrap.java:86)     @ testwrap.main(testwrap.java:40) caused by: sun.security.pkcs11.wrapper.pkcs11exception: ckr_attribute_value_invalid     @ sun.security.pkcs11.wrapper.pkcs11.c_createobject(native method)     @ sun.security.pkcs11.p11rsakeyfactory.generatepublic(p11rsakeyfactory.java:203)     @ sun.security.pkcs11.p11rsakeyfactory.impltranslatepublickey(p11rsakeyfactory.java:56)     ... 8 more

any ideas wrong?

edit:

i tried rewrite differently using pkcs11 class instead jce same. code looks this:

            ck_attribute[] rsa2 = new ck_attribute[2];             rsa2[0] = new ck_attribute(cka_label, "rsa2");             rsa2[1] = new ck_attribute(cka_class, cko_public_key);              p11.c_findobjectsinit(hsession, rsa2);             long[] rsa2objects = p11.c_findobjects(hsession, 1);             p11.c_findobjectsfinal(hsession);              ck_attribute[] rsa1 = new ck_attribute[2];             rsa1[0] = new ck_attribute(cka_label, "rsa1");             rsa1[1] = new ck_attribute(cka_class, cko_private_key);              p11.c_findobjectsinit(hsession, rsa1);             long[] rsa2objects = p11.c_findobjects(hsession, 1);             p11.c_findobjectsfinal(hsession);              ck_mechanism mech = new ck_mechanism(ckm_rsa_pkcs);              byte[] wrapped = p11.c_wrapkey(hsession, mech, rsa1objects[0], rsa2objects[0]);

now following exception:

exception in thread "main" sun.security.pkcs11.wrapper.pkcs11exception: ckr_key_not_wrappable     @ sun.security.pkcs11.wrapper.pkcs11.c_wrapkey(native method)     @ sun.security.pkcs11.wrapper.pkcs11$synchronizedpkcs11.c_wrapkey(pkcs11.java:1679)     @ testwrap.wrapping(testwrap.java:265)     @ testwrap.main(testwrap.java:290)

i think maybe wrong implemented on side of pkcs#11 middleware manufacturer.

any ideas?


Comments

Post a Comment

Popular posts from this blog

c# - How to get the current UAC mode -

-
can check current uac type set in device before running application through c#. i got know approach check whether current user administrator or not. but, need know uac type set (i.e. default/never notify) internal logic. is possible? please help. this article self-elevation , checking level program runs in. due security reasons i'm afraid won't able retrieve uac level set. http://code.msdn.microsoft.com/windowsdesktop/csuacselfelevation-644673d3
Read more

postgresql - Lazarus + Postgres: incomplete startup packet -

-
i've been building lazarus pascal program using postgresql on back-end. used work fine following lines opening db. dbconn:= tpqconnection.create(nil); dbconn.hostname := 'localhost'; dbconn.databasename:= 'dbhrs'; dbconn.username:='mizk'; dbconn.password:='123'; dbconn.open; if dbconn.connected openhrsdb := true else openhrsdb := false; but moment change localhost server's ip (on lan), program stops. no errors or warnings. have no clue happening. here related details may narrow down problem. the program i'm running workstation on same lan server. both machines run ubuntu 12.04 desktop i can access postgres db on server using pgadmin iii, guess it's not firewall issue. i have allowed postgresql ufw , ufw disabled. strangely, when firewall disabled, can ssh server terminal using workstation. when it's enabled, can't my biggest concern right why pascal program not working when i...
Read more

javascript - Ajax jqXHR.status==0 fix error -

-
$.ajax({ url: urlstring, datatype: "json", type: "get", success: function (data) { alert(data); }, error: function (jqxhr, exception) { if (jqxhr.status === 0) { alert('not connect.\n verify network.'); } else if (jqxhr.status == 404) { alert('requested page not found. [404]'); } else if (jqxhr.status == 500) { alert('internal server error [500].'); } else if (exception === 'parsererror') { alert('requested json parse failed.'); } else if (exception === 'timeout') { alert('time out error.'); } else if (exception === 'abort') { alert('ajax request aborted.'); } else { alert('uncaught error.\n' + jqxhr.responsete...
Read more