Package org.bouncycastle.crypto.prng

Class SP800SecureRandomBuilder

java.lang.Object
org.bouncycastle.crypto.prng.SP800SecureRandomBuilder
public class SP800SecureRandomBuilder extends Object
Builder class for making SecureRandom objects based on SP 800-90A Deterministic Random Bit Generators (DRBG).

  • Constructor Details

    • SP800SecureRandomBuilder

      public SP800SecureRandomBuilder()
      Basic constructor, creates a builder using an EntropySourceProvider based on the default SecureRandom with predictionResistant set to false.

      Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if the default SecureRandom does for its generateSeed() call.

    • SP800SecureRandomBuilder

      public SP800SecureRandomBuilder(SecureRandom entropySource, boolean predictionResistant)
      Construct a builder with an EntropySourceProvider based on the passed in SecureRandom and the passed in value for prediction resistance.

      Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if the passed in SecureRandom does for its generateSeed() call.

      Parameters:
      entropySource - the SecureRandom acting as a source of entropy for DRBGs made by this builder.
      predictionResistant - true if the SecureRandom seeder can be regarded as predictionResistant.

    • SP800SecureRandomBuilder

      public SP800SecureRandomBuilder(EntropySourceProvider entropySourceProvider)
      Create a builder which makes creates the SecureRandom objects from a specified entropy source provider.

      Note: If this constructor is used any calls to setSeed() in the resulting SecureRandom will be ignored.

      Parameters:
      entropySourceProvider - a provider of EntropySource objects.

  • Method Details

    • setPersonalizationString

      public SP800SecureRandomBuilder setPersonalizationString(byte[] personalizationString)
      Set the personalization string for DRBG SecureRandoms created by this builder
      Parameters:
      personalizationString - the personalisation string for the underlying DRBG.
      Returns:
      the current builder.

    • setSecurityStrength

      public SP800SecureRandomBuilder setSecurityStrength(int securityStrength)
      Set the security strength required for DRBGs used in building SecureRandom objects.
      Parameters:
      securityStrength - the security strength (in bits)
      Returns:
      the current builder.

    • setEntropyBitsRequired

      public SP800SecureRandomBuilder setEntropyBitsRequired(int entropyBitsRequired)
      Set the amount of entropy bits required for seeding and reseeding DRBGs used in building SecureRandom objects.
      Parameters:
      entropyBitsRequired - the number of bits of entropy to be requested from the entropy source on each seed/reseed.
      Returns:
      the current builder.

    • buildHash

      public SP800SecureRandom buildHash(Digest digest, byte[] nonce, boolean predictionResistant)
      Build a SecureRandom based on a SP 800-90A Hash DRBG.
      Parameters:
      digest - digest algorithm to use in the DRBG underneath the SecureRandom.
      nonce - nonce value to use in DRBG construction.
      predictionResistant - specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes.
      Returns:
      a SecureRandom supported by a Hash DRBG.

    • buildCTR

      public SP800SecureRandom buildCTR(BlockCipher cipher, int keySizeInBits, byte[] nonce, boolean predictionResistant)
      Build a SecureRandom based on a SP 800-90A CTR DRBG.
      Parameters:
      cipher - the block cipher to base the DRBG on.
      keySizeInBits - key size in bits to be used with the block cipher.
      nonce - nonce value to use in DRBG construction.
      predictionResistant - specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes.
      Returns:
      a SecureRandom supported by a CTR DRBG.

    • buildHMAC

      public SP800SecureRandom buildHMAC(Mac hMac, byte[] nonce, boolean predictionResistant)
      Build a SecureRandom based on a SP 800-90A HMAC DRBG.
      Parameters:
      hMac - HMAC algorithm to use in the DRBG underneath the SecureRandom.
      nonce - nonce value to use in DRBG construction.
      predictionResistant - specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes.
      Returns:
      a SecureRandom supported by a HMAC DRBG.