org.bouncycastle.crypto.params

Class SM9EncMasterPublicKeyParameters

java.lang.Object

org.bouncycastle.crypto.params.AsymmetricKeyParameter

org.bouncycastle.crypto.params.SM9EncMasterPublicKeyParameters

All Implemented Interfaces:

CipherParameters

public class SM9EncMasterPublicKeyParameters
extends AsymmetricKeyParameter

SM9 encryption master public key P_pub-e = [ke]P1, a point of G1 (GM/T 0044.4-2016). Note the group roles are swapped relative to signature: the encryption master public key lives in G1 and users' keys in G2.

Method Summary

Modifier and Type	Method and Description
static SM9EncMasterPublicKeyParameters	fromEncoded(byte[] enc)
byte[]	getEncoded() The master public key point P_pub-e of G1 in uncompressed form (0x04 || x || y, 65 bytes).
SM9EncPublicKeyParameters	getUserPublicKey(byte[] identity) The encryption public key of the user identified by identity: the recipient key a sender encapsulates to (or encrypts to), formed from this master public key and the identity under the encryption hid 0x03 (GM/T 0044.4).
SM9EncPublicKeyParameters	getUserPublicKey(byte[] identity, byte hid) The public key of the user identified by identity under an explicit hid (0x03 encryption/KEM, 0x02 key exchange) - use when the KGC's published hid differs from the encryption default.
Fp12	pairingWithP2() g = e(P_pub-e, P2), the fixed pairing value used by both encapsulation and encryption.
ECPoint	recipientPoint(byte[] identity) Q = [H1(identity||hid, N)]P1 + P_pub-e, the recipient's public key point in G1, using the encryption hid (0x03).
ECPoint	recipientPoint(byte[] identity, byte hid) Q = [H1(identity||hid, N)]P1 + P_pub-e for an explicit hid (0x03 encryption, 0x02 key exchange).

Methods inherited from class org.bouncycastle.crypto.params.AsymmetricKeyParameter

isPrivate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getUserPublicKey

public SM9EncPublicKeyParameters getUserPublicKey(byte[] identity)

The encryption public key of the user identified by identity: the recipient key a sender encapsulates to (or encrypts to), formed from this master public key and the identity under the encryption hid 0x03 (GM/T 0044.4). It is derived from the published master public key alone, so any sender can construct it without KGC interaction.

getUserPublicKey

public SM9EncPublicKeyParameters getUserPublicKey(byte[] identity,
                                                  byte hid)

The public key of the user identified by identity under an explicit hid (0x03 encryption/KEM, 0x02 key exchange) - use when the KGC's published hid differs from the encryption default.

recipientPoint

public ECPoint recipientPoint(byte[] identity)

Q = [H1(identity||hid, N)]P1 + P_pub-e, the recipient's public key point in G1, using the encryption hid (0x03).

recipientPoint

public ECPoint recipientPoint(byte[] identity,
                              byte hid)

Q = [H1(identity||hid, N)]P1 + P_pub-e for an explicit hid (0x03 encryption, 0x02 key exchange).

pairingWithP2

public Fp12 pairingWithP2()

g = e(P_pub-e, P2), the fixed pairing value used by both encapsulation and encryption.

getEncoded

public byte[] getEncoded()

The master public key point P_pub-e of G1 in uncompressed form (0x04 || x || y, 65 bytes).

fromEncoded

public static SM9EncMasterPublicKeyParameters fromEncoded(byte[] enc)