PKCS#8/X.509 Private/Public Encoding Standards

Cryptography Tutorials - Herong's Tutorial Examples

∟PKCS#8/X.509 Private/Public Encoding Standards

This chapter provides tutorial notes and example codes on PKCS#8 and X.509 key encoding standards. Topics include PKCS#8 standard for private key encoding; X.509 standard for public key encoding; PKCS8EncodedKeySpec and X509EncodedKeySpec classes to decode encoded keys; JcaKeyFactoryTest.java test program to read and convert keys back from encoded key files.

What Is Key Encoding?

PKCS#8 and X.509 Key Encoding Classes

java.security.KeyFactory - Reading Encoded Keys

JcaKeyFactoryTest.java - Key Factory Test Program

Reading DSA Private and Public Key Files

Reading RSA Private and Public Key Files

Conclusion:

Two encoding standards, PKCS#8 and X.509, are supported by JDK.
java.security.spec.PKCS8EncodedKeySpec class can be used to convert private keys encoded as byte strings into key spec objects.
java.security.spec.X509EncodedKeySpec class can be used to convert public keys encoded as byte strings into key spec objects.
java.security.KeyFactory class can be used to convert key spec objects back to private or public key objects.

Sample programs listed in this chapter have been tested with JDK 12.

Table of Contents

About This Book

Cryptography Terminology

Cryptography Basic Concepts

Introduction to AES (Advanced Encryption Standard)

Introduction to DES Algorithm

DES Algorithm - Illustrated with Java Programs

DES Algorithm Java Implementation

DES Algorithm - Java Implementation in JDK JCE

DES Encryption Operation Modes

DES in Stream Cipher Modes

PHP Implementation of DES - mcrypt

Blowfish - 8-Byte Block Cipher

Secret Key Generation and Management

Cipher - Secret Key Encryption and Decryption

Introduction of RSA Algorithm

RSA Implementation using java.math.BigInteger Class

Introduction of DSA (Digital Signature Algorithm)

Java Default Implementation of DSA

Private key and Public Key Pair Generation

►PKCS#8/X.509 Private/Public Encoding Standards

Cipher - Public Key Encryption and Decryption

MD5 Mesasge Digest Algorithm

SHA1 Mesasge Digest Algorithm

OpenSSL Introduction and Installation

OpenSSL Generating and Managing RSA Keys

OpenSSL Managing Certificates

OpenSSL Generating and Signing CSR

OpenSSL Validating Certificate Path

"keytool" and "keystore" from JDK

"OpenSSL" Signing CSR Generated by "keytool"

Migrating Keys from "keystore" to "OpenSSL" Key Files

Certificate X.509 Standard and DER/PEM Formats

Migrating Keys from "OpenSSL" Key Files to "keystore"

Using Certificates in IE

Using Certificates in Google Chrome

Using Certificates in Firefox

Archived Tutorials

Full Version in PDF/EPUB