JDK (Java Development Kit) Tutorials

∟PKCS#8/X.509 Private/Public Encoding Standards

This chapter provides tutorial notes and example codes on PKCS#8 and X.509 key encoding standards. Topics include PKCS#8 standard for private key encoding; X.509 standard for public key encoding; PKCS8EncodedKeySpec and X509EncodedKeySpec classes to decode encoded keys; JcaKeyFactoryTest.java test program to read and convert keys back from encoded key files.

What Is Key Encoding?

PKCS#8 and X.509 Key Encoding Classes

java.security.KeyFactory - Reading Encoded Keys

JcaKeyFactoryTest.java - Key Factory Test Program

Reading DSA Private and Public Key Files

Reading RSA Private and Public Key Files

Conclusion:

• Two encoding standards, PKCS#8 and X.509, are supported by JDK.
• java.security.spec.PKCS8EncodedKeySpec class can be used to convert private keys encoded as byte strings into key spec objects.
• java.security.spec.X509EncodedKeySpec class can be used to convert public keys encoded as byte strings into key spec objects.
• java.security.KeyFactory class can be used to convert key spec objects back to private or public key objects.

Sample programs listed in this chapter have been tested with JDK 1.3.1, 1.4.1 and 1.5.0.

Read my other book "Tutorial Notes on cryptography" for other related topics.

Table of Contents

 About This JDK Tutorial Book

 Downloading and Installing JDK 1.3.1 on Windows

 Downloading and Installing JDK 1.4.1 on Windows

 Downloading and Installing JDK 1.5.0 on Windows

 Downloading and Installing JDK 1.6.2 on Windows

 Date, Time and Calendar Classes

 Date and Time Object and String Conversion

 Number Object and Numeric String Conversion

 Locales, Localization Methods and Resource Bundles

 Calling and Importing Classes Defined in Unnamed Packages

 HashSet, Vector, HashMap and Collection Classes

 Character Set Encoding Classes and Methods

 Character Set Encoding Maps

 Encoding Conversion Programs for Encoded Text Files

 Socket Network Communication

 Datagram Network Communication

 DOM (Document Object Model) - API for XML Files

 SAX (Simple API for XML)

 DTD (Document Type Definition) - XML Validation

 XSD (XML Schema Definition) - XML Validation

 XSL (Extensible Stylesheet Language)

 Message Digest Algorithm Implementations in JDK

 Private key and Public Key Pair Generation

►PKCS#8/X.509 Private/Public Encoding Standards

 Digital Signature Algorithm and Sample Program

 "keytool" Commands and "keystore" Files

 KeyStore and Certificate Classes

 Secret Key Generation and Management

 Cipher - Secret Key Encryption and Decryption

 The SSL (Secure Socket Layer) Protocol

 SSL Socket Communication Testing Programs

 SSL Client Authentication

 HTTPS (Hypertext Transfer Protocol Secure)

 References

 PDF Printing Version