3.org/TR/xmldsig-core/"> W3C Recommendation for XML-Signature Syntax and Processing. A
KeyValue
object contains a single public key that may be useful in validating the signature. The XML schema definition is defined as:
<element name="KeyValue" type="ds:KeyValueType"/> <complexType name="KeyValueType" mixed="true"> <choice> <element ref="ds:DSAKeyValue"/> <element ref="ds:RSAKeyValue"/> <any namespace="##other" processContents="lax"/> </choice> </complexType> <element name="DSAKeyValue" type="ds:DSAKeyValueType"/> <complexType name="DSAKeyValueType"> <sequence> <sequence minOccurs="0"> <element name="P" type="ds:CryptoBinary"/> <element name="Q" type="ds:CryptoBinary"/> </sequence> <element name="G" type="ds:CryptoBinary" minOccurs="0"/> <element name="Y" type="ds:CryptoBinary"/> <element name="J" type="ds:CryptoBinary" minOccurs="0"/> <sequence minOccurs="0"> <element name="Seed" type="ds:CryptoBinary"/> <element name="PgenCounter" type="ds:CryptoBinary"/> </sequence> </sequence> </complexType> <element name="RSAKeyValue" type="ds:RSAKeyValueType"/> <complexType name="RSAKeyValueType"> <sequence> <element name="Modulus" type="ds:CryptoBinary"/> <element name="Exponent" type="ds:CryptoBinary"/> </sequence> </complexType>
A
KeyValue
instance may be created by invoking the {@link KeyInfoFactory#newKeyValue newKeyValue} method of the{@link KeyInfoFactory} class, and passing it a {@link java.security.PublicKey} representing the value of the public key. Here is an example of creating a
KeyValue
from a {@link DSAPublicKey} of a {@link java.security.cert.Certificate} stored in a {@link java.security.KeyStore}:
KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); PublicKey dsaPublicKey = keyStore.getCertificate("myDSASigningCert").getPublicKey(); KeyInfoFactory factory = KeyInfoFactory.getInstance("DOM"); KeyValue keyValue = factory.newKeyValue(dsaPublicKey);
This class returns the
DSAKeyValue
and
RSAKeyValue
elements as objects of type {@link DSAPublicKey} and {@link RSAPublicKey}, respectively. Note that not all of the fields in the schema are accessible as parameters of these types.
@author Sean Mullan
@author JSR 105 Expert Group
@see KeyInfoFactory#newKeyValue(PublicKey)