com.google.crypto.tink.prf

Class AesCmacPrfKey

java.lang.Object

com.google.crypto.tink.Key

com.google.crypto.tink.prf.PrfKey

com.google.crypto.tink.prf.AesCmacPrfKey

@Alpha
 @Immutable
public final class AesCmacPrfKey
extends PrfKey

Represents a key computing AES CMAC PRF.

This API is annotated with Alpha because it is not yet stable and might change in the future.

Method Summary

Modifier and Type	Method and Description
static AesCmacPrfKey	create(AesCmacPrfParameters parameters, SecretBytes keyBytes)
boolean	equalsKey(Key o) Returns true if the key is equal to the passed in key.
Integer	getIdRequirementOrNull() Returns null if this key has no id requirement, otherwise the required id.
SecretBytes	getKeyBytes()
AesCmacPrfParameters	getParameters() Returns the parameters of this key.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

create

public static AesCmacPrfKey create(AesCmacPrfParameters parameters,
                                   SecretBytes keyBytes)
                            throws GeneralSecurityException

Throws:

GeneralSecurityException

getKeyBytes

public SecretBytes getKeyBytes()

getParameters

public AesCmacPrfParameters getParameters()

Description copied from class: PrfKey

Returns the parameters of this key.

Specified by:

getParameters in class PrfKey

getIdRequirementOrNull

@Nullable
public Integer getIdRequirementOrNull()

Description copied from class: Key

Returns null if this key has no id requirement, otherwise the required id.

Some keys, when they are in a keyset, are required to have a certain ID to work properly. This comes from the fact that Tink in some cases prefixes ciphertexts or signatures with the string 0x01<id>, where the ID is encoded in big endian (see the documentation of the key type for details), in which case the key requires a certain ID.

Specified by:

getIdRequirementOrNull in class Key

equalsKey

public boolean equalsKey(Key o)

Description copied from class: Key

Returns true if the key is equal to the passed in key.

Implementations are required to do this in constant time.

Note: Tink Key objects should typically not override hashCode (because it could risk leaking key material). Hence, they typically also should not override equals.

Specified by:

equalsKey in class Key