aws-samples / aws-cloudhsm-jce-examples

Sample applications demonstrating how to use the CloudHSM JCE
MIT No Attribution
37 stars 57 forks source link

Cloudhsm sdk version 5.9 JCE not support ECDH for generate secret ver 3.4 is support using BouncyCastleProvider #74

Open RommyDuarte opened 1 year ago

RommyDuarte commented 1 year ago

Hi, using KeyAgreement for ECDH is fail for generate secret

• KeyAgreement ecdh = KeyAgreement.getInstance("ECDH", CloudHsmProvider.PROVIDER_NAME); • KeyAttributesMap params = new KeyAttributesMap(); • params.put(KeyAttribute.SIZE, 256); • ecdh.init(, params);

SecretKey aesKey = ecdh.generateSecret("AES");

in the code using

Security.addProvider(new BouncyCastleProvider()); AuthProvider provider; try { provider = (AuthProvider) Security.getProvider(CloudHsmProvider.PROVIDER_NAME); if (provider == null) { provider = new CloudHsmProvider(); } Security.addProvider(provider); } catch (IOException | ProviderInitializationException | LoginException ex) { System.out.println(ex); return; }

RommyDuarte commented 1 year ago

Screenshot_3