Full paper (pdf) - CDC

E.4 Der KeySharer-KeyStore
Konfiguration
Instanz erzeugen
KeyStore ks = KeyStore.getInstance("KeySharer");
Keystore laden
FileInputStream in = new FileInputStream("configuration.xml");
ks.load(in, password);
in.close();
Keystore verwenden
ks.setKeyEntry(alias, key, password, certificateChain);
Keystore speichern
ks.store(null, password);
E.5 Das Key-Escrow-System
Wiederherstellbares Schlüsselpaar erzeugen
KeyPairGenerator keygen = KeyPairGenerator.getInstance("RSA", "KeySharingProvider");
keygen.initialize(new EscrowedKeyParameterSpec(1024, (PublicKey)escrow));
KeyPair pair = keygen.generateKeyPair();
privaten Schlüssel wiederherstellen
PrivateKey recovered = RSAKeyPairGenerator.recover(
(RSAPublicKey)key, (PrivateKey)recovery, (PublicKey)escrow);
privaten Schlüssel im Dateisystem verwahren
FileKeyEscrow escrow = new FileKeyEscrow((File)escrowDir);
escrow.setEscrowCert((X509Certificate)cert);
escrow.escrow((Key)key, (X509Certificate)userCert);
privaten Schlüssel aus dem Dateisystem wiederherstellen
escrow.setRecoveryKeys((KeyStore)ks);
Key a = escrow.recover((X509Certificate)userCert, password);
91