Algorithms Class — netty Architecture

Source Code

pkitesting/src/main/java/io/netty/pkitesting/Algorithms.java lines 29–140

final class Algorithms {
    private static Provider bouncyCastle;

    private Algorithms() {
    }

    static String oidForAlgorithmName(String algorithmIdentifier) {
        // See the Java Security Standard Algorithm Names documentation for names and links to RFCs.
        // https://docs.oracle.com/en/java/javase/22/docs/specs/security/standard-names.html#signature-algorithms
        switch (algorithmIdentifier.toLowerCase(Locale.ROOT)) {
            case "sha256withecdsa":
                return "1.2.840.10045.4.3.2";
            case "sha384withecdsa":
                return "1.2.840.10045.4.3.3";
            case "sha256withrsa":
                return "1.2.840.113549.1.1.11";
            case "sha384withrsa":
                return "1.2.840.113549.1.1.12";
            case "ed25519":
                return "1.3.101.112";
            case "ed448":
                return "1.3.101.113";
            case "ml-dsa-44":
                return "2.16.840.1.101.3.4.3.17";
            case "ml-dsa-65":
                return "2.16.840.1.101.3.4.3.18";
            case "ml-dsa-87":
                return "2.16.840.1.101.3.4.3.19";
            case "slh-dsa-sha2-128s":
                return "2.16.840.1.101.3.4.3.20";
            case "slh-dsa-sha2-128f":
                return "2.16.840.1.101.3.4.3.21";
            case "slh-dsa-shake-128s":
                return "2.16.840.1.101.3.4.3.22";
            case "slh-dsa-shake-128f":
                return "2.16.840.1.101.3.4.3.23";
            case "slh-dsa-sha2-192s":
                return "2.16.840.1.101.3.4.3.24";
            case "slh-dsa-sha2-192f":
                return "2.16.840.1.101.3.4.3.25";
            case "slh-dsa-shake-192s":
                return "2.16.840.1.101.3.4.3.26";
            case "slh-dsa-shake-192f":
                return "2.16.840.1.101.3.4.3.27";
            case "slh-dsa-sha2-256s":
                return "2.16.840.1.101.3.4.3.28";
            case "slh-dsa-sha2-256f":
                return "2.16.840.1.101.3.4.3.29";
            case "slh-dsa-shake-256s":
                return "2.16.840.1.101.3.4.3.30";
            case "slh-dsa-shake-256f":
                return "2.16.840.1.101.3.4.3.31";
            default:
                throw new UnsupportedOperationException("Algorithm not supported: " + algorithmIdentifier);
        }
    }

    static KeyPairGenerator keyPairGenerator(String keyType, AlgorithmParameterSpec spec,
            SecureRandom rng, Provider provider) throws GeneralSecurityException {
        try {
            KeyPairGenerator keyGen;
            if (provider == null) {
                keyGen = KeyPairGenerator.getInstance(keyType);
            } else {
                keyGen = KeyPairGenerator.getInstance(keyType, provider);
            }
            try {
                keyGen.initialize(spec, rng);
            } catch (UnsupportedOperationException ignore) {
                // The key generators for some algorithms, in some providers, don't support key gen initialization.
            }
            return keyGen;
        } catch (GeneralSecurityException e) {
            if (provider != null) {
                 // Don't fall back to BouncyCastle if we were explicitly told to use a specific provider.
                throw e;
            }
            try {
                KeyPairGenerator keyGen = KeyPairGenerator.getInstance(keyType, bouncyCastle());
                keyGen.initialize(spec, rng);
                return keyGen;