Class CryptoUtil.KEMEncapsulation

java.lang.Object
com.netscape.cmsutil.crypto.CryptoUtil.KEMEncapsulation
Enclosing class:
CryptoUtil
public static class CryptoUtil.KEMEncapsulation extends Object
Result of ML-KEM encapsulation containing shared secret and ciphertext. This structure holds intermediate values for PQC key wrapping. The final LDAP storage format remains compatible with non-PQC structure: 
SEQUENCE {
    kemCiphertext OCTET STRING,     // ML-KEM ciphertext (analogous to wrapped session key)
    wrappedPrivate OCTET STRING     // AES-KWP wrapped private key
}
Both PQC and non-PQC use the same privateKeyData attribute in KeyRecord LDAP entries.

  • Field Details

    • sharedSecret

      public final org.mozilla.jss.crypto.SymmetricKey sharedSecret

    • ciphertext

      public final byte[] ciphertext

  • Constructor Details

    • KEMEncapsulation

      public KEMEncapsulation(org.mozilla.jss.crypto.SymmetricKey sharedSecret, byte[] ciphertext)