org.eclipse.californium.scandium

Class CookieGenerator

java.lang.Object

org.eclipse.californium.scandium.CookieGenerator

public class CookieGenerator
extends Object

Generates a cookie in such a way that they can be verified without retaining any per-client state on the server.

 Cookie = HMAC(Secret, Client - IP, Client - Parameters)
 

as suggested here. Note: redesigned in 2.3 to use ThreadLocalMac instead of Mac.clone().

Field Summary

Fields

Modifier and Type	Field and Description
static long	COOKIE_LIFE_TIME Key lifetime in nanos.

Constructor Summary

Constructors

Constructor and Description
CookieGenerator()

Method Summary

Methods

Modifier and Type	Method and Description
byte[]	generateCookie(ClientHello clientHello) Generates a cookie in such a way that they can be verified without retaining any per-client state on the server.
byte[]	generatePastCookie(ClientHello clientHello) Generates the cookie using the secret key of the past period.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

COOKIE_LIFE_TIME

public static final long COOKIE_LIFE_TIME

Key lifetime in nanos.

Constructor Detail

CookieGenerator

public CookieGenerator()

Method Detail

generateCookie

public byte[] generateCookie(ClientHello clientHello)
                      throws GeneralSecurityException

Generates a cookie in such a way that they can be verified without retaining any per-client state on the server.

 Cookie = HMAC(Secret, Client - IP, Client - Parameters)
 

as suggested here.

Parameters:

clientHello - received client hello to generate a cookie for

Returns:

the cookie generated from the client's parameters

Throws:

GeneralSecurityException - if the cookie cannot be computed

generatePastCookie

public byte[] generatePastCookie(ClientHello clientHello)
                          throws GeneralSecurityException

Generates the cookie using the secret key of the past period.

Parameters:

clientHello - received client hello to generate a cookie for

Returns:

the cookie generated from the client's parameters. null, if no secret key of the past period is available.

Throws:

GeneralSecurityException - if the cookie cannot be computed

Since:

2.3