Class RemoteRsaSecurityKey

Namespace

NuvTools.Security.Signing

Assembly

NuvTools.Security.dll

An RSA key this process holds only the public half of. Creating a signature is handed to a delegate — typically a call to the vault or module that keeps the private half.

public class RemoteRsaSecurityKey : RsaSecurityKey

Inheritance

object

SecurityKey

AsymmetricSecurityKey

RsaSecurityKey

RemoteRsaSecurityKey

Inherited Members

RsaSecurityKey.CanComputeJwkThumbprint()

RsaSecurityKey.ComputeJwkThumbprint()

RsaSecurityKey.HasPrivateKey

RsaSecurityKey.KeySize

RsaSecurityKey.Parameters

RsaSecurityKey.Rsa

SecurityKey.ToString()

SecurityKey.IsSupportedAlgorithm(string)

SecurityKey.KeyId

SecurityKey.CryptoProviderFactory

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

Remarks

It is an RsaSecurityKey so that everything that publishes or verifies with the public parameters — a JWKS endpoint, a token validator — keeps working unchanged. Only the creation of a signature is redirected, through the key's own CryptoProviderFactory.

Signatures are RSASSA-PKCS1-v1_5 with SHA-256 (RS256); the delegate receives the data to sign, not a digest, and returns the signature.

Constructors

RemoteRsaSecurityKey(RSAParameters, string, Func<byte[], byte[]>)

Creates the key.

public RemoteRsaSecurityKey(RSAParameters publicParameters, string keyId, Func<byte[], byte[]> sign)

Parameters

publicParameters RSAParameters

The modulus and exponent. Private parameters are not used.

keyId string

The identifier published with the key and written to every token.

sign Func<byte[], byte[]>

Signs the given data with the private half and returns the signature.

Properties

PrivateKeyStatus

Reports that a private key exists — elsewhere. Reporting the truth about this process would make every consumer conclude the key cannot sign.

public override PrivateKeyStatus PrivateKeyStatus { get; }

Property Value

PrivateKeyStatus

Methods

ToSigningCredentials()

The credentials to sign a token with this key.

public SigningCredentials ToSigningCredentials()

Returns

SigningCredentials