This is the API specification for version 7+ of the LunaProvider
(SafeNet Luna HSM Java Security Provider). There are two main ways to
use this provider:
- JCA interface: This is an implementation of the Java Security Provider specification that uses the Luna HSM for cryptographic operations and key storage. It is meant to be used as a drop-in replacement for the standard SUN provider, with certain limitations due to the nature of the HSM (i.e. methods that involve exporting private key data in clear text directly are unsupported).
- Proprietary interface: This makes use of the classes in the
com.safenetinc.lunapackage. It allows for a more direct interface to the HSM, using objects that wrap a PKCS11-like API. Users that choose to use this interface should be have a good understanding of the workings of the Luna HSM in addition to basic cryptographic knowledge. See the table in that section of the Javadoc for more details.
For the samples see:
<Luna client Install dir>/jsp/samples
(i.e. /usr/safenetinc/lunaclient/jsp/samples))
The basic architecture is as follows:
The proprietary(non-JCA) API is described in detail in package com.safenetinc.luna