1 files changed, 72 insertions, 0 deletions
diff --git a/core/src/main/java/org/spongycastle/crypto/tls/DigitallySigned.java b/core/src/main/java/org/spongycastle/crypto/tls/DigitallySigned.java
new file mode 100644
index 00000000..8ab8a8d4
--- /dev/null
+++ b/core/src/main/java/org/spongycastle/crypto/tls/DigitallySigned.java
@@ -0,0 +1,72 @@
+package org.spongycastle.crypto.tls;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+
+public class DigitallySigned
+{
+    protected SignatureAndHashAlgorithm algorithm;
+    protected byte[] signature;
+
+    public DigitallySigned(SignatureAndHashAlgorithm algorithm, byte[] signature)
+    {
+        if (signature == null)
+        {
+            throw new IllegalArgumentException("'signature' cannot be null");
+        }
+
+        this.algorithm = algorithm;
+        this.signature = signature;
+    }
+
+    /**
+     * @return a {@link SignatureAndHashAlgorithm} (or null before TLS 1.2).
+     */
+    public SignatureAndHashAlgorithm getAlgorithm()
+    {
+        return algorithm;
+    }
+
+    public byte[] getSignature()
+    {
+        return signature;
+    }
+
+    /**
+     * Encode this {@link DigitallySigned} to an {@link OutputStream}.
+     * 
+     * @param output
+     *            the {@link OutputStream} to encode to.
+     * @throws IOException
+     */
+    public void encode(OutputStream output) throws IOException
+    {
+        if (algorithm != null)
+        {
+            algorithm.encode(output);
+        }
+        TlsUtils.writeOpaque16(signature, output);
+    }
+
+    /**
+     * Parse a {@link DigitallySigned} from an {@link InputStream}.
+     * 
+     * @param context
+     *            the {@link TlsContext} of the current connection.
+     * @param input
+     *            the {@link InputStream} to parse from.
+     * @return a {@link DigitallySigned} object.
+     * @throws IOException
+     */
+    public static DigitallySigned parse(TlsContext context, InputStream input) throws IOException
+    {
+        SignatureAndHashAlgorithm algorithm = null;
+        if (TlsUtils.isTLSv12(context))
+        {
+            algorithm = SignatureAndHashAlgorithm.parse(input);
+        }
+        byte[] signature = TlsUtils.readOpaque16(input);
+        return new DigitallySigned(algorithm, signature);
+    }
+}