是否可以将自己的密钥放入AndroidKeyStore？

Question

I am thinking about this question:

Is possible to put my own key to AndroidKeyStore and using it for other operations (signing some text/docs)?

I have generated a PostQuantum keys (priv/pub) for signing algorithm SPHINCS , that includes BouncyCastle library.

Is there some ways, how to initialize my plan?

Thank you for your hints :)

There is an example code, how I am generating a priv/pub keys by BouncyCastle SPHINCS :

SPHINCS256KeyPairGenerator generator = new SPHINCS256KeyPairGenerator();
generator.init(new SPHINCS256KeyGenerationParameters(new RiggedRandom(), new SHA3Digest(256)));
AsymmetricCipherKeyPair kp = generator.generateKeyPair();

SPHINCSPrivateKeyParameters priv = (SPHINCSPrivateKeyParameters)kp.getPrivate();
SPHINCSPublicKeyParameters pub = (SPHINCSPublicKeyParameters)kp.getPublic();

Answer 1

Try something like this(Sample for Andorid M(6.0)+ )

    @TargetApi(Build.VERSION_CODES.M)
        private void initGeneratorWithKeyGenParameterSpec() {
            try {
                KeyPairGenerator generator = KeyPairGenerator.getInstance("ALGORITHM", "AndroidKeyStore");
                String alias = "myAlias";
                Calendar startDate = Calendar.getInstance();
                Calendar endDate = Calendar.getInstance();
                endDate.add(Calendar.YEAR, 20);
                KeyGenParameterSpec.Builder builder = new KeyGenParameterSpec.Builder(
                        alias, KeyProperties.PURPOSE_ENCRYPT|KeyProperties.PURPOSE_DECRYPT)
                        .setCertificateSubject(new X500Principal("CN=" + alias))
                        .setCertificateSerialNumber(BigInteger.valueOf(1337))
                        .setCertificateNotBefore(startDate.getTime())
                        .setCertificateNotAfter(endDate.getTime())
                        .setBlockModes(KeyProperties.BLOCK_MODE_ECB)
                        .setDigests(KeyProperties.DIGEST_SHA256)
                        .setKeySize(2048)
                        .setEncryptionPaddings(KeyProperties.ENCRYPTION_PADDING_RSA_PKCS1);
                generator.initialize(builder.build());
                generator.generateKeyPair();
            } catch (Exception e) {
                mLogger.logException(Logger.Level.ERROR, Logger.Category.ENCRYPTION, "KeyStoreWrapper", "initGeneratorWithKeyGenParameterSpec()", e);
            }