Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels) Summary: [Protected Ctors](https://developer.android.com/reference/javax/crypto/KeyGenerator#proctors) \| [Methods](https://developer.android.com/reference/javax/crypto/KeyGenerator#pubmethods) \| [Inherited Methods](https://developer.android.com/reference/javax/crypto/KeyGenerator#inhmethods)

# KeyGenerator

` public class KeyGenerator `   
` extends https://developer.android.com/reference/java/lang/Object ` ` `

|---|---|
| [java.lang.Object](https://developer.android.com/reference/java/lang/Object) ||
| ↳ | javax.crypto.KeyGenerator |

<br />

*** ** * ** ***

This class provides the functionality of a secret (symmetric) key generator.

Key generators are constructed using one of the `getInstance` class methods of this class.

KeyGenerator objects are reusable, i.e., after a key has been generated, the same KeyGenerator object can be re-used to generate further keys.

There are two ways to generate a key: in an algorithm-independent manner, and in an algorithm-specific manner. The only difference between the two is the initialization of the object:

- **Algorithm-Independent Initialization**

  All key generators share the concepts of a *keysize* and a *source of randomness*. There is an `https://developer.android.com/reference/javax/crypto/KeyGenerator#init(int,%20java.security.SecureRandom)` method in this KeyGenerator class that takes these two universally shared types of arguments. There is also one that takes just a `keysize` argument, and uses the SecureRandom implementation of the highest-priority installed provider as the source of randomness (or a system-provided source of randomness if none of the installed providers supply a SecureRandom implementation), and one that takes just a source of randomness.

  Since no other parameters are specified when you call the above algorithm-independent `init` methods, it is up to the provider what to do about the algorithm-specific parameters (if any) to be associated with each of the keys.
- **Algorithm-Specific Initialization**

  For situations where a set of algorithm-specific parameters already exists, there are two `https://developer.android.com/reference/javax/crypto/KeyGenerator#init(java.security.spec.AlgorithmParameterSpec)` methods that have an `AlgorithmParameterSpec` argument. One also has a `SecureRandom` argument, while the other uses the SecureRandom implementation of the highest-priority installed provider as the source of randomness (or a system-provided source of randomness if none of the installed providers supply a SecureRandom implementation).

In case the client does not explicitly initialize the KeyGenerator (via a call to an `init` method), each provider must supply (and document) a default initialization.

Android provides the following `KeyGenerator` algorithms:

| Algorithm | Supported API Levels |
|---|---|
| AES | 1+ |
| AESWRAP | 1-8 |
| ARC4 | 14+ |
| BLOWFISH | 10+ |
| ChaCha20 | 28+ |
| DES | 1+ |
| DESede | 1+ |
| DESedeWRAP | 1-8 |
| HmacMD5 | 1+ |
| HmacSHA1 | 11+ |
| HmacSHA224 | 1-8,22+ |
| HmacSHA256 | 1+ |
| HmacSHA384 | 1+ |
| HmacSHA512 | 1+ |
| RC4 | 10-13 |

These algorithms are described in the [KeyGenerator section](https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#KeyGenerator) of the Java Cryptography Architecture Standard Algorithm Name Documentation.

<br />

**See also:**

- `https://developer.android.com/reference/javax/crypto/SecretKey`

## Summary

| ### Protected constructors ||
|---|---|
| ` https://developer.android.com/reference/javax/crypto/KeyGenerator#KeyGenerator(javax.crypto.KeyGeneratorSpi,%20java.security.Provider,%20java.lang.String)(https://developer.android.com/reference/javax/crypto/KeyGeneratorSpi keyGenSpi, https://developer.android.com/reference/java/security/Provider provider, https://developer.android.com/reference/java/lang/String algorithm) ` Creates a KeyGenerator object. |

| ### Public methods ||
|---|---|
| ` final https://developer.android.com/reference/javax/crypto/SecretKey` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#generateKey()() ` Generates a secret key. |
| ` final https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#getAlgorithm()() ` Returns the algorithm name of this `KeyGenerator` object. |
| ` static final https://developer.android.com/reference/javax/crypto/KeyGenerator` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#getInstance(java.lang.String)(https://developer.android.com/reference/java/lang/String algorithm) ` Returns a `KeyGenerator` object that generates secret keys for the specified algorithm. |
| ` static final https://developer.android.com/reference/javax/crypto/KeyGenerator` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#getInstance(java.lang.String,%20java.lang.String)(https://developer.android.com/reference/java/lang/String algorithm, https://developer.android.com/reference/java/lang/String provider) ` Returns a `KeyGenerator` object that generates secret keys for the specified algorithm. |
| ` static final https://developer.android.com/reference/javax/crypto/KeyGenerator` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#getInstance(java.lang.String,%20java.security.Provider)(https://developer.android.com/reference/java/lang/String algorithm, https://developer.android.com/reference/java/security/Provider provider) ` Returns a `KeyGenerator` object that generates secret keys for the specified algorithm. |
| ` final https://developer.android.com/reference/java/security/Provider` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#getProvider()() ` Returns the provider of this `KeyGenerator` object. |
| ` final void` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#init(java.security.spec.AlgorithmParameterSpec,%20java.security.SecureRandom)(https://developer.android.com/reference/java/security/spec/AlgorithmParameterSpec params, https://developer.android.com/reference/java/security/SecureRandom random) ` Initializes this key generator with the specified parameter set and a user-provided source of randomness. |
| ` final void` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#init(java.security.SecureRandom)(https://developer.android.com/reference/java/security/SecureRandom random) ` Initializes this key generator. |
| ` final void` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#init(int)(int keysize) ` Initializes this key generator for a certain keysize. |
| ` final void` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#init(int,%20java.security.SecureRandom)(int keysize, https://developer.android.com/reference/java/security/SecureRandom random) ` Initializes this key generator for a certain keysize, using a user-provided source of randomness. |
| ` final void` | ` https://developer.android.com/reference/javax/crypto/KeyGenerator#init(java.security.spec.AlgorithmParameterSpec)(https://developer.android.com/reference/java/security/spec/AlgorithmParameterSpec params) ` Initializes this key generator with the specified parameter set. |

### Inherited methods

From class ` https://developer.android.com/reference/java/lang/Object ` ` https://developer.android.com/reference/java/lang/Object` ` https://developer.android.com/reference/java/lang/Object#clone()() `

Creates and returns a copy of this object.
` boolean` ` https://developer.android.com/reference/java/lang/Object#equals(java.lang.Object)(https://developer.android.com/reference/java/lang/Object obj) `

Indicates whether some other object is "equal to" this one.
` void` ` https://developer.android.com/reference/java/lang/Object#finalize()() `

Called by the garbage collector on an object when garbage collection determines that there are no more references to the object.
` final https://developer.android.com/reference/java/lang/Class<?>` ` https://developer.android.com/reference/java/lang/Object#getClass()() `

Returns the runtime class of this `Object`.
` int` ` https://developer.android.com/reference/java/lang/Object#hashCode()() `

Returns a hash code value for the object.
` final void` ` https://developer.android.com/reference/java/lang/Object#notify()() `

Wakes up a single thread that is waiting on this object's monitor.
` final void` ` https://developer.android.com/reference/java/lang/Object#notifyAll()() `

Wakes up all threads that are waiting on this object's monitor.
` https://developer.android.com/reference/java/lang/String` ` https://developer.android.com/reference/java/lang/Object#toString()() `

Returns a string representation of the object.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait(long,%20int)(long timeoutMillis, int nanos) `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*, or until a certain amount of real time has elapsed.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait(long)(long timeoutMillis) `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*, or until a certain amount of real time has elapsed.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait()() `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*.

## Protected constructors

### KeyGenerator

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
protected KeyGenerator (KeyGeneratorSpi keyGenSpi, 
                Provider provider, 
                String algorithm)
```

Creates a KeyGenerator object.

<br />

| Parameters ||
|---|---|
| `keyGenSpi` | `KeyGeneratorSpi`: the delegate <br /> |
| `provider` | `Provider`: the provider <br /> |
| `algorithm` | `String`: the algorithm <br /> |

## Public methods

### generateKey

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final SecretKey generateKey ()
```

Generates a secret key.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/javax/crypto/SecretKey` | the new key <br /> |

### getAlgorithm

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final String getAlgorithm ()
```

Returns the algorithm name of this `KeyGenerator` object.

This is the same name that was specified in one of the `getInstance` calls that created this `KeyGenerator` object.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | the algorithm name of this `KeyGenerator` object. <br /> |

### getInstance

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public static final KeyGenerator getInstance (String algorithm)
```

Returns a `KeyGenerator` object that generates secret keys for the specified algorithm.

This method traverses the list of registered security Providers, starting with the most preferred Provider. A new KeyGenerator object encapsulating the KeyGeneratorSpi implementation from the first Provider that supports the specified algorithm is returned.

Note that the list of registered providers may be retrieved via the `https://developer.android.com/reference/java/security/Security#getProviders()` method.

<br />

| Parameters ||
|---|---|
| `algorithm` | `String`: the standard name of the requested key algorithm. See the KeyGenerator section in the [Java Cryptography Architecture Standard Algorithm Name Documentation](https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#KeyGenerator) for information about standard algorithm names. <br /> |

| Returns ||
|---|---|
| `https://developer.android.com/reference/javax/crypto/KeyGenerator` | the new `KeyGenerator` object. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/NullPointerException` | if the specified algorithm is null. |
| `https://developer.android.com/reference/java/security/NoSuchAlgorithmException` | if no Provider supports a KeyGeneratorSpi implementation for the specified algorithm. |

**See also:**

- `https://developer.android.com/reference/java/security/Provider`

### getInstance

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public static final KeyGenerator getInstance (String algorithm, 
                String provider)
```

Returns a `KeyGenerator` object that generates secret keys for the specified algorithm.

A new KeyGenerator object encapsulating the KeyGeneratorSpi implementation from the specified provider is returned. The specified provider must be registered in the security provider list.

Note that the list of registered providers may be retrieved via the `https://developer.android.com/reference/java/security/Security#getProviders()` method.

<br />

| Parameters ||
|---|---|
| `algorithm` | `String`: the standard name of the requested key algorithm. See the KeyGenerator section in the [Java Cryptography Architecture Standard Algorithm Name Documentation](https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#KeyGenerator) for information about standard algorithm names. <br /> |
| `provider` | `String`: the name of the provider. <br /> |

| Returns ||
|---|---|
| `https://developer.android.com/reference/javax/crypto/KeyGenerator` | the new `KeyGenerator` object. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if the `provider` is null or empty. |
| `https://developer.android.com/reference/java/lang/NullPointerException` | if the specified algorithm is null. |
| `https://developer.android.com/reference/java/security/NoSuchAlgorithmException` | if a KeyGeneratorSpi implementation for the specified algorithm is not available from the specified provider. |
| `https://developer.android.com/reference/java/security/NoSuchProviderException` | if the specified provider is not registered in the security provider list. |

**See also:**

- `https://developer.android.com/reference/java/security/Provider`

### getInstance

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public static final KeyGenerator getInstance (String algorithm, 
                Provider provider)
```

Returns a `KeyGenerator` object that generates secret keys for the specified algorithm.

A new KeyGenerator object encapsulating the KeyGeneratorSpi implementation from the specified Provider object is returned. Note that the specified Provider object does not have to be registered in the provider list.

<br />

| Parameters ||
|---|---|
| `algorithm` | `String`: the standard name of the requested key algorithm. See the KeyGenerator section in the [Java Cryptography Architecture Standard Algorithm Name Documentation](https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#KeyGenerator) for information about standard algorithm names. <br /> |
| `provider` | `Provider`: the provider. <br /> |

| Returns ||
|---|---|
| `https://developer.android.com/reference/javax/crypto/KeyGenerator` | the new `KeyGenerator` object. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if the `provider` is null. |
| `https://developer.android.com/reference/java/lang/NullPointerException` | if the specified algorithm is null. |
| `https://developer.android.com/reference/java/security/NoSuchAlgorithmException` | if a KeyGeneratorSpi implementation for the specified algorithm is not available from the specified Provider object. |

**See also:**

- `https://developer.android.com/reference/java/security/Provider`

### getProvider

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final Provider getProvider ()
```

Returns the provider of this `KeyGenerator` object.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/security/Provider` | the provider of this `KeyGenerator` object <br /> |

### init

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void init (AlgorithmParameterSpec params, 
                SecureRandom random)
```

Initializes this key generator with the specified parameter set and a user-provided source of randomness.

<br />

| Parameters ||
|---|---|
| `params` | `AlgorithmParameterSpec`: the key generation parameters <br /> |
| `random` | `SecureRandom`: the source of randomness for this key generator <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/security/InvalidAlgorithmParameterException` | if `params` is inappropriate for this key generator |

### init

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void init (SecureRandom random)
```

Initializes this key generator.

<br />

| Parameters ||
|---|---|
| `random` | `SecureRandom`: the source of randomness for this generator <br /> |

### init

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void init (int keysize)
```

Initializes this key generator for a certain keysize.

If this key generator requires any random bytes, it will get them using the `https://developer.android.com/reference/java/security/SecureRandom` implementation of the highest-priority installed provider as the source of randomness. (If none of the installed providers supply an implementation of SecureRandom, a system-provided source of randomness will be used.)

<br />

| Parameters ||
|---|---|
| `keysize` | `int`: the keysize. This is an algorithm-specific metric, specified in number of bits. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/security/InvalidParameterException` | if the keysize is wrong or not supported. |

### init

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void init (int keysize, 
                SecureRandom random)
```

Initializes this key generator for a certain keysize, using a user-provided source of randomness.

<br />

| Parameters ||
|---|---|
| `keysize` | `int`: the keysize. This is an algorithm-specific metric, specified in number of bits. <br /> |
| `random` | `SecureRandom`: the source of randomness for this key generator <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/security/InvalidParameterException` | if the keysize is wrong or not supported. |

### init

Added in [API level 1](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void init (AlgorithmParameterSpec params)
```

Initializes this key generator with the specified parameter set.

If this key generator requires any random bytes, it will get them using the `https://developer.android.com/reference/java/security/SecureRandom` implementation of the highest-priority installed provider as the source of randomness. (If none of the installed providers supply an implementation of SecureRandom, a system-provided source of randomness will be used.)

<br />

| Parameters ||
|---|---|
| `params` | `AlgorithmParameterSpec`: the key generation parameters <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/security/InvalidAlgorithmParameterException` | if the given parameters are inappropriate for this key generator |