Dynamic IV 도출 지원 — DerivedKey iv 필드 추가, HsmKeyAndIvDerivationStrategy 구현

src/main/java/com/eactive/eai/common/security/CryptoModuleManager.java

@@ -144,8 +144,12 @@ public class CryptoModuleManager implements Lifecycle {
 				dynamicKeyCache.put(cacheKey, new CachedDerivedKey(derivedKey, ttl));
 			}
 		}
-
-		byte[] iv = vo.getIvHex() != null ? DatatypeConverter.parseHexBinary(vo.getIvHex()) : null;
+		byte[] iv = null;
+		if(derivedKey.getIv() != null) {
+			iv = derivedKey.getIv();
+		} else if (vo.getIvHex() != null){
+			iv = DatatypeConverter.parseHexBinary(vo.getIvHex());
+		}
 		return buildExtension(vo, iv, derivedKey.getEncKey(), derivedKey.getDecKey());
 	}
 

src/main/java/com/eactive/eai/common/security/keyderiv/DerivedKey.java

@@ -4,10 +4,19 @@ public class DerivedKey {
 
 	private final byte[] encKey;
 	private final byte[] decKey;
+	private final byte[] iv;
+	
 
 	public DerivedKey(byte[] encKey, byte[] decKey) {
 		this.encKey = encKey;
 		this.decKey = decKey != null ? decKey : encKey;
+		this.iv = null;
+	}
+
+	public DerivedKey(byte[] encKey, byte[] decKey, byte[] iv) {
+		this.encKey = encKey;
+		this.decKey = decKey != null ? decKey : encKey;
+		this.iv = iv;
 	}
 
 	public byte[] getEncKey() {
@@ -17,4 +26,8 @@ public class DerivedKey {
 	public byte[] getDecKey() {
 		return decKey;
 	}
+	
+	public byte[] getIv() {
+		return iv;
+	}
 }

src/main/java/com/eactive/eai/common/security/keyderiv/KeyDerivationStrategy.java

@@ -5,7 +5,8 @@ import java.util.Map;
 public interface KeyDerivationStrategy {
 	
 	public static final String PARAM_HSM_KEY_ALIAS = "hsmKeyAlias";
-	public static final String PARAM_CONTEXT_KEY   = "contextKey";
+	public static final String PARAM_HSM_IV_ALIAS = "hsmIvAlias";
+	public static final String PARAM_CONTEXT_KEY = "contextKey";
 
 	
 	/**

src/main/java/com/eactive/eai/common/security/keyderiv/strategy/BaseHsmKeyDerivationStrategy.java

@@ -24,6 +24,11 @@ public abstract class BaseHsmKeyDerivationStrategy implements KeyDerivationStrat
 		return masterKey.getEncoded();
 	}
 
+	protected byte[] getHsmIv(Map<String, String> params) throws HsmException {
+		String hsmKeyAlias = required(params, PARAM_HSM_IV_ALIAS);
+		return getHsmKey(hsmKeyAlias);
+	}
+
 	private String required(Map<String, String> params, String key) {
 		String value = params.get(key);
 		if (value == null || value.trim().isEmpty()) {

src/main/java/com/eactive/eai/common/security/keyderiv/strategy/HsmKeyAndIvDerivationStrategy.java

@@ -0,0 +1,25 @@
+package com.eactive.eai.common.security.keyderiv.strategy;
+
+import java.util.Map;
+
+import com.eactive.eai.common.security.keyderiv.DerivedKey;
+
+/**
+ * HSM 마스터키를 사용하는 전략
+ *
+ * key_deriv_params (JSON) 예시: { "hsmKeyAlias" : "MASTER_KEY_AES", "hsmIvAlias" : "MASTER_IV_AES"}
+ */
+public class HsmKeyAndIvDerivationStrategy extends BaseHsmKeyDerivationStrategy {
+
+	@Override
+	public DerivedKey deriveKey(Map<String, String> params, Map<String, String> runtimeContext) throws Exception {
+		byte[] masterKeyBytes = super.getHsmKey(params);
+		byte[] iv = super.getHsmIv(params);
+		return new DerivedKey(masterKeyBytes, masterKeyBytes, iv);
+	}
+
+	@Override
+	public String buildCacheKey(String cryptoName, Map<String, String> params, Map<String, String> runtimeContext) {
+		return cryptoName;
+	}
+}