RSA keys that can be used only for RSASSA-PSS

import iaik.asn1.structures.AlgorithmID;
import iaik.pkcs.pkcs1.MGF1ParameterSpec;
import iaik.pkcs.pkcs1.MaskGenerationAlgorithm;
import iaik.pkcs.pkcs1.RSAPssParameterSpec;
import iaik.security.rsa.RSAPssKeyPairGenerator;
import iaik.security.rsa.RSAPssPrivateKey;
import iaik.security.rsa.RSAPssPublicKey;
import iaik.security.rsa.RSAPssSignature;

import java.security.AlgorithmParameters;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.MessageDigest;
import java.security.Signature;
import java.security.SignatureException;

import java.io.*;

public class pssGenKey {

  public static void main(String arg[]) {

     try {
        KeyPairGenerator keyGen =
           KeyPairGenerator.getInstance("RSASSA-PSS", "IAIK");

        keyGen.initialize(2048);

        KeyPair keyPair = keyGen.generateKeyPair();

        RSAPssPrivateKey privateKey = (RSAPssPrivateKey)keyPair.getPrivate();
        RSAPssPublicKey publicKey = (RSAPssPublicKey)keyPair.getPublic();

        FileOutputStream o = new FileOutputStream("privKey.der");
        privateKey.writeTo(o);
        o.close();
        FileOutputStream m = new FileOutputStream("pubKey.der");
        publicKey.writeTo(m);
        m.close();
     } catch (Exception ex) {
        System.err.println("Error: " + ex.getMessage());
     }

     System.exit(0);
  }
}

martin@askja:~/projects/iaik/sampleKey$ dumpasn1 -h privKey.der
   SEQUENCE {
     INTEGER 0
     SEQUENCE {
       OBJECT IDENTIFIER rsaPSS (1 2 840 113549 1 1 10)
       NULL
       }
     OCTET STRING, encapsulates {
       SEQUENCE {
         INTEGER 0
         INTEGER
           00 BE 08 F4 13 5F 4C DC C4 9C 7C FA E1 96 FD 51 [...]
         INTEGER 65537
         INTEGER
           00 87 8F 1F 7D 4A 38 2C 2B DC 6D 93 11 A5 81 A2
         INTEGER
           00 FA BB 10 57 4B C2 6C F9 C2 33 A3 1D 49 80 C4 [...]
         INTEGER
           00 C2 07 58 65 8F 06 A4 40 FD F3 70 60 5D 2D 42 [...]
         INTEGER
           43 07 1F 27 37 29 92 D8 72 02 3B E8 E8 6D 74 1C [...]
         INTEGER
           00 93 65 75 17 A1 B1 8F F1 F7 79 89 B3 0A D5 A9 [...]
         INTEGER
           1C 71 78 F4 26 55 88 92 11 AD A8 D9 0B 86 E6 9F [...]
         }
       }
     }

0 warnings, 0 errors.

martin@askja:~/projects/iaik/sampleKey$ dumpasn1 -h pubKey.der
   SEQUENCE {
     SEQUENCE {
       OBJECT IDENTIFIER rsaPSS (1 2 840 113549 1 1 10)
       NULL
       }
     BIT STRING, encapsulates {
       SEQUENCE {
         INTEGER
           00 BE 08 F4 13 5F 4C DC C4 9C 7C FA E1 96 FD 51 [...]
         INTEGER 65537
         }
       }
     }

0 warnings, 0 errors.

When the RSA private key owner wishes to limit the use of the public
key exclusively to RSASSA-PSS, then the id-RSASSA-PSS object
identifier MUST be used in the algorithm field within the subject
public key information, and, if present, the parameters field MUST
contain RSASSA-PSS-params. [...]