aboutsummaryrefslogtreecommitdiffstats
path: root/libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java
diff options
context:
space:
mode:
Diffstat (limited to 'libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java')
-rw-r--r--libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java179
1 files changed, 0 insertions, 179 deletions
diff --git a/libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java b/libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java
deleted file mode 100644
index ebf49c5e3..000000000
--- a/libraries/spongycastle/pkix/src/main/java/org/spongycastle/pkcs/jcajce/JcePKCSPBEOutputEncryptorBuilder.java
+++ /dev/null
@@ -1,179 +0,0 @@
-package org.spongycastle.pkcs.jcajce;
-
-import java.io.OutputStream;
-import java.security.Provider;
-import java.security.SecureRandom;
-
-import javax.crypto.Cipher;
-import javax.crypto.CipherOutputStream;
-import javax.crypto.SecretKey;
-import javax.crypto.SecretKeyFactory;
-import javax.crypto.spec.PBEKeySpec;
-import javax.crypto.spec.PBEParameterSpec;
-
-import org.spongycastle.asn1.ASN1ObjectIdentifier;
-import org.spongycastle.asn1.ASN1Primitive;
-import org.spongycastle.asn1.bc.BCObjectIdentifiers;
-import org.spongycastle.asn1.pkcs.EncryptionScheme;
-import org.spongycastle.asn1.pkcs.KeyDerivationFunc;
-import org.spongycastle.asn1.pkcs.PBES2Parameters;
-import org.spongycastle.asn1.pkcs.PBKDF2Params;
-import org.spongycastle.asn1.pkcs.PKCS12PBEParams;
-import org.spongycastle.asn1.pkcs.PKCSObjectIdentifiers;
-import org.spongycastle.asn1.x509.AlgorithmIdentifier;
-import org.spongycastle.crypto.PBEParametersGenerator;
-import org.spongycastle.jcajce.DefaultJcaJceHelper;
-import org.spongycastle.jcajce.JcaJceHelper;
-import org.spongycastle.jcajce.NamedJcaJceHelper;
-import org.spongycastle.jcajce.ProviderJcaJceHelper;
-import org.spongycastle.operator.DefaultSecretKeySizeProvider;
-import org.spongycastle.operator.GenericKey;
-import org.spongycastle.operator.OperatorCreationException;
-import org.spongycastle.operator.OutputEncryptor;
-import org.spongycastle.operator.SecretKeySizeProvider;
-
-public class JcePKCSPBEOutputEncryptorBuilder
-{
- private JcaJceHelper helper = new DefaultJcaJceHelper();
- private ASN1ObjectIdentifier algorithm;
- private ASN1ObjectIdentifier keyEncAlgorithm;
- private SecureRandom random;
- private SecretKeySizeProvider keySizeProvider = DefaultSecretKeySizeProvider.INSTANCE;
-
- public JcePKCSPBEOutputEncryptorBuilder(ASN1ObjectIdentifier algorithm)
- {
- if (isPKCS12(algorithm))
- {
- this.algorithm = algorithm;
- this.keyEncAlgorithm = algorithm;
- }
- else
- {
- this.algorithm = PKCSObjectIdentifiers.id_PBES2;
- this.keyEncAlgorithm = algorithm;
- }
- }
-
- public JcePKCSPBEOutputEncryptorBuilder setProvider(Provider provider)
- {
- this.helper = new ProviderJcaJceHelper(provider);
-
- return this;
- }
-
- public JcePKCSPBEOutputEncryptorBuilder setProvider(String providerName)
- {
- this.helper = new NamedJcaJceHelper(providerName);
-
- return this;
- }
-
- /**
- * Set the lookup provider of AlgorithmIdentifier returning key_size_in_bits used to
- * handle PKCS5 decryption.
- *
- * @param keySizeProvider a provider of integer secret key sizes.
- *
- * @return the current builder.
- */
- public JcePKCSPBEOutputEncryptorBuilder setKeySizeProvider(SecretKeySizeProvider keySizeProvider)
- {
- this.keySizeProvider = keySizeProvider;
-
- return this;
- }
-
- public OutputEncryptor build(final char[] password)
- throws OperatorCreationException
- {
- final Cipher cipher;
- SecretKey key;
-
- if (random == null)
- {
- random = new SecureRandom();
- }
-
- final AlgorithmIdentifier encryptionAlg;
- final byte[] salt = new byte[20];
- final int iterationCount = 1024;
-
- random.nextBytes(salt);
-
- try
- {
- if (algorithm.on(PKCSObjectIdentifiers.pkcs_12PbeIds))
- {
- PBEKeySpec pbeSpec = new PBEKeySpec(password);
-
- SecretKeyFactory keyFact = helper.createSecretKeyFactory(algorithm.getId());
-
- PBEParameterSpec defParams = new PBEParameterSpec(salt, iterationCount);
-
- key = keyFact.generateSecret(pbeSpec);
-
- cipher = helper.createCipher(algorithm.getId());
-
- cipher.init(Cipher.ENCRYPT_MODE, key, defParams);
-
- encryptionAlg = new AlgorithmIdentifier(algorithm, new PKCS12PBEParams(salt, iterationCount));
- }
- else if (algorithm.equals(PKCSObjectIdentifiers.id_PBES2))
- {
- SecretKeyFactory keyFact = helper.createSecretKeyFactory(PKCSObjectIdentifiers.id_PBKDF2.getId());
-
- key = keyFact.generateSecret(new PBEKeySpec(password, salt, iterationCount, keySizeProvider.getKeySize(new AlgorithmIdentifier(keyEncAlgorithm))));
-
- cipher = helper.createCipher(keyEncAlgorithm.getId());
-
- cipher.init(Cipher.ENCRYPT_MODE, key, random);
-
- PBES2Parameters algParams = new PBES2Parameters(
- new KeyDerivationFunc(PKCSObjectIdentifiers.id_PBKDF2, new PBKDF2Params(salt, iterationCount)),
- new EncryptionScheme(keyEncAlgorithm, ASN1Primitive.fromByteArray(cipher.getParameters().getEncoded())));
-
- encryptionAlg = new AlgorithmIdentifier(algorithm, algParams);
- }
- else
- {
- throw new OperatorCreationException("unrecognised algorithm");
- }
-
- return new OutputEncryptor()
- {
- public AlgorithmIdentifier getAlgorithmIdentifier()
- {
- return encryptionAlg;
- }
-
- public OutputStream getOutputStream(OutputStream out)
- {
- return new CipherOutputStream(out, cipher);
- }
-
- public GenericKey getKey()
- {
- if (isPKCS12(encryptionAlg.getAlgorithm()))
- {
- return new GenericKey(encryptionAlg, PBEParametersGenerator.PKCS5PasswordToBytes(password));
- }
- else
- {
- return new GenericKey(encryptionAlg, PBEParametersGenerator.PKCS12PasswordToBytes(password));
- }
- }
- };
- }
- catch (Exception e)
- {
- throw new OperatorCreationException("unable to create OutputEncryptor: " + e.getMessage(), e);
- }
- }
-
- private boolean isPKCS12(ASN1ObjectIdentifier algorithm)
- {
- return algorithm.on(PKCSObjectIdentifiers.pkcs_12PbeIds)
- || algorithm.on(BCObjectIdentifiers.bc_pbe_sha1_pkcs12)
- || algorithm.on(BCObjectIdentifiers.bc_pbe_sha256_pkcs12);
- }
-}