com.evolveum.midpoint.prism.crypto

Class AESProtector

java.lang.Object

com.evolveum.midpoint.prism.crypto.BaseProtector

com.evolveum.midpoint.prism.crypto.AESProtector

All Implemented Interfaces:

Protector

public class AESProtector
extends BaseProtector

Class that manages encrypted string values. Java Cryptography Extension is needed because this class is using AES-256 for encrypting/decrypting xml data.

Author:

Radovan Semancik, lazyman

Constructor Summary

Constructors

Constructor and Description
AESProtector()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	compare(ProtectedStringType a, ProtectedStringType b)
protected <T> byte[]	decryptBytes(ProtectedData<T> protectedData)
<T> void	encrypt(ProtectedData<T> protectedData)
String	getEncryptionAlgorithm()
KeyStore	getKeyStore()
String	getKeyStorePath()
String	getRequestedJceProviderName()
String	getSecretKeyDigest(SecretKey key)
List<TrustManager>	getTrustManagers() Returns a list of trust managers that will be used to validate communicating party credentials.
void	init()
void	setEncryptionAlgorithm(String encryptionAlgorithm)
void	setEncryptionKeyAlias(String encryptionKeyAlias)
void	setKeyStorePassword(String keyStorePassword)
void	setKeyStorePath(String keyStorePath)
void	setRequestedJceProviderName(String requestedJceProviderName)

Methods inherited from class com.evolveum.midpoint.prism.crypto.BaseProtector

decrypt, decryptString, encryptString, isEncrypted

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AESProtector

public AESProtector()

Method Detail

init

public void init()

Throws:

SystemException - if jceks keystore is not available on getKeyStorePath()

getRequestedJceProviderName

public String getRequestedJceProviderName()

setRequestedJceProviderName

public void setRequestedJceProviderName(String requestedJceProviderName)

getEncryptionAlgorithm

public String getEncryptionAlgorithm()

setEncryptionAlgorithm

public void setEncryptionAlgorithm(String encryptionAlgorithm)

decryptBytes

protected <T> byte[] decryptBytes(ProtectedData<T> protectedData)
                       throws SchemaException,
                              EncryptionException

Specified by:

decryptBytes in class BaseProtector

Throws:

SchemaException

EncryptionException

encrypt

public <T> void encrypt(ProtectedData<T> protectedData)
             throws EncryptionException

Throws:

EncryptionException

getSecretKeyDigest

public String getSecretKeyDigest(SecretKey key)
                          throws EncryptionException

Throws:

EncryptionException

getTrustManagers

public List<TrustManager> getTrustManagers()

Description copied from interface: Protector

Returns a list of trust managers that will be used to validate communicating party credentials. (e.g. used to validate remote connector connections).

getKeyStore

public KeyStore getKeyStore()

setEncryptionKeyAlias

public void setEncryptionKeyAlias(String encryptionKeyAlias)

Parameters:

encryptionKeyAlias - Alias of the encryption key SecretKey which is used for encryption

Throws:

IllegalArgumentException - if encryption key digest is null or empty string

setKeyStorePassword

public void setKeyStorePassword(String keyStorePassword)

Parameters:

keyStorePassword -

Throws:

IllegalArgumentException - if keystore password is null string

setKeyStorePath

public void setKeyStorePath(String keyStorePath)

Parameters:

keyStorePath -

Throws:

IllegalArgumentException - if keystore path is null string

getKeyStorePath

public String getKeyStorePath()

compare

public boolean compare(ProtectedStringType a,
              ProtectedStringType b)
                throws EncryptionException

Throws:

EncryptionException