Modifier and Type	Class and Description
private class	AgileEncryptor.AgileCipherOutputStream 2.3.4.15 Data Encryption (Agile Encryption) The EncryptedPackage stream (1) MUST be encrypted in 4096-byte segments to facilitate nearly random access while allowing CBC modes to be used in the encryption process.

Modifier and Type	Field and Description
private byte[]	integritySalt
private byte[]	pwHash

Access	Constructor and Description
protected	AgileEncryptor()
protected	AgileEncryptor(AgileEncryptor other)

Method Summary

Modifier and Type	Method and Description
public void	confirmPassword(String password) Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword.
public void	confirmPassword(String password, byte[] keySpec, byte[] keySalt, byte[] verifier, byte[] verifierSalt, byte[] integritySalt) Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword.
public AgileEncryptor	copy() Implements abstract org.apache.poi.poifs.crypt.Encryptor.copy.
protected EncryptionDocument	createEncryptionDocument()
public OutputStream	getDataStream(DirectoryNode the node to write to dir) Implements abstract org.apache.poi.poifs.crypt.Encryptor.getDataStream. Return an output stream for encrypted data.
protected void	marshallEncryptionDocument(EncryptionDocument ed, LittleEndianByteArrayOutputStream os)
protected void	updateIntegrityHMAC(File tmpFile, int oleStreamSize) Generate an HMAC, as specified in [RFC2104], of the encrypted form of the data (message), which the DataIntegrity element will verify by using the Salt generated in step 2 as the key.

Inherited from org.apache.poi.poifs.crypt.Encryptor:: getDataStream getDataStream getEncryptionInfo getGenericProperties getInstance getSecretKey setChunkSize setEncryptionInfo setSecretKey

Field Detail

integritySalt	back to summary
private byte[] integritySalt

pwHash	back to summary
private byte[] pwHash

AgileEncryptor	back to summary
protected AgileEncryptor()

AgileEncryptor	back to summary
protected AgileEncryptor(AgileEncryptor other)

Method Detail

confirmPassword	back to summary
public void confirmPassword(String password) Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword. Annotations @Override

confirmPassword

back to summary

public void confirmPassword(String password)

Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword.

Annotations

@Override

confirmPassword	back to summary
public void confirmPassword(String password, byte[] keySpec, byte[] keySalt, byte[] verifier, byte[] verifierSalt, byte[] integritySalt) Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword. Annotations @Override

confirmPassword

back to summary

public void confirmPassword(String password, byte[] keySpec, byte[] keySalt, byte[] verifier, byte[] verifierSalt, byte[] integritySalt)

Implements abstract org.apache.poi.poifs.crypt.Encryptor.confirmPassword.

Annotations

@Override

copy	back to summary
public AgileEncryptor copy() Implements abstract org.apache.poi.poifs.crypt.Encryptor.copy. Annotations @Override

copy

back to summary

public AgileEncryptor copy()

Implements abstract org.apache.poi.poifs.crypt.Encryptor.copy.

Annotations

@Override

createEncryptionDocument	back to summary
protected EncryptionDocument createEncryptionDocument()

getDataStream	back to summary
public OutputStream getDataStream(DirectoryNode dir) throws IOException, GeneralSecurityException Implements abstract org.apache.poi.poifs.crypt.Encryptor.getDataStream. Doc from org.apache.poi.poifs.crypt.Encryptor.getDataStream. Return an output stream for encrypted data. Parameters dir:DirectoryNode the node to write to Returns:OutputStream encrypted stream Annotations @Override

getDataStream

back to summary

public OutputStream getDataStream(DirectoryNode dir) throws IOException, GeneralSecurityException

Implements abstract org.apache.poi.poifs.crypt.Encryptor.getDataStream.

Doc from org.apache.poi.poifs.crypt.Encryptor.getDataStream.

Return an output stream for encrypted data.

Parameters

dir:DirectoryNode: the node to write to

Returns:OutputStream

encrypted stream

Annotations

@Override

marshallEncryptionDocument	back to summary
protected void marshallEncryptionDocument(EncryptionDocument ed, LittleEndianByteArrayOutputStream os)

updateIntegrityHMAC	back to summary
protected void updateIntegrityHMAC(File tmpFile, int oleStreamSize) throws GeneralSecurityException, IOException Generate an HMAC, as specified in [RFC2104], of the encrypted form of the data (message), which the DataIntegrity element will verify by using the Salt generated in step 2 as the key. Note that the entire EncryptedPackage stream (1), including the StreamSize field, MUST be used as the message. Encrypt the HMAC as in step 3 by using a blockKey byte array consisting of the following bytes: 0xa0, 0x67, 0x7f, 0x02, 0xb2, 0x2c, 0x84, and 0x33.

updateIntegrityHMAC

back to summary

protected void updateIntegrityHMAC(File tmpFile, int oleStreamSize) throws GeneralSecurityException, IOException

Generate an HMAC, as specified in [RFC2104], of the encrypted form of the data (message), which the DataIntegrity element will verify by using the Salt generated in step 2 as the key. Note that the entire EncryptedPackage stream (1), including the StreamSize field, MUST be used as the message. Encrypt the HMAC as in step 3 by using a blockKey byte array consisting of the following bytes: 0xa0, 0x67, 0x7f, 0x02, 0xb2, 0x2c, 0x84, and 0x33.

org.apache.poi.poifs.crypt.agile back to summary

private Class AgileEncryptor.AgileCipherOutputStream

Class Inheritance

extends ChunkedCipherOutputStream

java.lang.Object
java.io.OutputStream
java.io.FilterOutputStream
org.apache.poi.poifs.crypt.ChunkedCipherOutputStream
org.apache.poi.poifs.crypt.agile.AgileEncryptor.AgileCipherOutputStream

2.3.4.15 Data Encryption (Agile Encryption) The EncryptedPackage stream (1) MUST be encrypted in 4096-byte segments to facilitate nearly random access while allowing CBC modes to be used in the encryption process. The initialization vector for the encryption process MUST be obtained by using the zero-based segment number as a blockKey and the binary form of the KeyData.saltValue as specified in section 2.3.4.12. The block number MUST be represented as a 32-bit unsigned integer. Data blocks MUST then be encrypted by using the initialization vector and the intermediate key obtained by decrypting the encryptedKeyValue from a KeyEncryptor contained within the KeyEncryptors sequence as specified in section 2.3.4.10. The final data block MUST be padded to the next integral multiple of the KeyData.blockSize value. Any padding bytes can be used. Note that the StreamSize field of the EncryptedPackage field specifies the number of bytes of unencrypted data as specified in section 2.3.4.4.

Constructor Summary

Access	Constructor and Description
public	AgileCipherOutputStream(DirectoryNode dir)

Method Summary

Modifier and Type	Method and Description
protected void	calculateChecksum(File fileOut, int oleStreamSize) Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.calculateChecksum.
protected void	createEncryptionInfoEntry(DirectoryNode dir, File tmpFile) Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.createEncryptionInfoEntry.
protected Cipher	initCipherForBlock(Cipher existing, int block, boolean lastChunk) Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.initCipherForBlock.
private void	marshallEncryptionRecord(LittleEndianByteArrayOutputStream bos)

Inherited from org.apache.poi.poifs.crypt.ChunkedCipherOutputStream:: close getChunk getChunkMask getPlainByteFlags getPos getTotalPos initCipherForBlock initCipherForBlockNoFlush invokeCipher setNextRecordSize write write write write writeChunk writePlain

Constructor Detail

AgileCipherOutputStream	back to summary
public AgileCipherOutputStream(DirectoryNode dir) throws IOException, GeneralSecurityException

Method Detail

calculateChecksum	back to summary
protected void calculateChecksum(File fileOut, int oleStreamSize) throws GeneralSecurityException, IOException Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.calculateChecksum. Annotations @Override

calculateChecksum

back to summary

protected void calculateChecksum(File fileOut, int oleStreamSize) throws GeneralSecurityException, IOException

Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.calculateChecksum.

Annotations

@Override

createEncryptionInfoEntry	back to summary
protected void createEncryptionInfoEntry(DirectoryNode dir, File tmpFile) throws IOException Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.createEncryptionInfoEntry. Annotations @Override

createEncryptionInfoEntry

back to summary

protected void createEncryptionInfoEntry(DirectoryNode dir, File tmpFile) throws IOException

Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.createEncryptionInfoEntry.

Annotations

@Override

initCipherForBlock	back to summary
protected Cipher initCipherForBlock(Cipher existing, int block, boolean lastChunk) throws GeneralSecurityException Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.initCipherForBlock. Annotations @Override

initCipherForBlock

back to summary

protected Cipher initCipherForBlock(Cipher existing, int block, boolean lastChunk) throws GeneralSecurityException

Implements abstract org.apache.poi.poifs.crypt.ChunkedCipherOutputStream.initCipherForBlock.

Annotations

@Override

marshallEncryptionRecord	back to summary
private void marshallEncryptionRecord(LittleEndianByteArrayOutputStream bos)

public Class AgileEncryptor

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class AgileEncryptor.AgileCipherOutputStream

Constructor Summary

Method Summary

Constructor Detail

Method Detail