Bouncy Castle Cryptography Library 1.80 · org.bouncycastle.jcajce.provider.keystore.bcfks.BcFKSKeyStoreSpi

Modifier and Type	Class and Description
public static class	BcFKSKeyStoreSpi.Def
public static class	BcFKSKeyStoreSpi.DefCompat
public static class	BcFKSKeyStoreSpi.DefShared
public static class	BcFKSKeyStoreSpi.DefSharedCompat
private static class	BcFKSKeyStoreSpi.ExtKeyStoreException
private static class	BcFKSKeyStoreSpi.SharedKeyStoreSpi
public static class	BcFKSKeyStoreSpi.Std
public static class	BcFKSKeyStoreSpi.StdCompat
public static class	BcFKSKeyStoreSpi.StdShared
public static class	BcFKSKeyStoreSpi.StdSharedCompat

Modifier and Type	Field and Description
private static final BigInteger	CERTIFICATE
private Date	creationDate
private final Map<String, ObjectData>	entries
private final JcaJceHelper	helper
private AlgorithmIdentifier	hmacAlgorithm
private KeyDerivationFunc	hmacPkbdAlgorithm
private Date	lastModifiedDate
private static final Map<String, ASN1ObjectIdentifier>	oidMap
private static final BigInteger	PRIVATE_KEY
private final Map<String, PrivateKey>	privateKeyCache
private static final BigInteger	PROTECTED_PRIVATE_KEY
private static final BigInteger	PROTECTED_SECRET_KEY
private static final Map<ASN1ObjectIdentifier, String>	publicAlgMap
private static final BigInteger	SECRET_KEY
private AlgorithmIdentifier	signatureAlgorithm
private ASN1ObjectIdentifier	storeEncryptionAlgorithm
private BCFKSLoadStoreParameter.CertChainValidator	validator
private PublicKey	verificationKey

Access	Constructor and Description
pack-priv	BcFKSKeyStoreSpi(JcaJceHelper helper)

Method Summary

Modifier and Type	Method and Description
private byte[]	calculateMac(byte[] content, AlgorithmIdentifier algorithm, KeyDerivationFunc pbkdAlgorithm, char[] password)
private Cipher	createCipher(String algorithm, byte[] keyBytes)
private EncryptedPrivateKeyData	createPrivateKeySequence(EncryptedPrivateKeyInfo encryptedPrivateKeyInfo, Certificate[] chain)
private Certificate	decodeCertificate(Object cert)
private byte[]	decryptData(String purpose, AlgorithmIdentifier protectAlgId, char[] password, byte[] encryptedData)
public Enumeration<String>	engineAliases() Implements abstract java.security.KeyStoreSpi.engineAliases. Lists all the alias names of this keystore.
public boolean	engineContainsAlias(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineContainsAlias. Checks if the given alias exists in this keystore.
public void	engineDeleteEntry(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineDeleteEntry. Deletes the entry identified by the given alias from this keystore.
public Certificate	engineGetCertificate(String the alias name s) Implements abstract java.security.KeyStoreSpi.engineGetCertificate. Returns the certificate associated with the given alias.
public String	engineGetCertificateAlias(Certificate the certificate to match with. certificate) Implements abstract java.security.KeyStoreSpi.engineGetCertificateAlias. Returns the (alias) name of the first keystore entry whose certificate matches the given certificate.
public Certificate[]	engineGetCertificateChain(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineGetCertificateChain. Returns the certificate chain associated with the given alias.
public Date	engineGetCreationDate(String the alias name s) Implements abstract java.security.KeyStoreSpi.engineGetCreationDate. Returns the creation date of the entry identified by the given alias.
public Key	engineGetKey(String the alias name alias, char[] the password for recovering the key password) Implements abstract java.security.KeyStoreSpi.engineGetKey. Returns the key associated with the given alias, using the given password to recover it.
public boolean	engineIsCertificateEntry(String the alias for the keystore entry to be checked alias) Implements abstract java.security.KeyStoreSpi.engineIsCertificateEntry. Returns `true` if the entry identified by the given alias was created by a call to `setCertificateEntry`, or created by a call to `setEntry` with a `TrustedCertificateEntry`.
public boolean	engineIsKeyEntry(String the alias for the keystore entry to be checked alias) Implements abstract java.security.KeyStoreSpi.engineIsKeyEntry. Returns `true` if the entry identified by the given alias was created by a call to `setKeyEntry`, or created by a call to `setEntry` with a `PrivateKeyEntry` or a `SecretKeyEntry`.
public void	engineLoad(KeyStore.LoadStoreParameter the `KeyStore.LoadStoreParameter` that specifies how to load the keystore, which may be `null` parameter) Overrides java.security.KeyStoreSpi.engineLoad. Loads the keystore using the given `KeyStore.LoadStoreParameter`.
public void	engineLoad(InputStream the input stream from which the keystore is loaded, or `null` inputStream, char[] the password used to check the integrity of the keystore, the password used to unlock the keystore, or `null` password) Implements abstract java.security.KeyStoreSpi.engineLoad. Loads the keystore from the given input stream.
public void	engineSetCertificateEntry(String the alias name alias, Certificate the certificate certificate) Implements abstract java.security.KeyStoreSpi.engineSetCertificateEntry. Assigns the given certificate to the given alias.
public void	engineSetKeyEntry(String the alias name alias, Key the key to be associated with the alias key, char[] the password to protect the key password, Certificate[] the certificate chain for the corresponding public key (only required if the given key is of type `java.security.PrivateKey`). chain) Implements abstract java.security.KeyStoreSpi.engineSetKeyEntry. Assigns the given key to the given alias, protecting it with the given password.
public void	engineSetKeyEntry(String the alias name alias, byte[] the key (in protected format) to be associated with the alias keyBytes, Certificate[] the certificate chain for the corresponding public key (only useful if the protected key is of type `java.security.PrivateKey`). chain) Implements abstract java.security.KeyStoreSpi.engineSetKeyEntry. Assigns the given key (that has already been protected) to the given alias.
public int	engineSize() Implements abstract java.security.KeyStoreSpi.engineSize. Retrieves the number of entries in this keystore.
public void	engineStore(KeyStore.LoadStoreParameter the `KeyStore.LoadStoreParameter` that specifies how to store the keystore, which may be `null` parameter) Overrides java.security.KeyStoreSpi.engineStore. Stores this keystore using the given `KeyStore.LoadStoreParameter`.
public void	engineStore(OutputStream the output stream to which this keystore is written. outputStream, char[] the password to generate the keystore integrity check. May be `null` if the keystore does not support or require an integrity check. password) Implements abstract java.security.KeyStoreSpi.engineStore. Stores this keystore to the given output stream, and protects its integrity with the given password.
private Date	extractCreationDate(ObjectData entry, Date creationDate)
private byte[]	generateKey(KeyDerivationFunc pbkdAlgorithm, String purpose, char[] password, int defKeySize)
private KeyDerivationFunc	generatePkbdAlgorithmIdentifier(PBKDFConfig pbkdfConfig, int keySizeInBytes)
private KeyDerivationFunc	generatePkbdAlgorithmIdentifier(KeyDerivationFunc baseAlg, int keySizeInBytes)
private KeyDerivationFunc	generatePkbdAlgorithmIdentifier(ASN1ObjectIdentifier derivationAlgorithm, int keySizeInBytes)
private AlgorithmIdentifier	generateSignatureAlgId(Key key, BCFKSLoadStoreParameter.SignatureAlgorithm sigAlg)
private SecureRandom	getDefaultSecureRandom()
private EncryptedObjectStoreData	getEncryptedObjectStoreData(AlgorithmIdentifier integrityAlgorithm, char[] password)
private static String	getPublicKeyAlg(ASN1ObjectIdentifier oid)
private boolean	isSimilarHmacPbkd(PBKDFConfig storePBKDFConfig, KeyDerivationFunc hmacPkbdAlgorithm)
private void	verifyMac(byte[] content, PbkdMacIntegrityCheck integrityCheck, char[] password)
private void	verifySig(ASN1Encodable store, SignatureCheck integrityCheck, PublicKey key)

Inherited from java.security.KeyStoreSpi:: engineEntryInstanceOf engineGetAttributes engineGetEntry engineProbe engineSetEntry

pack-priv Class BcFKSKeyStoreSpi

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary