Bouncy Castle Cryptography Library 1.80 · org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi

Modifier and Type	Class and Description
public static class	PKCS12KeyStoreSpi.BCPKCS12KeyStore
public static class	PKCS12KeyStoreSpi.BCPKCS12KeyStore3DES
public static class	PKCS12KeyStoreSpi.BCPKCS12KeyStoreAES256
public static class	PKCS12KeyStoreSpi.BCPKCS12KeyStoreAES256GCM
private class	PKCS12KeyStoreSpi.CertId
private static class	PKCS12KeyStoreSpi.DefaultSecretKeyProvider
public static class	PKCS12KeyStoreSpi.DefPKCS12KeyStore
public static class	PKCS12KeyStoreSpi.DefPKCS12KeyStore3DES
public static class	PKCS12KeyStoreSpi.DefPKCS12KeyStoreAES256
public static class	PKCS12KeyStoreSpi.DefPKCS12KeyStoreAES256GCM
private static class	PKCS12KeyStoreSpi.IgnoresCaseHashtable

Modifier and Type	Field and Description
private ASN1ObjectIdentifier	certAlgorithm
private CertificateFactory	certFact
pack-priv static final int	CERTIFICATE
private PKCS12KeyStoreSpi.IgnoresCaseHashtable	certs
private Hashtable<K, V>	chainCerts
private final JcaJceHelper	helper
private int	itCount
pack-priv static final int	KEY
pack-priv static final int	KEY_PRIVATE
pack-priv static final int	KEY_PUBLIC
pack-priv static final int	KEY_SECRET
private ASN1ObjectIdentifier	keyAlgorithm
private Hashtable<K, V>	keyCerts
private PKCS12KeyStoreSpi.IgnoresCaseHashtable	keys
private static final PKCS12KeyStoreSpi.DefaultSecretKeyProvider	keySizeProvider
private PKCS12KeyStoreSpi.IgnoresCaseHashtable	localIds
private AlgorithmIdentifier	macAlgorithm
private static final int	MIN_ITERATIONS
pack-priv static final int	NULL
pack-priv static final String	PKCS12_MAX_IT_COUNT_PROPERTY
protected SecureRandom	random
private static final int	SALT_SIZE
private int	saltLength
pack-priv static final int	SEALED
pack-priv static final int	SECRET

Access	Constructor and Description
public	PKCS12KeyStoreSpi(JcaJceHelper helper, ASN1ObjectIdentifier keyAlgorithm, ASN1ObjectIdentifier certAlgorithm)

Method Summary

Modifier and Type	Method and Description
private byte[]	calculatePbeMac(ASN1ObjectIdentifier oid, byte[] salt, int itCount, char[] password, boolean wrongPkcs12Zero, byte[] data)
private Cipher	createCipher(int mode, char[] password, AlgorithmIdentifier algId)
private SafeBag	createSafeBag(String certId, Certificate cert, boolean overwriteFriendlyName)
private SubjectKeyIdentifier	createSubjectKeyId(PublicKey pubKey)
protected byte[]	cryptData(boolean forEncryption, AlgorithmIdentifier algId, char[] password, boolean wrongPKCS12Zero, byte[] data)
private void	doStore(OutputStream stream, char[] password, boolean useDEREncoding, boolean overwriteFriendlyName)
public Enumeration<E>	engineAliases() Implements abstract java.security.KeyStoreSpi.engineAliases. Lists all the alias names of this keystore.
public boolean	engineContainsAlias(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineContainsAlias. Checks if the given alias exists in this keystore.
public void	engineDeleteEntry(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineDeleteEntry. this is not quite complete - we should follow up on the chain, a bit tricky if a certificate appears in more than one chain...
public Certificate	engineGetCertificate(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineGetCertificate. simply return the cert for the private key
public String	engineGetCertificateAlias(Certificate the certificate to match with. cert) Implements abstract java.security.KeyStoreSpi.engineGetCertificateAlias. Returns the (alias) name of the first keystore entry whose certificate matches the given certificate.
public Certificate[]	engineGetCertificateChain(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineGetCertificateChain. Returns the certificate chain associated with the given alias.
public Date	engineGetCreationDate(String the alias name alias) Implements abstract java.security.KeyStoreSpi.engineGetCreationDate. Returns the creation date of the entry identified by the given alias.
public Key	engineGetKey(String the alias name alias, char[] the password for recovering the key password) Implements abstract java.security.KeyStoreSpi.engineGetKey. Returns the key associated with the given alias, using the given password to recover it.
public boolean	engineIsCertificateEntry(String the alias for the keystore entry to be checked alias) Implements abstract java.security.KeyStoreSpi.engineIsCertificateEntry. Returns `true` if the entry identified by the given alias was created by a call to `setCertificateEntry`, or created by a call to `setEntry` with a `TrustedCertificateEntry`.
public boolean	engineIsKeyEntry(String the alias for the keystore entry to be checked alias) Implements abstract java.security.KeyStoreSpi.engineIsKeyEntry. Returns `true` if the entry identified by the given alias was created by a call to `setKeyEntry`, or created by a call to `setEntry` with a `PrivateKeyEntry` or a `SecretKeyEntry`.
public void	engineLoad(KeyStore.LoadStoreParameter the `KeyStore.LoadStoreParameter` that specifies how to load the keystore, which may be `null` loadStoreParameter) Overrides java.security.KeyStoreSpi.engineLoad. Loads the keystore using the given `KeyStore.LoadStoreParameter`.
public void	engineLoad(InputStream the input stream from which the keystore is loaded, or `null` stream, char[] the password used to check the integrity of the keystore, the password used to unlock the keystore, or `null` password) Implements abstract java.security.KeyStoreSpi.engineLoad. Loads the keystore from the given input stream.
public boolean	engineProbe(InputStream the keystore data to be probed stream) Overrides java.security.KeyStoreSpi.engineProbe. Probes the specified input stream to determine whether it contains a keystore that is supported by this implementation, or not.
public void	engineSetCertificateEntry(String the alias name alias, Certificate the certificate cert) Implements abstract java.security.KeyStoreSpi.engineSetCertificateEntry. Assigns the given certificate to the given alias.
public void	engineSetKeyEntry(String the alias name alias, byte[] the key (in protected format) to be associated with the alias key, Certificate[] the certificate chain for the corresponding public key (only useful if the protected key is of type `java.security.PrivateKey`). chain) Implements abstract java.security.KeyStoreSpi.engineSetKeyEntry. Assigns the given key (that has already been protected) to the given alias.
public void	engineSetKeyEntry(String the alias name alias, Key the key to be associated with the alias key, char[] the password to protect the key password, Certificate[] the certificate chain for the corresponding public key (only required if the given key is of type `java.security.PrivateKey`). chain) Implements abstract java.security.KeyStoreSpi.engineSetKeyEntry. Assigns the given key to the given alias, protecting it with the given password.
public int	engineSize() Implements abstract java.security.KeyStoreSpi.engineSize. Retrieves the number of entries in this keystore.
public void	engineStore(KeyStore.LoadStoreParameter the `KeyStore.LoadStoreParameter` that specifies how to store the keystore, which may be `null` param) Overrides java.security.KeyStoreSpi.engineStore. Stores this keystore using the given `KeyStore.LoadStoreParameter`.
public void	engineStore(OutputStream the output stream to which this keystore is written. stream, char[] the password to generate the keystore integrity check. May be `null` if the keystore does not support or require an integrity check. password) Implements abstract java.security.KeyStoreSpi.engineStore. Stores this keystore to the given output stream, and protects its integrity with the given password.
private ASN1Primitive	getAlgParams(ASN1ObjectIdentifier algorithm)
private static byte[]	getDigest(SubjectPublicKeyInfo spki)
private static int	getKeyLength(ASN1ObjectIdentifier oid)
private Set<E>	getUsedCertificateSet()
private static boolean	isPBKDF2(ASN1ObjectIdentifier oid)
private void	processKeyBag(SafeBag b)
private boolean	processShroudedKeyBag(SafeBag b, char[] password, boolean wrongPKCS12Zero)
public void	setRandom(SecureRandom rand) Implements org.bouncycastle.jce.interfaces.BCKeyStore.setRandom. set the random source for the key store
private void	syncFriendlyName()
protected PrivateKey	unwrapKey(AlgorithmIdentifier algId, byte[] data, char[] password, boolean wrongPKCS12Zero)
private int	validateIterationCount(BigInteger i)
protected byte[]	wrapKey(String algorithm, Key key, PKCS12PBEParams pbeParams, char[] password)
protected byte[]	wrapKey(EncryptionScheme encAlgId, Key key, PBKDF2Params pbeParams, char[] password)

Inherited from java.security.KeyStoreSpi:: engineEntryInstanceOf engineGetAttributes engineGetEntry engineSetEntry

public Class PKCS12KeyStoreSpi

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary