Top Inners Fields Constructors Methods
org.bouncycastle.openpgp.operator.bc

public Class BcAEADUtil

extends Object
Class Inheritance
Imports
java.io.IOException, .InputStream, .OutputStream, org.bouncycastle.bcpg.AEADAlgorithmTags, .AEADEncDataPacket, .AEADUtils, .SymmetricEncIntegrityPacket, .SymmetricKeyAlgorithmTags, .SymmetricKeyUtils, org.bouncycastle.crypto.BlockCipher, .InvalidCipherTextException, org.bouncycastle.crypto.digests.SHA256Digest, org.bouncycastle.crypto.engines.AESEngine, .CamelliaEngine, org.bouncycastle.crypto.generators.HKDFBytesGenerator, org.bouncycastle.crypto.modes.AEADBlockCipher, .EAXBlockCipher, .GCMBlockCipher, .OCBBlockCipher, org.bouncycastle.crypto.params.AEADParameters, .HKDFParameters, .KeyParameter, org.bouncycastle.openpgp.PGPException, .PGPSessionKey, org.bouncycastle.openpgp.operator.PGPDataDecryptor, .PGPDigestCalculator, org.bouncycastle.util.Arrays, .Exceptions, .Pack, org.bouncycastle.util.io.Streams

Nested and Inner Type Summary

Modifier and TypeClass and Description
private static interface
protected static class
protected static class

Field Summary

Modifier and TypeField and Description
pack-priv static final String
private static final String
pack-priv static final String

Constructor Summary

AccessConstructor and Description
public

Method Summary

Modifier and TypeMethod and Description
public static AEADBlockCipher
createAEADCipher(int encAlgorithm, int aeadAlgorithm)

private static AEADBlockCipher
createAEADCipher(int aeadAlgorithm, BcAEADUtil.Engine engine)

pack-priv static PGPDataDecryptor

Returns:

decryptor for AEAD encrypted data packets
createOpenPgpV5DataDecryptor
(AEADEncDataPacket
AEAD encrypted data packet
aeadEncDataPacket
,
PGPSessionKey
session key retrieved from a version 5 symmetric-key encrypted session key packet or version 3 public-key encrypted session key packet.
sessionKey
)

Create a decryptor for OpenPGP v5 AED (AEAD Encrypted Data) packets.

pack-priv static PGPDataDecryptor

Returns:

decryptor
createOpenPgpV6DataDecryptor
(SymmetricEncIntegrityPacket
version 2 symmetrically encrypted integrity-protected data packet
seipd
,
PGPSessionKey
session key as retrieved from a version 6 symmetric- or public-key-encrypted session key packet.
sessionKey
)

Create a data decryptor for SEIPD v2 packets used in OpenPGP v6.

pack-priv static byte[][]

Returns:

message key and separate IV
deriveMessageKeyAndIv
(int
AEAD algorithm
aeadAlgo
,
int
symmetric cipher algorithm
cipherAlgo
,
byte[]
session key
sessionKey
,
byte[]
salt
salt
,
byte[]
HKDF info
hkdfInfo
)

Derive a message key and IV from the given session key.

pack-priv static byte[]
generateHKDFBytes(byte[] sessionKey, byte[] salt, byte[] hkdfInfo, int len)

protected static long

Returns:

decoded length
getChunkLength
(int
encoded chunk size
chunkSize
)

Calculate an actual chunk length from the encoded chunk size.

protected static byte[]

Returns:

nonce
getNonce
(byte[]
initialization vector
iv
,
long
chunk index
chunkIndex
)

Generate a nonce by xor-ing the given iv with the chunk index.

pack-priv static byte[]
processAEADData(boolean forEncryption, int encAlgorithm, int aeadAlgorithm, byte[] key, byte[] iv, byte[] aad, byte[] msg, int off, int len, String errorMessage)

pack-priv static byte[]
processAEADData(boolean forEncryption, AEADBlockCipher cipher, KeyParameter key, byte[] iv, byte[] aad, byte[] msg, int off, int msgLen)

pack-priv static byte[]
processAeadKeyData(boolean forEncryption, int encAlgorithm, int aeadAlgorithm, byte[] s2kKey, byte[] iv, int packetTag, int keyVersion, byte[] keyData, int keyOff, int keyLen, byte[] pubkeyData)

protected static void
xorChunkId(byte[]
byte array
nonce
,
long
chunk index
chunkIndex
)

XOR the byte array with the chunk index in-place.

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

GetEskAndTagErrorMessageback to summary
pack-priv static final String GetEskAndTagErrorMessage
ProcessAeadKeyDataErrorMessageback to summary
private static final String ProcessAeadKeyDataErrorMessage
RecoverAEADEncryptedSessionDataErrorMessageback to summary
pack-priv static final String RecoverAEADEncryptedSessionDataErrorMessage

Constructor Detail

BcAEADUtilback to summary
public BcAEADUtil()

Method Detail

createAEADCipherback to summary
public static AEADBlockCipher createAEADCipher(int encAlgorithm, int aeadAlgorithm) throws PGPException
createAEADCipherback to summary
private static AEADBlockCipher createAEADCipher(int aeadAlgorithm, BcAEADUtil.Engine engine) throws PGPException
createOpenPgpV5DataDecryptorback to summary
pack-priv static PGPDataDecryptor createOpenPgpV5DataDecryptor(AEADEncDataPacket aeadEncDataPacket, PGPSessionKey sessionKey) throws PGPException

Create a decryptor for OpenPGP v5 AED (AEAD Encrypted Data) packets. This is type of packet is used by GnuPG. For version 2 SEIPD packets used in OpenPGP v6, see createOpenPgpV6DataDecryptor(SymmetricEncIntegrityPacket, PGPSessionKey) instead.

Parameters
aeadEncDataPacket:AEADEncDataPacket

AEAD encrypted data packet

sessionKey:PGPSessionKey

session key retrieved from a version 5 symmetric-key encrypted session key packet or version 3 public-key encrypted session key packet.

Returns:PGPDataDecryptor

decryptor for AEAD encrypted data packets

createOpenPgpV6DataDecryptorback to summary
pack-priv static PGPDataDecryptor createOpenPgpV6DataDecryptor(SymmetricEncIntegrityPacket seipd, PGPSessionKey sessionKey) throws PGPException

Create a data decryptor for SEIPD v2 packets used in OpenPGP v6. Those are symmetrically encrypted integrity protected data packets that make use of AEAD.

Parameters
seipd:SymmetricEncIntegrityPacket

version 2 symmetrically encrypted integrity-protected data packet

sessionKey:PGPSessionKey

session key as retrieved from a version 6 symmetric- or public-key-encrypted session key packet.

Returns:PGPDataDecryptor

decryptor

deriveMessageKeyAndIvback to summary
pack-priv static byte[][] deriveMessageKeyAndIv(int aeadAlgo, int cipherAlgo, byte[] sessionKey, byte[] salt, byte[] hkdfInfo)

Derive a message key and IV from the given session key. The result is two byte arrays containing the key bytes and the IV.

Parameters
aeadAlgo:int

AEAD algorithm

cipherAlgo:int

symmetric cipher algorithm

sessionKey:byte[]

session key

salt:byte[]

salt

hkdfInfo:byte[]

HKDF info

Returns:byte[][]

message key and separate IV

generateHKDFBytesback to summary
pack-priv static byte[] generateHKDFBytes(byte[] sessionKey, byte[] salt, byte[] hkdfInfo, int len)
getChunkLengthback to summary
protected static long getChunkLength(int chunkSize)

Calculate an actual chunk length from the encoded chunk size.

Parameters
chunkSize:int

encoded chunk size

Returns:long

decoded length

getNonceback to summary
protected static byte[] getNonce(byte[] iv, long chunkIndex)

Generate a nonce by xor-ing the given iv with the chunk index.

Parameters
iv:byte[]

initialization vector

chunkIndex:long

chunk index

Returns:byte[]

nonce

processAEADDataback to summary
pack-priv static byte[] processAEADData(boolean forEncryption, int encAlgorithm, int aeadAlgorithm, byte[] key, byte[] iv, byte[] aad, byte[] msg, int off, int len, String errorMessage) throws PGPException
processAEADDataback to summary
pack-priv static byte[] processAEADData(boolean forEncryption, AEADBlockCipher cipher, KeyParameter key, byte[] iv, byte[] aad, byte[] msg, int off, int msgLen) throws InvalidCipherTextException
processAeadKeyDataback to summary
pack-priv static byte[] processAeadKeyData(boolean forEncryption, int encAlgorithm, int aeadAlgorithm, byte[] s2kKey, byte[] iv, int packetTag, int keyVersion, byte[] keyData, int keyOff, int keyLen, byte[] pubkeyData) throws PGPException
xorChunkIdback to summary
protected static void xorChunkId(byte[] nonce, long chunkIndex)

XOR the byte array with the chunk index in-place.

Parameters
nonce:byte[]

byte array

chunkIndex:long

chunk index

org.bouncycastle.openpgp.operator.bc back to summary

private Interface BcAEADUtil.Engine


Method Summary

Modifier and TypeMethod and Description
public BlockCipher

Method Detail

newInstanceback to summary
public BlockCipher newInstance()
org.bouncycastle.openpgp.operator.bc back to summary

protected Class BcAEADUtil.PGPAeadInputStream

extends InputStream
Class Inheritance

Field Summary

Modifier and TypeField and Description
private final byte[]
private final byte[]
private final AEADBlockCipher
c

private long
private final int
private byte[]
private int
private final InputStream
private final boolean
private final byte[]
private final KeyParameter
private final int
private long

Constructor Summary

AccessConstructor and Description
public
PGPAeadInputStream(boolean
flavour of AEAD (OpenPGP v5 or v6)
isV5StyleAEAD
,
InputStream
underlying InputStream
in
,
AEADBlockCipher
decryption cipher
c
,
KeyParameter
decryption key
secretKey
,
byte[]
initialization vector
iv
,
int
symmetric cipher algorithm
encAlgorithm
,
int
AEAD algorithm
aeadAlgorithm
,
int
chunk size of the AEAD encryption
chunkSize
,
byte[]
associated data
aaData
)

InputStream for decrypting AEAD encrypted data.

Method Summary

Modifier and TypeMethod and Description
public int
available()

Overrides java.io.InputStream.available.

Returns an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking, which may be 0, or 0 when end of stream is detected.

private static byte[]
getAdata(boolean isV5StyleAEAD, byte[] aaData, long chunkIndex, long totalBytes)

public int
read()

Implements abstract java.io.InputStream.read.

Reads the next byte of data from the input stream.

public int
read(byte[]
the buffer into which the data is read.
b
,
int
the start offset in array b at which the data is written.
off
,
int
the maximum number of bytes to read.
len
)

Overrides java.io.InputStream.read.

Reads up to len bytes of data from the input stream into an array of bytes.

private byte[]
public long
skip(long
the number of bytes to be skipped.
n
)

Overrides java.io.InputStream.skip.

Skips over and discards n bytes of data from this input stream.

Inherited from java.io.InputStream:
closemarkmarkSupportednullInputStreamreadreadAllBytesreadNBytesreadNBytesresetskipNBytestransferTo

Field Detail

aaDataback to summary
private final byte[] aaData
bufback to summary
private final byte[] buf
cback to summary
private final AEADBlockCipher c
chunkIndexback to summary
private long chunkIndex
chunkLengthback to summary
private final int chunkLength
databack to summary
private byte[] data
dataOffback to summary
private int dataOff
inback to summary
private final InputStream in
isV5StyleAEADback to summary
private final boolean isV5StyleAEAD
ivback to summary
private final byte[] iv
secretKeyback to summary
private final KeyParameter secretKey
tagLenback to summary
private final int tagLen
totalBytesback to summary
private long totalBytes

Constructor Detail

PGPAeadInputStreamback to summary
public PGPAeadInputStream(boolean isV5StyleAEAD, InputStream in, AEADBlockCipher c, KeyParameter secretKey, byte[] iv, int encAlgorithm, int aeadAlgorithm, int chunkSize, byte[] aaData) throws IOException

InputStream for decrypting AEAD encrypted data.

Parameters
isV5StyleAEAD:boolean

flavour of AEAD (OpenPGP v5 or v6)

in:InputStream

underlying InputStream

c:AEADBlockCipher

decryption cipher

secretKey:KeyParameter

decryption key

iv:byte[]

initialization vector

encAlgorithm:int

symmetric cipher algorithm

aeadAlgorithm:int

AEAD algorithm

chunkSize:int

chunk size of the AEAD encryption

aaData:byte[]

associated data

Method Detail

availableback to summary
public int available() throws IOException

Overrides java.io.InputStream.available.

Doc from java.io.InputStream.available.

Returns an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking, which may be 0, or 0 when end of stream is detected. The read might be on the same thread or another thread. A single read or skip of this many bytes will not block, but may read or skip fewer bytes.

Note that while some implementations of InputStream will return the total number of bytes in the stream, many will not. It is never correct to use the return value of this method to allocate a buffer intended to hold all data in this stream.

A subclass's implementation of this method may choose to throw an IOException if this input stream has been closed by invoking the close() method.

Returns:int

an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking or 0 when it reaches the end of the input stream.

Exceptions
IOException:
if an I/O error occurs.
getAdataback to summary
private static byte[] getAdata(boolean isV5StyleAEAD, byte[] aaData, long chunkIndex, long totalBytes)
readback to summary
public int read() throws IOException

Implements abstract java.io.InputStream.read.

Doc from java.io.InputStream.read.

Reads the next byte of data from the input stream. The value byte is returned as an int in the range 0 to 255. If no byte is available because the end of the stream has been reached, the value -1 is returned. This method blocks until input data is available, the end of the stream is detected, or an exception is thrown.

Returns:int

the next byte of data, or -1 if the end of the stream is reached.

Exceptions
IOException:
if an I/O error occurs.
readback to summary
public int read(byte[] b, int off, int len) throws IOException

Overrides java.io.InputStream.read.

Doc from java.io.InputStream.read.

Reads up to len bytes of data from the input stream into an array of bytes. An attempt is made to read as many as len bytes, but a smaller number may be read. The number of bytes actually read is returned as an integer.

This method blocks until input data is available, end of file is detected, or an exception is thrown.

If len is zero, then no bytes are read and 0 is returned; otherwise, there is an attempt to read at least one byte. If no byte is available because the stream is at end of file, the value -1 is returned; otherwise, at least one byte is read and stored into b.

The first byte read is stored into element b[off], the next one into b[off+1], and so on. The number of bytes read is, at most, equal to len. Let k be the number of bytes actually read; these bytes will be stored in elements b[off] through b[off+k-1], leaving elements b[off+k] through b[off+len-1] unaffected.

In every case, elements b[0] through b[off-1] and elements b[off+len] through b[b.length-1] are unaffected.

Parameters
b:byte[]

the buffer into which the data is read.

off:int

the start offset in array b at which the data is written.

len:int

the maximum number of bytes to read.

Returns:int

the total number of bytes read into the buffer, or -1 if there is no more data because the end of the stream has been reached.

Exceptions
IOException:
If the first byte cannot be read for any reason other than end of file, or if the input stream has been closed, or if some other I/O error occurs.
readBlockback to summary
private byte[] readBlock() throws IOException
skipback to summary
public long skip(long n) throws IOException

Overrides java.io.InputStream.skip.

Doc from java.io.InputStream.skip.

Skips over and discards n bytes of data from this input stream. The skip method may, for a variety of reasons, end up skipping over some smaller number of bytes, possibly 0. This may result from any of a number of conditions; reaching end of file before n bytes have been skipped is only one possibility. The actual number of bytes skipped is returned. If n is negative, the skip method for class InputStream always returns 0, and no bytes are skipped. Subclasses may handle the negative value differently.

Parameters
n:long

the number of bytes to be skipped.

Returns:long

the actual number of bytes skipped which might be zero.

Exceptions
IOException:
if an I/O error occurs.
org.bouncycastle.openpgp.operator.bc back to summary

protected Class BcAEADUtil.PGPAeadOutputStream

extends OutputStream
Class Inheritance

Field Summary

Modifier and TypeField and Description
private final byte[]
private final AEADBlockCipher
c

private long
private final int
private final byte[]
private int
private final boolean
private final byte[]
private final OutputStream
private final KeyParameter
private final int
private long

Constructor Summary

AccessConstructor and Description
public
PGPAeadOutputStream(boolean
flavour of AEAD (OpenPGP v5 or v6)
isV5StyleAEAD
,
OutputStream
underlying OutputStream
out
,
AEADBlockCipher
AEAD cipher
c
,
KeyParameter
secret key
secretKey
,
byte[]
initialization vector
iv
,
int
encryption algorithm
encAlgorithm
,
int
aead algorithm
aeadAlgorithm
,
int
chunk size of the AEAD encryption
chunkSize
)

OutputStream for AEAD encryption.

Method Summary

Modifier and TypeMethod and Description
public void
close()

Overrides java.io.OutputStream.close.

Implements java.io.Closeable.close.

Closes this output stream and releases any system resources associated with this stream.

private byte[]
createAAD(boolean isV5StyleAEAD, int encAlgorithm, int aeadAlgorithm, int chunkSize)

private void
public void
write(int
the byte.
b
)

Implements abstract java.io.OutputStream.write.

Writes the specified byte to this output stream.

public void
write(byte[]
the data.
b
,
int
the start offset in the data.
off
,
int
the number of bytes to write.
len
)

Overrides java.io.OutputStream.write.

Writes len bytes from the specified byte array starting at offset off to this output stream.

private void
Inherited from java.io.OutputStream:
flushnullOutputStreamwrite

Field Detail

aaDataback to summary
private final byte[] aaData
cback to summary
private final AEADBlockCipher c
chunkIndexback to summary
private long chunkIndex
chunkLengthback to summary
private final int chunkLength
databack to summary
private final byte[] data
dataOffback to summary
private int dataOff
isV5StyleAEADback to summary
private final boolean isV5StyleAEAD
ivback to summary
private final byte[] iv
outback to summary
private final OutputStream out
secretKeyback to summary
private final KeyParameter secretKey
tagLenback to summary
private final int tagLen
totalBytesback to summary
private long totalBytes

Constructor Detail

PGPAeadOutputStreamback to summary
public PGPAeadOutputStream(boolean isV5StyleAEAD, OutputStream out, AEADBlockCipher c, KeyParameter secretKey, byte[] iv, int encAlgorithm, int aeadAlgorithm, int chunkSize)

OutputStream for AEAD encryption.

Parameters
isV5StyleAEAD:boolean

flavour of AEAD (OpenPGP v5 or v6)

out:OutputStream

underlying OutputStream

c:AEADBlockCipher

AEAD cipher

secretKey:KeyParameter

secret key

iv:byte[]

initialization vector

encAlgorithm:int

encryption algorithm

aeadAlgorithm:int

aead algorithm

chunkSize:int

chunk size of the AEAD encryption

Method Detail

closeback to summary
public void close() throws IOException

Overrides java.io.OutputStream.close.

Implements java.io.Closeable.close.

Doc from java.io.OutputStream.close.

Closes this output stream and releases any system resources associated with this stream. The general contract of close is that it closes the output stream. A closed stream cannot perform output operations and cannot be reopened.

Exceptions
IOException:
if an I/O error occurs.
createAADback to summary
private byte[] createAAD(boolean isV5StyleAEAD, int encAlgorithm, int aeadAlgorithm, int chunkSize)
finishback to summary
private void finish() throws IOException
writeback to summary
public void write(int b) throws IOException

Implements abstract java.io.OutputStream.write.

Doc from java.io.OutputStream.write.

Writes the specified byte to this output stream. The general contract for write is that one byte is written to the output stream. The byte to be written is the eight low-order bits of the argument b. The 24 high-order bits of b are ignored.

Parameters
b:int

the byte.

Exceptions
IOException:
if an I/O error occurs. In particular, an IOException may be thrown if the output stream has been closed.
writeback to summary
public void write(byte[] b, int off, int len) throws IOException

Overrides java.io.OutputStream.write.

Doc from java.io.OutputStream.write.

Writes len bytes from the specified byte array starting at offset off to this output stream. The general contract for write(b, off, len) is that some of the bytes in the array b are written to the output stream in order; element b[off] is the first byte written and b[off+len-1] is the last byte written by this operation.

If b is null, a NullPointerException is thrown.

If off is negative, or len is negative, or off+len is greater than the length of the array b, then an IndexOutOfBoundsException is thrown.

Parameters
b:byte[]

the data.

off:int

the start offset in the data.

len:int

the number of bytes to write.

Exceptions
IOException:
if an I/O error occurs. In particular, an IOException is thrown if the output stream is closed.
writeBlockback to summary
private void writeBlock() throws IOException