| Modifier and Type | Method and Description |
|---|---|
| public TlsSecret | Returns: a TlsSecret based on the original secret.the secret to make a copy of. secret)Adopt the passed in secret, creating a new copy of it. |
| public TlsCertificate | Returns: a TlsCertificate.DER/BER encoding of the certificate of interest. encoding)Create a TlsCertificate from an ASN.1 binary encoding of an X.509 certificate. |
| public TlsCertificate | Returns: a TlsCertificate.Certificate type as per IANA TLS Certificate Types registry type, byte[] DER/BER encoding of the certificate of interest. encoding)Create a TlsCertificate from a ASN.1 binary encoding of a certificate. |
| public TlsCipher | Returns: aTlsCipher implementing the encryption and MAC algorithms.context specific parameters. cryptoParams, int the encryption algorithm to be employed by the cipher. encryptionAlgorithm, int the MAC algorithm to be employed by the cipher. macAlgorithm)Create a cipher for the specified encryption and MAC algorithms. |
| public TlsDHDomain | Returns: a TlsDHDomain supporting the parameters in dhConfig.the config describing the DH parameters to use. dhConfig)Create a domain object supporting the domain parameters described in dhConfig. |
| public TlsECDomain | Returns: a TlsECDomain supporting the parameters in ecConfig.the config describing the EC parameters to use. ecConfig)Create a domain object supporting the domain parameters described in ecConfig. |
| public TlsHash | Returns: aTlsHash.the hash algorithm the hash needs to implement. cryptoHashAlgorithm)Create a suitable hash for the hash algorithm identifier passed in.
See enumeration class |
| public TlsHMAC | Returns: aTlsHMAC.the MAC algorithm the HMAC needs to match. macAlgorithm)Create a suitable HMAC for the MAC algorithm identifier passed in.
See enumeration class |
| public TlsHMAC | Returns: aTlsHMAC.the hash algorithm the HMAC should use. cryptoHashAlgorithm)Create a suitable HMAC using the hash algorithm identifier passed in.
See enumeration class |
| public TlsKemDomain | Returns: a TlsKemDomain supporting the parameters in kemConfig.the config describing the KEM parameters to use. kemConfig)Create a domain object supporting the domain parameters described in kemConfig. |
| public TlsNonceGenerator | Returns: aTlsNonceGeneratorcontext-specific seed material additionalSeedMaterial)Create a nonce generator. |
| public TlsSecret | Returns: a TlsSecret based on the provided data.the data to base the TlsSecret on. data)Create a TlsSecret object based on provided data. |
| public TlsSRP6Client | Returns: an initialised SRP6 client object.client config. srpConfig)Create an SRP-6 client. |
| public TlsSRP6Server | Returns: an initialised SRP6 server object.server config. srpConfig, BigInteger the SRP6 verifier value. srpVerifier)Create an SRP-6 server. |
| public TlsSRP6VerifierGenerator | Returns: an initialized SRP6 verifier generator.generator config. srpConfig)Create an SRP-6 verifier generator. |
| public TlsSecret | Returns: a TlsSecret containing the PreMasterSecret.the client version to place in the first 2 bytes clientVersion)Create a TlsSecret object containing a randomly-generated RSA PreMasterSecret |
| public SecureRandom | Returns: a SecureRandom suitable for key generation.Return the primary (safest) SecureRandom for this crypto. |
| public boolean | Returns: true if this instance would use a stream verifier for any of the passed in algorithms, otherwise false.A signatureAndHashAlgorithms)Vector of SignatureAndHashAlgorithm values.Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. |
| public boolean | Returns: true if this instance would use a stream verifier for any of the passed in algorithms, otherwise false.An array of clientCertificateTypes)ClientCertificateType values.Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. |
| public boolean | Returns: true if cryptoHashAlgorithm is supported, false otherwise.the algorithm of interest. cryptoHashAlgorithm)Return true if this TlsCrypto can support the passed in hash algorithm. |
| public boolean | Returns: true if cryptoSignatureAlgorithm is supported, false otherwise.the algorithm of interest. cryptoSignatureAlgorithm)Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm). |
| public boolean | Returns: true if this instance can support DH key agreement, false otherwise.Return true if this TlsCrypto can support DH key agreement. |
| public boolean | Returns: true if this instance can support ECDH key agreement, false otherwise.Return true if this TlsCrypto can support ECDH key agreement. |
| public boolean | Returns: true if encryptionAlgorithm is supported, false otherwise.the algorithm of interest. encryptionAlgorithm)Return true if this TlsCrypto can support the passed in block/stream encryption algorithm. |
| public boolean | Returns: true if HKDF is supported with cryptoHashAlgorithm, false otherwise.the algorithm of interest. cryptoHashAlgorithm)Return true if this TlsCrypto can support HKDF with the passed in hash algorithm. |
| public boolean | Returns: true if this instance can support KEM key agreement, false otherwise.Return true if this TlsCrypto can support KEM key agreement. |
| public boolean | Returns: true if macAlgorithm is supported, false otherwise.the algorithm of interest. macAlgorithm)Return true if this TlsCrypto can support the passed in MAC algorithm. |
| public boolean | Returns: true if this instance supports the passed innamed group value.Return true if this TlsCrypto supports the passed in |
| public boolean | Returns: true if this instance can support RSA encryption/decryption, false otherwise.Return true if this TlsCrypto can support RSA encryption/decryption. |
| public boolean | Returns: true if signatureAlgorithm is supported, false otherwise.the algorithm of interest. signatureAlgorithm)Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm). |
| public boolean | Returns: true if sigAndHashAlgorithm is supported, false otherwise.the algorithm of interest. sigAndHashAlgorithm)Return true if this TlsCrypto can support the passed in signature algorithm. |
| public boolean | Returns: true if signatureScheme is supported, false otherwise.the scheme of interest. signatureScheme)Return true if this TlsCrypto can support the passed in signature scheme. |
| public boolean | Returns: true if this instance can support SRP authentication, false otherwise.Return true if this TlsCrypto can support SRP authentication. |
| public TlsSecret | hkdfInit(int
the hash algorithm to instantiate HMAC with. See cryptoHashAlgorithm)CryptoHashAlgorithm for values.Setup an initial "secret" for a chain of HKDF calls (RFC 5869), containing a string of HashLen zeroes. |
| adoptSecret | back to summary |
|---|---|
| public TlsSecret adoptSecret(TlsSecret secret) Adopt the passed in secret, creating a new copy of it. | |
| createCertificate | back to summary |
|---|---|
| public TlsCertificate createCertificate(byte[] encoding) throws IOException Create a TlsCertificate from an ASN.1 binary encoding of an X.509 certificate.
| |
| createCertificate | back to summary |
|---|---|
| public TlsCertificate createCertificate(short type, byte[] encoding) throws IOException Create a TlsCertificate from a ASN.1 binary encoding of a certificate.
| |
| createCipher | back to summary |
|---|---|
| public TlsCipher createCipher(TlsCryptoParameters cryptoParams, int encryptionAlgorithm, int macAlgorithm) throws IOException Create a cipher for the specified encryption and MAC algorithms.
See enumeration classes
| |
| createDHDomain | back to summary |
|---|---|
| public TlsDHDomain createDHDomain(TlsDHConfig dhConfig) Create a domain object supporting the domain parameters described in dhConfig.
| |
| createECDomain | back to summary |
|---|---|
| public TlsECDomain createECDomain(TlsECConfig ecConfig) Create a domain object supporting the domain parameters described in ecConfig.
| |
| createHash | back to summary |
|---|---|
| public TlsHash createHash(int cryptoHashAlgorithm) Create a suitable hash for the hash algorithm identifier passed in.
See enumeration class | |
| createHMAC | back to summary |
|---|---|
| public TlsHMAC createHMAC(int macAlgorithm) Create a suitable HMAC for the MAC algorithm identifier passed in.
See enumeration class | |
| createHMACForHash | back to summary |
|---|---|
| public TlsHMAC createHMACForHash(int cryptoHashAlgorithm) Create a suitable HMAC using the hash algorithm identifier passed in.
See enumeration class | |
| createKemDomain | back to summary |
|---|---|
| public TlsKemDomain createKemDomain(TlsKemConfig kemConfig) Create a domain object supporting the domain parameters described in kemConfig.
| |
| createNonceGenerator | back to summary |
|---|---|
| public TlsNonceGenerator createNonceGenerator(byte[] additionalSeedMaterial) Create a nonce generator. Each call should construct a new generator, and the generator
should be returned from this call only after automatically seeding from this
| |
| createSecret | back to summary |
|---|---|
| public TlsSecret createSecret(byte[] data) Create a TlsSecret object based on provided data.
| |
| createSRP6Client | back to summary |
|---|---|
| public TlsSRP6Client createSRP6Client(TlsSRPConfig srpConfig) Create an SRP-6 client.
| |
| createSRP6Server | back to summary |
|---|---|
| public TlsSRP6Server createSRP6Server(TlsSRPConfig srpConfig, BigInteger srpVerifier) Create an SRP-6 server.
| |
| createSRP6VerifierGenerator | back to summary |
|---|---|
| public TlsSRP6VerifierGenerator createSRP6VerifierGenerator(TlsSRPConfig srpConfig) Create an SRP-6 verifier generator.
| |
| generateRSAPreMasterSecret | back to summary |
|---|---|
| public TlsSecret generateRSAPreMasterSecret(ProtocolVersion clientVersion) Create a TlsSecret object containing a randomly-generated RSA PreMasterSecret
| |
| getSecureRandom | back to summary |
|---|---|
| public SecureRandom getSecureRandom() Return the primary (safest) SecureRandom for this crypto.
| |
| hasAnyStreamVerifiers | back to summary |
|---|---|
| public boolean hasAnyStreamVerifiers(Vector<E> signatureAndHashAlgorithms) Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. This method is only relevant to handshakes negotiating (D)TLS 1.2.
| |
| hasAnyStreamVerifiersLegacy | back to summary |
|---|---|
| public boolean hasAnyStreamVerifiersLegacy(short[] clientCertificateTypes) Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. This method is only relevant to handshakes negotiating (D)TLS versions older than 1.2.
| |
| hasCryptoHashAlgorithm | back to summary |
|---|---|
| public boolean hasCryptoHashAlgorithm(int cryptoHashAlgorithm) Return true if this TlsCrypto can support the passed in hash algorithm.
| |
| hasCryptoSignatureAlgorithm | back to summary |
|---|---|
| public boolean hasCryptoSignatureAlgorithm(int cryptoSignatureAlgorithm) Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm).
| |
| hasDHAgreement | back to summary |
|---|---|
| public boolean hasDHAgreement() Return true if this TlsCrypto can support DH key agreement.
| |
| hasECDHAgreement | back to summary |
|---|---|
| public boolean hasECDHAgreement() Return true if this TlsCrypto can support ECDH key agreement.
| |
| hasEncryptionAlgorithm | back to summary |
|---|---|
| public boolean hasEncryptionAlgorithm(int encryptionAlgorithm) Return true if this TlsCrypto can support the passed in block/stream encryption algorithm.
| |
| hasHKDFAlgorithm | back to summary |
|---|---|
| public boolean hasHKDFAlgorithm(int cryptoHashAlgorithm) Return true if this TlsCrypto can support HKDF with the passed in hash algorithm.
| |
| hasKemAgreement | back to summary |
|---|---|
| public boolean hasKemAgreement() Return true if this TlsCrypto can support KEM key agreement.
| |
| hasMacAlgorithm | back to summary |
|---|---|
| public boolean hasMacAlgorithm(int macAlgorithm) Return true if this TlsCrypto can support the passed in MAC algorithm.
| |
| hasNamedGroup | back to summary |
|---|---|
| public boolean hasNamedGroup(int namedGroup) Return true if this TlsCrypto supports the passed in
| |
| hasRSAEncryption | back to summary |
|---|---|
| public boolean hasRSAEncryption() Return true if this TlsCrypto can support RSA encryption/decryption.
| |
| hasSignatureAlgorithm | back to summary |
|---|---|
| public boolean hasSignatureAlgorithm(short signatureAlgorithm) Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm).
| |
| hasSignatureAndHashAlgorithm | back to summary |
|---|---|
| public boolean hasSignatureAndHashAlgorithm(SignatureAndHashAlgorithm sigAndHashAlgorithm) Return true if this TlsCrypto can support the passed in signature algorithm.
| |
| hasSignatureScheme | back to summary |
|---|---|
| public boolean hasSignatureScheme(int signatureScheme) Return true if this TlsCrypto can support the passed in signature scheme.
| |
| hasSRPAuthentication | back to summary |
|---|---|
| public boolean hasSRPAuthentication() Return true if this TlsCrypto can support SRP authentication.
| |
| hkdfInit | back to summary |
|---|---|
| public TlsSecret hkdfInit(int cryptoHashAlgorithm) Setup an initial "secret" for a chain of HKDF calls (RFC 5869), containing a string of HashLen zeroes.
| |