This class provides default implementations for everything. If you need to customise it, extend the class and override the appropriate methods.
| Modifier and Type | Field and Description |
|---|---|
| private final SecureRandom | |
| private final JcaJceHelper | |
| private final SecureRandom | |
| private final Hashtable | |
| private final Hashtable | |
| private final Hashtable |
| Access | Constructor and Description |
|---|---|
| protected | JcaTlsCrypto(JcaJceHelper
a JCA/JCE helper configured for the class's default provider. helper, SecureRandom primary entropy source, used for key generation. entropySource, SecureRandom secondary entropy source, used for nonce and IV generation. nonceEntropySource)Base constructor. |
| Modifier and Type | Method and Description |
|---|---|
| pack-priv JceTlsSecret | |
| public byte[] | calculateKeyAgreement(String agreementAlgorithm, PrivateKey privateKey, PublicKey publicKey, String secretAlgorithm)
|
| protected TlsAEADCipherImpl | Returns: an AEAD cipher.the full name of the cipher (algorithm/mode/padding) cipherName, String the base algorithm name algorithm, int keySize (in bytes) for the cipher key. keySize, boolean true if the cipher is for encryption, false otherwise. isEncrypting)If you want to create your own versions of the AEAD ciphers required, override this method. |
| protected TlsBlockCipherImpl | Returns: a block cipher.the full name of the cipher (algorithm/mode/padding) cipherName, String the base algorithm name algorithm, int keySize (in bytes) for the cipher key. keySize, boolean true if the cipher is for encryption, false otherwise. isEncrypting)If you want to create your own versions of the block ciphers required, override this method. |
| protected TlsBlockCipherImpl | Returns: a block cipher.the full name of the cipher (algorithm/mode/padding) cipherName, String the base algorithm name algorithm, int keySize (in bytes) for the cipher key. keySize, boolean true if the cipher is for encryption, false otherwise. isEncrypting)If you want to create your own versions of the block ciphers for < TLS 1.1, override this method. |
| protected TlsBlockCipherImpl | createCBCBlockCipherImpl(TlsCryptoParameters cryptoParams, String algorithm, int cipherKeySize, boolean forEncryption)
|
| public TlsCertificate | createCertificate(byte[]
DER/BER encoding of the certificate of interest. encoding)Implements org. Create a TlsCertificate from an ASN.1 binary encoding of an X.509 certificate. |
| public TlsCertificate | createCertificate(short
Certificate type as per IANA TLS Certificate Types registry type, byte[] DER/BER encoding of the certificate of interest. encoding)Implements org. Create a TlsCertificate from a ASN.1 binary encoding of a certificate. |
| private TlsCipher | |
| public TlsCipher | createCipher(TlsCryptoParameters
context specific parameters. cryptoParams, int the encryption algorithm to be employed by the cipher. encryptionAlgorithm, int the MAC algorithm to be employed by the cipher. macAlgorithm)Implements org. Create a cipher for the specified encryption and MAC algorithms. |
| private TlsAEADCipher | |
| private TlsAEADCipher | |
| private TlsAEADCipher | |
| private TlsAEADCipher | |
| protected TlsCipher | createCipher_CBC(TlsCryptoParameters cryptoParams, String algorithm, int cipherKeySize, int macAlgorithm)
|
| private TlsAEADCipher | |
| private TlsAEADCipher | |
| public TlsDHDomain | createDHDomain(TlsDHConfig
the config describing the DH parameters to use. dhConfig)Implements org. Create a domain object supporting the domain parameters described in dhConfig. |
| public TlsECDomain | createECDomain(TlsECConfig
the config describing the EC parameters to use. ecConfig)Implements org. Create a domain object supporting the domain parameters described in ecConfig. |
| public TlsHash | createHash(int
the hash algorithm the hash needs to implement. cryptoHashAlgorithm)Implements org. Create a suitable hash for the hash algorithm identifier passed in.
See enumeration class |
| protected TlsHash | Returns: a hash calculator.the name of the Hash function required. digestName)If you want to create your own versions of Hash functions, override this method. |
| public TlsHMAC | createHMAC(int
the MAC algorithm the HMAC needs to match. macAlgorithm)Implements org. Create a suitable HMAC for the MAC algorithm identifier passed in.
See enumeration class |
| protected TlsHMAC | |
| public TlsHMAC | createHMACForHash(int
the hash algorithm the HMAC should use. cryptoHashAlgorithm)Implements org. Create a suitable HMAC using the hash algorithm identifier passed in.
See enumeration class |
| public TlsKemDomain | createKemDomain(TlsKemConfig
the config describing the KEM parameters to use. kemConfig)Implements org. Create a domain object supporting the domain parameters described in kemConfig. |
| protected TlsHMAC | |
| public TlsNonceGenerator | createNonceGenerator(byte[]
context-specific seed material additionalSeedMaterial)Implements org. Create a nonce generator. |
| protected TlsNullCipher | Returns: a null cipher suite implementation.the name of the algorithm supporting the MAC. macAlgorithm)To disable the null cipher suite, override this method with one that throws an IOException. |
| pack-priv Cipher | |
| public TlsSecret | createSecret(byte[]
the data to base the TlsSecret on. data)Implements org. Create a TlsSecret object based on provided data. |
| public TlsSRP6Client | createSRP6Client(TlsSRPConfig
client config. srpConfig)Implements org. Create an SRP-6 client. |
| public TlsSRP6Server | createSRP6Server(TlsSRPConfig
server config. srpConfig, BigInteger the SRP6 verifier value. srpVerifier)Implements org. Create an SRP-6 server. |
| public TlsSRP6VerifierGenerator | createSRP6VerifierGenerator(TlsSRPConfig
generator config. srpConfig)Implements org. Create an SRP-6 verifier generator. |
| protected TlsStreamSigner | |
| protected TlsStreamSigner | createStreamSigner(String algorithmName, AlgorithmParameterSpec parameter, PrivateKey privateKey, boolean needsRandom)
|
| protected TlsStreamVerifier | |
| protected TlsStreamVerifier | createStreamVerifier(String algorithmName, AlgorithmParameterSpec parameter, byte[] signature, PublicKey publicKey)
|
| protected Tls13Verifier | |
| public TlsSecret | generateRSAPreMasterSecret(ProtocolVersion
the client version to place in the first 2 bytes version)Implements org. Create a TlsSecret object containing a randomly-generated RSA PreMasterSecret |
| pack-priv String | |
| public AEADNonceGeneratorFactory | getFipsGCMNonceGeneratorFactory()
Optionally return an |
| public JcaJceHelper | |
| pack-priv String | |
| public AlgorithmParameters | |
| public SecureRandom | getSecureRandom()
Implements org. Return the primary (safest) SecureRandom for this crypto. |
| public AlgorithmParameters | |
| public boolean | hasAnyStreamVerifiers(Vector<E>
A signatureAndHashAlgorithms)Vector of SignatureAndHashAlgorithm values.Implements org. Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. |
| public boolean | hasAnyStreamVerifiersLegacy(short[]
An array of clientCertificateTypes)ClientCertificateType values.Implements org. Return true if this TlsCrypto would use a stream verifier for any of the passed in algorithms. |
| public boolean | hasCryptoHashAlgorithm(int
the algorithm of interest. cryptoHashAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in hash algorithm. |
| public boolean | hasCryptoSignatureAlgorithm(int
the algorithm of interest. cryptoSignatureAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm). |
| public boolean | hasDHAgreement()
Implements org. Return true if this TlsCrypto can support DH key agreement. |
| public boolean | hasECDHAgreement()
Implements org. Return true if this TlsCrypto can support ECDH key agreement. |
| public boolean | hasEncryptionAlgorithm(int
the algorithm of interest. encryptionAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in block/stream encryption algorithm. |
| public boolean | hasHKDFAlgorithm(int
the algorithm of interest. cryptoHashAlgorithm)Implements org. Return true if this TlsCrypto can support HKDF with the passed in hash algorithm. |
| public boolean | hasKemAgreement()
Implements org. Return true if this TlsCrypto can support KEM key agreement. |
| public boolean | hasMacAlgorithm(int
the algorithm of interest. macAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in MAC algorithm. |
| public boolean | hasNamedGroup(int namedGroup)
Implements org. Return true if this TlsCrypto supports the passed in |
| public boolean | hasRSAEncryption()
Implements org. Return true if this TlsCrypto can support RSA encryption/decryption. |
| public boolean | hasSignatureAlgorithm(short
the algorithm of interest. signatureAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in signature algorithm (not necessarily in combination with EVERY hash algorithm). |
| public boolean | hasSignatureAndHashAlgorithm(SignatureAndHashAlgorithm
the algorithm of interest. sigAndHashAlgorithm)Implements org. Return true if this TlsCrypto can support the passed in signature algorithm. |
| public boolean | hasSignatureScheme(int
the scheme of interest. signatureScheme)Implements org. Return true if this TlsCrypto can support the passed in signature scheme. |
| public boolean | hasSRPAuthentication()
Implements org. Return true if this TlsCrypto can support SRP authentication. |
| public TlsSecret | hkdfInit(int
the hash algorithm to instantiate HMAC with. See cryptoHashAlgorithm)CryptoHashAlgorithm for values.Implements org. Setup an initial "secret" for a chain of HKDF calls (RFC 5869), containing a string of HashLen zeroes. |
| protected Boolean | |
| protected Boolean | |
| protected boolean | |
| protected boolean |