org.linguafranca.pwdb.kdbx.stream_3_1

Class KdbxSerializer

java.lang.Object

org.linguafranca.pwdb.kdbx.stream_3_1.KdbxSerializer

public class KdbxSerializer
extends Object

This class provides static methods for the encryption and decryption of Keepass KDBX files.

A KDBX file is little-endian and consists of the following:

1. An unencrypted portion
1. 8 bytes Magic number
2. 4 bytes version
3. A header containing details of the encryption of the remainder of the file

The header fields are encoded using a TLV style. The Type is an enumeration encoded in 1 byte. The length is encoded in 2 bytes and the value according to the length denoted. The sequence is terminated by a zero type with 0 length.

KdbxHeader details the fields of the header.

2. An encrypted portion
1. A sequence of bytes contained in the header. If they don't match, decryption has not worked.
2. A payload serialized in Hashed Block format, see e.g. HashedBlockInputStream for details of this.
3. The content of this payload may be GZIP compressed.
4. The content is now a character stream, which is expected to be XML representing a KeePass Database. Assumed UTF-8 encoding.

The methods in this class provide support for serializing and deserializing plain text payload content to and from the above encrypted format.

Various fields of the plain text XML (e.g. passwords) are additionally and optionally encrypted using a second encryption. They are stream encrypted, meaning they have to be decrypted in the same order as they were encrypted, namely actual XML document order. Or at least that is the way it seems. The methods of this class do not perform this aspect of encryption/decryption.

Author:

jo

Method Summary

Modifier and Type	Method and Description
static OutputStream	createEncryptedOutputStream(Credentials credentials, KdbxHeader kdbxHeader, OutputStream outputStream) Provides an OutputStream to be encoded and encrypted in KDBX format
static InputStream	createUnencryptedInputStream(Credentials credentials, KdbxHeader kdbxHeader, InputStream inputStream) Provides the payload of a KDBX file as an unencrypted InputStream.
static KdbxHeader	readKdbxHeader(KdbxHeader kdbxHeader, InputStream inputStream) Populate a KdbxHeader from the input stream supplied
static void	writeKdbxHeader(KdbxHeader kdbxHeader, OutputStream outputStream) Write a KdbxHeader to the output stream supplied.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

createUnencryptedInputStream

public static InputStream createUnencryptedInputStream(Credentials credentials,
                                                       KdbxHeader kdbxHeader,
                                                       InputStream inputStream)
                                                throws IOException

Provides the payload of a KDBX file as an unencrypted InputStream.

Parameters:

credentials - credentials for decryption of the stream

kdbxHeader - a header instance to be populated with values from the stream

inputStream - a KDBX formatted input stream

Returns:

an unencrypted input stream, to be read and closed by the caller

Throws:

IOException - on error

createEncryptedOutputStream

public static OutputStream createEncryptedOutputStream(Credentials credentials,
                                                       KdbxHeader kdbxHeader,
                                                       OutputStream outputStream)
                                                throws IOException

Provides an OutputStream to be encoded and encrypted in KDBX format

Parameters:

credentials - credentials for encryption of the stream

kdbxHeader - a KDBX header to control the formatting and encryption operation

outputStream - output stream to contain the KDBX formatted output

Returns:

an unencrypted output stream, to be written to, flushed and closed by the caller

Throws:

IOException - on error

readKdbxHeader

public static KdbxHeader readKdbxHeader(KdbxHeader kdbxHeader,
                                        InputStream inputStream)
                                 throws IOException

Populate a KdbxHeader from the input stream supplied

Parameters:

kdbxHeader - a header to be populated

inputStream - an input stream

Returns:

the populated KdbxHeader

Throws:

IOException - on error

writeKdbxHeader

public static void writeKdbxHeader(KdbxHeader kdbxHeader,
                                   OutputStream outputStream)
                            throws IOException

Write a KdbxHeader to the output stream supplied. The header is updated with the message digest of the written stream.

Parameters:

kdbxHeader - the header to write and update

outputStream - the output stream

Throws:

IOException - on error