org.nhindirect.stagent.cryptography.activekeyops

Class SplitDirectRecipientInformation

java.lang.Object

org.bouncycastle.cms.RecipientInformation

org.bouncycastle.cms.KeyTransRecipientInformation

org.nhindirect.stagent.cryptography.activekeyops.SplitDirectRecipientInformation

All Implemented Interfaces:

DirectRecipientInformation

public class SplitDirectRecipientInformation
extends org.bouncycastle.cms.KeyTransRecipientInformation
implements DirectRecipientInformation

An implementation that of the DirectRecipientInformation interface that allows for an optimized set of decryption operations. Unlike the BouncyCastle library which performs both the decryption of the message symmetric key and the decryption of the message content using only one JCE provider, this implementation allows the two different decryption operations to be split across different JCE providers. This is optimal in situations where asymmetric private key information MUST be protected by a PKCS11 token. If the keyEncProvider is set to the JCE provider of a PKCS11 token and the encProvider is set to an in process JCE provider, this allows for the asymmetric operations to be performed on the token but for the symmetric decryption to be performed in process. This minimizes the amount of information that needs to be sent to the PKCS11 token.

Since:

2.1

Author:

Greg Meyer

Constructor Summary

Constructors

Constructor and Description
SplitDirectRecipientInformation(org.bouncycastle.asn1.cms.KeyTransRecipientInfo info, org.bouncycastle.asn1.x509.AlgorithmIdentifier encAlg, InputStream data, String encProvider, String keyEncProvider) Constructor

Method Summary

Methods

Modifier and Type	Method and Description
org.bouncycastle.cms.CMSTypedStream	getContentStream(Key key, String prov)
byte[]	getDecryptedContent(Key key) Gets the decrypted content of a message.

Methods inherited from class org.bouncycastle.cms.RecipientInformation

getContent, getKeyEncryptionAlgOID, getKeyEncryptionAlgorithmParameters, getKeyEncryptionAlgParams, getRID

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SplitDirectRecipientInformation

public SplitDirectRecipientInformation(org.bouncycastle.asn1.cms.KeyTransRecipientInfo info,
                               org.bouncycastle.asn1.x509.AlgorithmIdentifier encAlg,
                               InputStream data,
                               String encProvider,
                               String keyEncProvider)

Constructor

Parameters:

info - The recip info

encAlg - The encryption algorithm.

data - The data that is to be decrypted.

encProvider - The name of the JCE provider used to decrypt the messgae content using the message symmetric key.

keyEncProvider - The name of the JCE provider used to decrypt the messgae content using the message symmetric key. This is sometime known as the key encryption key provider.

Method Detail

getDecryptedContent

public byte[] getDecryptedContent(Key key)
                           throws org.bouncycastle.cms.CMSException,
                                  NoSuchProviderException

Gets the decrypted content of a message.

Specified by:

getDecryptedContent in interface DirectRecipientInformation

Parameters:

key - The RSA private key used to encrypt the message's symmetric key.

Returns:

A byte array representing the decrypted content.

Throws:

org.bouncycastle.cms.CMSException

NoSuchProviderException

getContentStream

public org.bouncycastle.cms.CMSTypedStream getContentStream(Key key,
                                                   String prov)
                                                     throws org.bouncycastle.cms.CMSException,
                                                            NoSuchProviderException

Overrides:

getContentStream in class org.bouncycastle.cms.KeyTransRecipientInformation

Throws:

org.bouncycastle.cms.CMSException

NoSuchProviderException