org.mozilla.jss.SecretDecoderRing

Class Encryptor

java.lang.Object

org.mozilla.jss.SecretDecoderRing.Encryptor

public class Encryptor
extends java.lang.Object

Encrypts data with the SecretDecoderRing.

Field Summary

Fields

Modifier and Type	Field and Description
static EncryptionAlgorithm	DEFAULT_ENCRYPTION_ALG The default encryption algorithm, currently DES3_CBC.

Constructor Summary

Constructors

Constructor and Description
Encryptor(CryptoToken token, byte[] keyID, EncryptionAlgorithm alg) Creates an Encryptor on the given CryptoToken, using the key with the given keyID and algorithm

Method Summary

Modifier and Type	Method and Description
byte[]	encrypt(byte[] plaintext) Encrypts a byte array.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_ENCRYPTION_ALG

public static final EncryptionAlgorithm DEFAULT_ENCRYPTION_ALG

The default encryption algorithm, currently DES3_CBC.

Constructor Detail

Encryptor

public Encryptor(CryptoToken token,
                 byte[] keyID,
                 EncryptionAlgorithm alg)
          throws TokenException,
                 java.security.InvalidKeyException

Creates an Encryptor on the given CryptoToken, using the key with the given keyID and algorithm

Parameters:

token - The CryptoToken to use for encryption. The key must reside on this token.

keyID - The keyID of the key to use for encryption. This key must have been generated on this token with KeyManager.

alg - The EncryptionAlgorithm this key will be used for.

Throws:

java.security.InvalidKeyException - If no key exists on this token with this keyID.

TokenException

Method Detail

encrypt

public byte[] encrypt(byte[] plaintext)
               throws CryptoManager.NotInitializedException,
                      java.security.GeneralSecurityException,
                      InvalidBERException

Encrypts a byte array.

Parameters:

plaintext - The plaintext bytes to be encrypted.

Returns:

The ciphertext. This is actually a DER-encoded Encoding object. It contains the keyID, AlgorithmIdentifier, and the encrypted plaintext. It is compatible with the SDRResult created by NSS's SecretDecoderRing.

Throws:

CryptoManager.NotInitializedException

java.security.GeneralSecurityException

InvalidBERException