Package org.forgerock.secrets.keys

Class KeyDecryptionKey

java.lang.Object

org.forgerock.secrets.Secret

org.forgerock.secrets.keys.CryptoKey

org.forgerock.secrets.keys.KeyDecryptionKey

All Implemented Interfaces:

AutoCloseable, DecryptionKey<KeyDecryptionKey>

public class KeyDecryptionKey
extends CryptoKey
implements DecryptionKey<KeyDecryptionKey>

A key that is used to decrypt (or "unwrap") other keys that have been encrypted with a KeyEncryptionKey.

Constructor Summary

Constructors

Constructor	Description
KeyDecryptionKey(SecretBuilder builder)	Initialises the key with the given secret data.

Method Summary

Modifier and Type	Method	Description
KeyDecryptionKey	asCryptoKey()	Returns the same object as a specific CryptoKey subclass.
Cipher	getCipher()	Returns an initialized cipher object for an appropriate default algorithm and parameters.
Cipher	getCipher(String algorithm)	Returns an initialized cipher object with default parameters.
Cipher	getCipher(String algorithm, AlgorithmParameters parameters)	Returns an initialized cipher object for the given algorithm and parameters.
Cipher	getCipher(String algorithm, AlgorithmParameterSpec parameterSpec)	Returns an initialized cipher object for the given algorithm and parameters.

Methods inherited from class org.forgerock.secrets.keys.CryptoKey

allowsAlgorithm, close, export, getCertificate, getCertificate, getCertificateChain, getCertificateChain, getKeyAlgorithm, getKeyType, getKeyUsages, getPublicKey, getPublicKey, isClosed, isExtractable, reveal, revealAndClose, toBuilder, toString

Methods inherited from class org.forgerock.secrets.Secret

equals, getExpiryTime, getStableId, hashCode, isExpired

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

KeyDecryptionKey

public KeyDecryptionKey(SecretBuilder builder)
                 throws NoSuchSecretException

Initialises the key with the given secret data.

Parameters:

builder - the builder object.

Throws:

NoSuchSecretException - if the secret could not be constructed from the builder.

Method Details

getCipher

public Cipher getCipher()

Returns an initialized cipher object for an appropriate default algorithm and parameters. A best-effort attempt will be made to pick a strong cipher algorithm based on the type of key.

Returns:

the initialized cipher object.

asCryptoKey

public KeyDecryptionKey asCryptoKey()

Description copied from interface: DecryptionKey

Returns the same object as a specific CryptoKey subclass.

Specified by:

asCryptoKey in interface DecryptionKey<KeyDecryptionKey>

Returns:

the same key as a CryptoKey.

getCipher

public Cipher getCipher(String algorithm,
 AlgorithmParameterSpec parameterSpec)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameterSpec - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm,
 AlgorithmParameters parameters)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameters - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm)

Returns an initialized cipher object with default parameters.

Parameters:

algorithm - the cipher algorithm.

Returns:

the initialized cipher object.