org.picketlink.json.jose.crypto

Class RSA1_5

java.lang.Object

org.picketlink.json.jose.crypto.RSA1_5

public class RSA1_5
extends Object

RSAES-PKCS1-V1_5 methods for Content Encryption Key (CEK) encryption and decryption.

Author:

Giriraj Sharma

Method Summary

Methods

Modifier and Type	Method and Description
static SecretKey	decryptCEK(RSAPrivateKey priv, byte[] encryptedCEK, int keyLength) Decrypts the specified encrypted Content Encryption Key (CEK).
static byte[]	encryptCEK(RSAPublicKey pub, SecretKey cek) Encrypts the specified Content Encryption Key (CEK).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

encryptCEK

public static byte[] encryptCEK(RSAPublicKey pub,
                SecretKey cek)

Encrypts the specified Content Encryption Key (CEK).

Parameters:

pub - The public RSA key. Must not be null.

cek - The Content Encryption Key (CEK) to encrypt. Must not be null.

Returns:

The encrypted Content Encryption Key (CEK).

Throws:

RuntimeException - If encryption failed.

decryptCEK

public static SecretKey decryptCEK(RSAPrivateKey priv,
                   byte[] encryptedCEK,
                   int keyLength)

Decrypts the specified encrypted Content Encryption Key (CEK).

Parameters:

priv - The private RSA key. Must not be null.

encryptedCEK - The encrypted Content Encryption Key (CEK) to decrypt. Must not be null.

Returns:

The decrypted Content Encryption Key (CEK), null if there was a CEK key length mismatch.

Throws:

RuntimeException - If decryption failed.