org.picketlink.json.jose.crypto

Class ConcatKDF

java.lang.Object

org.picketlink.json.jose.crypto.ConcatKDF

public class ConcatKDF
extends Object

Concatenation Key Derivation Function (KDF) utilities. Provides static methods to generate Content Encryption Keys (CEKs) and Content Integrity Keys (CIKs) from a Content Master Key (CMKs), as used in A128CBC+HS256 and A256CBC+HS512 encryption (deprecated).

See draft-ietf-jose-json-web-encryption-08, appendices A.4 and A.5.

Author:

Giriraj Sharma

Constructor Summary

Constructors

Constructor and Description
ConcatKDF()

Method Summary

Methods

Modifier and Type	Method and Description
static SecretKey	generateCEK(SecretKey key, String encAlgorithm) Generates a Content Encryption Key (CEK) from the specified Content Master Key (CMK) and JOSE encryption method.
static SecretKey	generateCIK(SecretKey key, String encAlgorithm) Generates a Content Integrity Key (CIK) from the specified Content Master Key (CMK) and JOSE encryption method.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ConcatKDF

public ConcatKDF()

Method Detail

generateCEK

public static SecretKey generateCEK(SecretKey key,
                    String encAlgorithm)

Generates a Content Encryption Key (CEK) from the specified Content Master Key (CMK) and JOSE encryption method.

Parameters:

key - The Content Master Key (CMK). Must not be null.

enc - The JOSE encryption algorithm. Must not be null.

Returns:

The generated AES CEK.

Throws:

RuntimeException - If CEK generation failed.

generateCIK

public static SecretKey generateCIK(SecretKey key,
                    String encAlgorithm)

Generates a Content Integrity Key (CIK) from the specified Content Master Key (CMK) and JOSE encryption method.

Parameters:

key - The Content Master Key (CMK). Must not be null.

enc - The JOSE encryption algorithm. Must not be null.

Returns:

The generated HMAC SHA CIK.

Throws:

JOSEException - If CIK generation failed.