org.picketlink.json.jose.crypto

Class RSA_OAEP_256

java.lang.Object

org.picketlink.json.jose.crypto.RSA_OAEP_256

public class RSA_OAEP_256
extends Object

RSAES OAEP (SHA-256) methods for Content Encryption Key (CEK) encryption and decryption.

Author:

Giriraj Sharma

Method Summary

Modifier and Type	Method and Description
static SecretKey	decryptCEK(RSAPrivateKey priv, byte[] encryptedCEK) Decrypts the specified encrypted Content Encryption Key (CEK).
static byte[]	encryptCEK(RSAPublicKey pub, SecretKey cek) Encrypts the specified Content Encryption Key (CEK).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

encryptCEK

public static byte[] encryptCEK(RSAPublicKey pub,
                                SecretKey cek)

Encrypts the specified Content Encryption Key (CEK).

Parameters:

pub - The public RSA key. Must not be null.

cek - The Content Encryption Key (CEK) to encrypt. Must not be null.

Returns:

The encrypted Content Encryption Key (CEK).

Throws:

RuntimeException - If encryption failed.

decryptCEK

public static SecretKey decryptCEK(RSAPrivateKey priv,
                                   byte[] encryptedCEK)

Decrypts the specified encrypted Content Encryption Key (CEK).

Parameters:

priv - The private RSA key. Must not be null.

encryptedCEK - The encrypted Content Encryption Key (CEK) to decrypt. Must not be null.

Returns:

The decrypted Content Encryption Key (CEK).

Throws:

RuntimeException - If decryption failed.