Package org.forgerock.secrets.keys

Class KeyEncryptionKey

java.lang.Object

org.forgerock.secrets.Secret

org.forgerock.secrets.keys.CryptoKey

org.forgerock.secrets.keys.KeyEncryptionKey

All Implemented Interfaces:

AutoCloseable

public class KeyEncryptionKey
extends CryptoKey

A key that is used to encrypt ("wrap") other keys.

Constructor Summary

Constructors

Constructor	Description
KeyEncryptionKey(SecretBuilder builder)	Initialises the key with the given secret data.

Method Summary

Modifier and Type	Method	Description
Cipher	getCipher()	Returns an initialized cipher object for an appropriate default algorithm and parameters.
Cipher	getCipher(String algorithm)	Returns an initialized cipher object with default parameters.
Cipher	getCipher(String algorithm, AlgorithmParameters parameters)	Returns an initialized cipher object for the given algorithm and parameters.
Cipher	getCipher(String algorithm, AlgorithmParameterSpec parameterSpec)	Returns an initialized cipher object for the given algorithm and parameters.

Methods inherited from class org.forgerock.secrets.keys.CryptoKey

allowsAlgorithm, close, export, getCertificate, getCertificate, getCertificateChain, getCertificateChain, getKeyAlgorithm, getKeyType, getKeyUsages, getPublicKey, getPublicKey, isClosed, isExtractable, reveal, revealAndClose, toString

Methods inherited from class org.forgerock.secrets.Secret

equals, getExpiryTime, getStableId, hashCode, isExpired

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

KeyEncryptionKey

public KeyEncryptionKey(SecretBuilder builder)
                 throws NoSuchSecretException

Initialises the key with the given secret data.

Parameters:

builder - the builder object.

Throws:

NoSuchSecretException - if the raw secret cannot be extracted.

Method Detail

getCipher

public Cipher getCipher()

Returns an initialized cipher object for an appropriate default algorithm and parameters. A best-effort attempt will be made to pick a strong cipher algorithm based on the type of key.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm,
                        AlgorithmParameterSpec parameterSpec)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameterSpec - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm,
                        AlgorithmParameters parameters)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameters - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm)

Returns an initialized cipher object with default parameters.

Parameters:

algorithm - the cipher algorithm.

Returns:

the initialized cipher object.