Package org.forgerock.secrets.keys

Class KeyDecryptionKey

java.lang.Object

org.forgerock.secrets.Secret

org.forgerock.secrets.keys.CryptoKey

org.forgerock.secrets.keys.KeyDecryptionKey

All Implemented Interfaces:

AutoCloseable

public class KeyDecryptionKey
extends CryptoKey

A key that is used to decrypt (or "unwrap") other keys that have been encrypted with a KeyEncryptionKey.

Constructor Summary

Constructors

Constructor	Description
KeyDecryptionKey(SecretBuilder builder)	Initialises the key with the given secret data.

Method Summary

Modifier and Type	Method	Description
Cipher	getCipher()	Returns an initialized cipher object for an appropriate default algorithm and parameters.
Cipher	getCipher(String algorithm)	Returns an initialized cipher object with default parameters.
Cipher	getCipher(String algorithm, AlgorithmParameters parameters)	Returns an initialized cipher object for the given algorithm and parameters.
Cipher	getCipher(String algorithm, AlgorithmParameterSpec parameterSpec)	Returns an initialized cipher object for the given algorithm and parameters.

Methods inherited from class org.forgerock.secrets.keys.CryptoKey

close, export, getCertificate, getCertificate, getCertificateChain, getCertificateChain, getKeyAlgorithm, getKeyType, getKeyUsages, getPublicKey, getPublicKey, isClosed, isExtractable, reveal, revealAndClose, toString

Methods inherited from class org.forgerock.secrets.Secret

equals, getExpiryTime, getStableId, hashCode, isExpired

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

KeyDecryptionKey

public KeyDecryptionKey(SecretBuilder builder)
                 throws NoSuchSecretException

Initialises the key with the given secret data.

Parameters:

builder - the builder object.

Throws:

NoSuchSecretException - if the secret could not be constructed from the builder.

Method Detail

getCipher

public Cipher getCipher()

Returns an initialized cipher object for an appropriate default algorithm and parameters. A best-effort attempt will be made to pick a strong cipher algorithm based on the type of key.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm,
                        AlgorithmParameterSpec parameterSpec)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameterSpec - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm,
                        AlgorithmParameters parameters)

Returns an initialized cipher object for the given algorithm and parameters.

Parameters:

algorithm - the cipher algorithm.

parameters - the parameters to initialise the cipher with.

Returns:

the initialized cipher object.

getCipher

public Cipher getCipher(String algorithm)

Returns an initialized cipher object with default parameters.

Parameters:

algorithm - the cipher algorithm.

Returns:

the initialized cipher object.