org.cryptacular.generator

Class AESP12Generator

java.lang.Object

org.cryptacular.generator.AbstractP12Generator

org.cryptacular.generator.AESP12Generator

All Implemented Interfaces:

P12Generator

public class AESP12Generator
extends AbstractP12Generator

Generates PKCS12 containers using the PBES2 algorithm with the AES-256-CBC cipher for encryption, which is the most portable and secure algorithm in use with PKCS12 at this time.

Author:

Marvin S. Addison

Field Summary

Fields

Modifier and Type	Field and Description
static Set<org.bouncycastle.asn1.ASN1ObjectIdentifier>	SUPPORTED_DIGEST_ALGORITHMS Set of supported digest algorithms.

Constructor Summary

Constructors

Constructor and Description
AESP12Generator() Creates a new instance that encrypts with AES-256-CBC and SHA256 using 2048 rounds of hashing.
AESP12Generator(org.bouncycastle.asn1.ASN1ObjectIdentifier digestAlgId, int iterations) Creates a new instances that uses AES-256-CBC and the given digest algorithm to encrypt data.
AESP12Generator(int iterations) Creates a new instance that encrypts with AES-256-CBC and SHA256 using the given number of hashing rounds.

Method Summary

Modifier and Type	Method and Description
protected org.bouncycastle.operator.OutputEncryptor	dataOutputEncryptor(char[] password) Builds a new output encryptor that performs password-based encryption on encrypted data in the P12 file.
protected org.bouncycastle.asn1.ASN1ObjectIdentifier	getDigestAlgorithmId()
protected DigestSpec	getDigestSpec()
int	getIterations()
protected org.bouncycastle.operator.OutputEncryptor	keyOutputEncryptor(char[] password) Builds a new output encryptor that performs password-based encryption on keys in the P12 file.

Methods inherited from class org.cryptacular.generator.AbstractP12Generator

generate, generate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SUPPORTED_DIGEST_ALGORITHMS

public static final Set<org.bouncycastle.asn1.ASN1ObjectIdentifier> SUPPORTED_DIGEST_ALGORITHMS

Set of supported digest algorithms.

Constructor Detail

AESP12Generator

public AESP12Generator()

Creates a new instance that encrypts with AES-256-CBC and SHA256 using 2048 rounds of hashing.

AESP12Generator

public AESP12Generator(int iterations)

Creates a new instance that encrypts with AES-256-CBC and SHA256 using the given number of hashing rounds.

Parameters:

iterations - Number of rounds of encryption.

AESP12Generator

public AESP12Generator(org.bouncycastle.asn1.ASN1ObjectIdentifier digestAlgId,
                       int iterations)

Creates a new instances that uses AES-256-CBC and the given digest algorithm to encrypt data.

Parameters:

digestAlgId - Digest algorithm identifier.

iterations - Number of rounds of hashing.

Method Detail

getIterations

public int getIterations()

Specified by:

getIterations in class AbstractP12Generator

Returns:

Number of hashing rounds.

getDigestAlgorithmId

protected org.bouncycastle.asn1.ASN1ObjectIdentifier getDigestAlgorithmId()

Specified by:

getDigestAlgorithmId in class AbstractP12Generator

Returns:

Digest algorithm object identifier.

getDigestSpec

protected DigestSpec getDigestSpec()

Specified by:

getDigestSpec in class AbstractP12Generator

Returns:

Digest specification.

keyOutputEncryptor

protected org.bouncycastle.operator.OutputEncryptor keyOutputEncryptor(char[] password)

Description copied from class: AbstractP12Generator

Builds a new output encryptor that performs password-based encryption on keys in the P12 file.

Specified by:

keyOutputEncryptor in class AbstractP12Generator

Parameters:

password - Password tha will the basis of an encryption key.

Returns:

Output encryptor.

dataOutputEncryptor

protected org.bouncycastle.operator.OutputEncryptor dataOutputEncryptor(char[] password)

Description copied from class: AbstractP12Generator

Builds a new output encryptor that performs password-based encryption on encrypted data in the P12 file.

Specified by:

dataOutputEncryptor in class AbstractP12Generator

Parameters:

password - Password tha will the basis of an encryption key.

Returns:

Output encryptor.