org.apache.sshd.common.config.keys.loader

Class AESPrivateKeyObfuscator

java.lang.Object

org.apache.sshd.common.config.keys.loader.AbstractPrivateKeyObfuscator

org.apache.sshd.common.config.keys.loader.AESPrivateKeyObfuscator

All Implemented Interfaces:

PrivateKeyObfuscator

Direct Known Subclasses:

OpenSSHKeyPairResourceWriter.KeyEncryptor

public class AESPrivateKeyObfuscator
extends AbstractPrivateKeyObfuscator

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private static class	AESPrivateKeyObfuscator.LazyKeyLengthsHolder

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CIPHER_NAME
static AESPrivateKeyObfuscator	INSTANCE

Constructor Summary

Constructors

Constructor and Description
AESPrivateKeyObfuscator()

Method Summary

Modifier and Type	Method and Description
byte[]	applyPrivateKeyCipher(byte[] bytes, PrivateKeyEncryptionContext encContext, boolean encryptIt)
static java.util.function.Predicate<CipherInformation>	createCipherSelector(int keyLength, java.lang.String cipherMode)
static java.util.List<java.lang.Integer>	getAvailableKeyLengths()
java.util.List<java.lang.Integer>	getSupportedKeySizes()
protected CipherInformation	resolveCipherInformation(int keyLength, java.lang.String cipherMode)
protected int	resolveInitializationVectorLength(PrivateKeyEncryptionContext encContext)
protected int	resolveKeyLength(PrivateKeyEncryptionContext encContext)

Methods inherited from class org.apache.sshd.common.config.keys.loader.AbstractPrivateKeyObfuscator

appendPrivateKeyEncryptionContext, applyPrivateKeyCipher, deriveEncryptionKey, generateInitializationVector, getCipherName

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CIPHER_NAME

public static final java.lang.String CIPHER_NAME

See Also:

Constant Field Values

INSTANCE

public static final AESPrivateKeyObfuscator INSTANCE

Constructor Detail

AESPrivateKeyObfuscator

public AESPrivateKeyObfuscator()

Method Detail

getSupportedKeySizes

public java.util.List<java.lang.Integer> getSupportedKeySizes()

Returns:

A List of the supported key sizes - Note: every call returns a and un-modifiable instance.

applyPrivateKeyCipher

public byte[] applyPrivateKeyCipher(byte[] bytes,
                                    PrivateKeyEncryptionContext encContext,
                                    boolean encryptIt)
                             throws java.security.GeneralSecurityException,
                                    java.io.IOException

Parameters:

bytes - Original bytes

encContext - The encryption context

encryptIt - If true then encrypt the original bytes, otherwise decrypt them

Returns:

The result of applying the cipher to the original bytes

Throws:

java.security.GeneralSecurityException - If cannot encrypt/decrypt

java.io.IOException - If malformed input

resolveInitializationVectorLength

protected int resolveInitializationVectorLength(PrivateKeyEncryptionContext encContext)
                                         throws java.security.GeneralSecurityException

Specified by:

resolveInitializationVectorLength in class AbstractPrivateKeyObfuscator

Throws:

java.security.GeneralSecurityException

resolveCipherInformation

protected CipherInformation resolveCipherInformation(int keyLength,
                                                     java.lang.String cipherMode)

resolveKeyLength

protected int resolveKeyLength(PrivateKeyEncryptionContext encContext)
                        throws java.security.GeneralSecurityException

Specified by:

resolveKeyLength in class AbstractPrivateKeyObfuscator

Throws:

java.security.GeneralSecurityException

getAvailableKeyLengths

public static java.util.List<java.lang.Integer> getAvailableKeyLengths()

Returns:

A List of Integers holding the available key lengths values (in bits) for the JVM. Note: AES 256 requires special JCE policy extension installation (e.g., for Java 7 see this link)

createCipherSelector

public static java.util.function.Predicate<CipherInformation> createCipherSelector(int keyLength,
                                                                                   java.lang.String cipherMode)