io.getlime.security.powerauth.client.vault

Class PowerAuthClientVault

java.lang.Object

io.getlime.security.powerauth.client.vault.PowerAuthClientVault

public class PowerAuthClientVault
extends Object

Class implementing client-side processes related to PowerAuth secure vault.

Author:

Petr Dvorak

Constructor Summary

Constructors

Constructor and Description
PowerAuthClientVault()

Method Summary

Modifier and Type	Method and Description
PrivateKey	decryptDevicePrivateKey(byte[] cDevicePrivateKey, SecretKey vaultEncryptionKey) Decrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.
SecretKey	decryptVaultEncryptionKey(byte[] cVaultEncryptionKey, SecretKey masterTransportKey, long ctr) Decrypts the vault encryption key KEY_ENCRYPTION_VAULT using a transport key KEY_ENCRYPTION_VAULT_TRANSPORT.
byte[]	encryptDevicePrivateKey(PrivateKey devicePrivateKey, SecretKey vaultEncryptionKey) Encrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PowerAuthClientVault

public PowerAuthClientVault()

Method Detail

decryptVaultEncryptionKey

public SecretKey decryptVaultEncryptionKey(byte[] cVaultEncryptionKey,
                                           SecretKey masterTransportKey,
                                           long ctr)
                                    throws InvalidKeyException

Decrypts the vault encryption key KEY_ENCRYPTION_VAULT using a transport key KEY_ENCRYPTION_VAULT_TRANSPORT.

Parameters:

cVaultEncryptionKey - Encrypted vault encryption key KEY_ENCRYPTION_VAULT.

masterTransportKey - Master transport key used for deriving a transport key, used for decrypting vault encryption key.

ctr - Counter used for key derivation.

Returns:

Original KEY_ENCRYPTION_VAULT

Throws:

InvalidKeyException - In case invalid key is provided.

encryptDevicePrivateKey

public byte[] encryptDevicePrivateKey(PrivateKey devicePrivateKey,
                                      SecretKey vaultEncryptionKey)
                               throws InvalidKeyException

Encrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.

Parameters:

devicePrivateKey - Device private key KEY_DEVICE_PRIVATE.

vaultEncryptionKey - Vault encryption key KEY_ENCRYPTION_VAULT.

Returns:

Encrypted private key.

Throws:

InvalidKeyException - In case invalid key is provided.

decryptDevicePrivateKey

public PrivateKey decryptDevicePrivateKey(byte[] cDevicePrivateKey,
                                          SecretKey vaultEncryptionKey)
                                   throws InvalidKeyException

Decrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.

Parameters:

cDevicePrivateKey - Encrypted device private key KEY_DEVICE_PRIVATE.

vaultEncryptionKey - Vault encryption key KEY_ENCRYPTION_VAULT.

Returns:

Original private key.

Throws:

InvalidKeyException - In case invalid key is provided.