net.lightbody.bmp.mitm.util

Class EncryptionUtil

java.lang.Object

net.lightbody.bmp.mitm.util.EncryptionUtil

public class EncryptionUtil
extends Object

A collection of simple JCA-related utilities.

Constructor Summary

Constructors

Constructor and Description
EncryptionUtil()

Method Summary

Modifier and Type	Method and Description
static String	getDigitalSignatureType(Key signingKey) Returns the type of digital signature used with the specified signing key.
static BigInteger	getRandomBigInteger(int bits) Creates a random BigInteger greater than 0 with the specified number of bits.
static String	getSignatureAlgorithm(String messageDigest, Key signingKey) Creates a signature algorithm string using the specified message digest and the encryption type corresponding to the supplied signingKey.
static boolean	isEcKey(Key key) Returns true if the key is an elliptic curve public or private key.
static boolean	isRsaKey(Key key) Returns true if the key is an RSA public or private key.
static boolean	isUnlimitedStrengthAllowed() Determines if unlimited-strength cryptography is allowed, i.e.
static String	readPemStringFromFile(File file) Convenience method to read PEM data from a file.
static void	writePemStringToFile(File file, String pemDataToWrite) Convenience method to write PEM data to a file.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncryptionUtil

public EncryptionUtil()

Method Detail

getSignatureAlgorithm

public static String getSignatureAlgorithm(String messageDigest,
                                           Key signingKey)

Creates a signature algorithm string using the specified message digest and the encryption type corresponding to the supplied signingKey. Useful when generating the signature algorithm to be used to sign server certificates using the CA root certificate's signingKey.

For example, if the root certificate has an RSA private key, and you wish to use the SHA256 message digest, this method will return the string "SHA256withRSA". See the "Signature Algorithms" section of http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html for a list of JSSE-supported signature algorithms.

Parameters:

messageDigest - digest to use to sign the certificate, such as SHA512

signingKey - private key that will be used to sign the certificate

Returns:

a JCA-compatible signature algorithm

getDigitalSignatureType

public static String getDigitalSignatureType(Key signingKey)

Returns the type of digital signature used with the specified signing key.

Parameters:

signingKey - private key that will be used to sign a certificate (or something else)

Returns:

a string representing the digital signature type (ECDSA, RSA, etc.)

getRandomBigInteger

public static BigInteger getRandomBigInteger(int bits)

Creates a random BigInteger greater than 0 with the specified number of bits.

Parameters:

bits - number of bits to generate

Returns:

random BigInteger

isRsaKey

public static boolean isRsaKey(Key key)

Returns true if the key is an RSA public or private key.

isEcKey

public static boolean isEcKey(Key key)

Returns true if the key is an elliptic curve public or private key.

writePemStringToFile

public static void writePemStringToFile(File file,
                                        String pemDataToWrite)

Convenience method to write PEM data to a file. The file will be encoded in the US_ASCII character set.

Parameters:

file - file to write to

pemDataToWrite - PEM data to write to the file

readPemStringFromFile

public static String readPemStringFromFile(File file)

Convenience method to read PEM data from a file. The file encoding must be US_ASCII.

Parameters:

file - file to read from

Returns:

PEM data from file

isUnlimitedStrengthAllowed

public static boolean isUnlimitedStrengthAllowed()

Determines if unlimited-strength cryptography is allowed, i.e. if this JRE has then the unlimited strength policy files installed.

Returns:

true if unlimited strength cryptography is allowed, otherwise false