All Classes and Interfaces
Class
Description
Base interface for extra methods required for handling associated data in AEAD ciphers.
This class provides some default behavior and common implementation for a
X500NameStyle.
The AccessDescription object.
Some other information of non-restrictive nature regarding the usage of this
certificate.
An Admissions structure.
Attribute to indicate admissions to certain professions.
A block cipher mode that includes authenticated encryption with a streaming mode and optional associated data.
Interface for factories producing encryptor/decryptor objects supporting AEAD modes.
ParameterSpec for AEAD modes which allows associated data to be added via an algorithm parameter spec.In normal
circumstances you would only want to use this if you had to work with the pre-JDK1.7 Cipher class as associated
data is ignored for the purposes of returning a Cipher's parameters.
Source class for non-FIPS approved-mode implementations of AES based algorithms.
Factory for non-FIPS AES AEAD encryption/decryption operators.
Parameters for AES non-FIPS AEAD and MAC modes..
Specific AES key generator for non-FIPS algorithms.
Factory for non-FIPS AES key wrap/unwrap operators.
Factory for basic non-FIPS AES encryption/decryption operators.
Parameters for general AES non-FIPS block cipher modes.
Parameters for general AES non-FIPS key wrapping.
Carrier class for an agreement secret key, as well as details about the MAC key if confirmation is provided.
Basic interface for key agreement implementations.
Interface for factories producing Agreement objects supporting key agreement.
Base interface for an algorithm descriptor.
General utility class for helping with AlgorithmParameters.
ANSSI Elliptic curve table.
Object Identifiers belong to the French Agency, ANSSI.
Source class for implementations of ARC4 based algorithms.
ARC4/RC4 key generator.
Factory for basic ARC4/RC4 encryption/decryption operators.
Parameters for ARC4/RC4 cipher modes.
General array utilities.
Iterator backed by a specific array.
An ASN.1 class that encodes to nothing, used in the OER library to deal with the Optional type.
Base class for an ASN.1 ApplicationSpecific object
Interface to parse ASN.1 ApplicationSpecific objects.
Base class for BIT STRING objects
Public facade of ASN.1 Boolean data.
Marker interface for CHOICE objects - if you implement this in a role your
own object any attempt to tag the object implicitly will convert the tag to
an explicit one as the encoding rules require.
Utility class for dumping ASN.1 objects as (hopefully) human friendly strings.
Basic interface to produce serialisers for ASN.1 encodings.
Mutable class for building ASN.1 constructed objects such as SETs or SEQUENCEs.
Supported encoding formats.
Class representing the ASN.1 ENUMERATED type.
Exception thrown in cases of corrupted or unexpected data in a stream.
Class representing the DER-type External
Base class representing the ASN.1 GeneralizedTime type.
Basic class for streaming generators.
A general purpose ASN.1 decoder - note: this class differs from the
others in that it returns null after it has read the last object in
the stream.
Class representing the ASN.1 INTEGER type.
A NULL object - use DERNull.INSTANCE for populating structures.
Base class for defining an ASN.1 object.
Class representing the ASN.1 OBJECT IDENTIFIER type.
Abstract base for the ASN.1 OCTET STRING data type
A basic parser for an OCTET STRING object
Stream that produces output based on the default encoding for the passed in objects.
Exception thrown when correctly encoded, but unexpected data is found in a stream while building an object.
Base class for ASN.1 primitive objects.
ASN.1
SEQUENCE and SEQUENCE OF constructs.A basic parser for a SEQUENCE object
ASN.1
SET and SET OF constructs.A basic parser for a SET object
A parser for ASN.1 streams which also returns, where possible, parsers for the objects it encounters.
General interface implemented by ASN.1 STRING objects for extracting the content String.
ASN.1 TaggedObject - in ASN.1 notation this is any object preceded by
a [n] where n is some number - these are assumed to follow the construction
rules (as with sequences).
Interface for the parsing of a generic tagged ASN.1 object.
- * UTC time object.
base interface that a public/private key block cipher needs
to conform to.
a holding class for public/private parameter pairs.
interface that a public/private key pair generator should conform to.
Base class for Diffie-Hellman keys.
Class for Diffie-Hellman private keys.
Class for Diffie-Hellman public keys.
Base class for Digital Signature Algorithm (DSA) keys.
Class for Digital Signature Algorithm (DSA) private keys.
Class for Digital Signature Algorithm (DSA) public keys.
Base class for DSTU-4145 keys.
Class for DSTU-4145 private keys.
Class for DSTU-4145 public keys.
Class for keys for GOST R 34.10-2001 (ECGOST) private keys.
Class for keys for GOST R 34.10-2001 (ECGOST) public keys.
Base class for Elliptic Curve (EC) keys.
Class for Elliptic Curve (EC) private keys.
Class for Elliptic Curve (EC) public keys.
Base class for Edwards Curve Diffie-Hellman (XDH) keys.
Edwards Curve Diffie-Hellman (XDH) private keys.
Edwards Curve Diffie-Hellman (XDH) public keys.
Base class for keys for GOST R 34.10-1994 and GOST R 34.10-2001.
Class for keys for GOST R 34.10-1994 private keys.
Class for keys for GOST R 34.10-1994 public keys.
Base interface for Public/Private keys.
Carrier class for a public key and its associated private key.
Interface describing a key generator for public/private key pairs.
Interface describing a factory that creates encryptors and decryptors based on public key cryptography.
Marker interface for a private key,
Marker interface for a public key,
Base class for RSA keys.
Specific RSA key usages.
Class for RSA private keys.
Class for RSA public keys.
Base class for Edwards Curve Diffie-Hellman (XDH) keys.
Edwards Curve Diffie-Hellman (XDH) private keys.
Edwards Curve Diffie-Hellman (XDH) public keys.
RFC 5652:
Attribute is a pair of OID (as type identifier) + set of values.
RFC 5652 defines
5 "SET OF Attribute" entities with 5 different names.
This is helper tool to construct
Attributes sets.Holding class for the AttributeTypeAndValue structures that make up an RDN.
RFC 5652 section 9.1:
The AuthenticatedData carries AuthAttributes and other data
which define what really is being signed.
Parse
AuthenticatedData stream.Interface that parameters sets associated with MACs should conform to.
Interface describing parameters used in an authentication mode, such as for a MAC, AEAD cipher, or
a HMAC.
RFC 5083:
CMS AuthEnveloped Data object.
Parse
AuthEnvelopedData input stream.The AuthorityInformationAccess object.
The AuthorityKeyIdentifier object.
Utility class for converting Base64 data to bytes and back again.
A streaming Base64 encoder.
ISO9796-2 - mechanism using a hash function with recovery (scheme 2 and 3).
ISO9796-2 - mechanism using a hash function with recovery (scheme 1)
X9.31-1998 - signing using a hash.
The basic interface that basic Diffie-Hellman implementations
conforms to.
An EntropySourceProvider where entropy generation is based on a SecureRandom output using SecureRandom.generateSeed() in
the case of a JDK SecureRandom or SecureRandom.nextBytes() in the case of a FipsSecureRandom, or a GeneralSecureRandom.
LoadStoreParameter to allow configuring of the PBKDF used to generate encryption keys for
use in the keystore.
Object Identifiers belonging to iso.org.dod.internet.private.enterprise.legion-of-the-bouncy-castle (1.3.6.1.4.1.22554)
Variation of BCStyle that insists on strict ordering for equality
and hashCode comparisons
The default style, based on Bouncy Castle's orginal X509Name class.
An indefinite-length encoding version of an ASN.1 ApplicationSpecific object.
A parser for indefinite-length ASN.1 ApplicationSpecific objects.
Base class for generators for indefinite-length structures.
ASN.1 OctetStrings, with indefinite length rules, and constructed form support.
A generator for indefinite-length OCTET STRINGs
A parser for indefinite-length OCTET STRINGs.
A class which writes indefinite and definite length objects.
Indefinite length SEQUENCE of objects.
A stream generator for DER SEQUENCEs
Parser for indefinite-length SEQUENCEs.
Indefinite length
SET and SET OF constructs.Parser for indefinite-length SETs.
BER TaggedObject - in ASN.1 notation this is any object preceded by
a [n] where n is some number - these are assumed to follow the construction
rules (as with sequences).
Parser for indefinite-length tagged objects.
Tags for encoding BER/DER primitive objects.
BigInteger utilities.
The BiometricData object.
Block cipher engines are expected to conform to this interface.
Block cipher padders are expected to conform to this interface
Source class for implementations of Blowfish based algorithms.
Factory for Blowfish AEAD encryption/decryption operators.
Parameters for Blowfish AEAD and MAC modes..
Blowfish key generator.
Factory for producing Blowfish MAC calculators.
Factory for basic Blowfish encryption/decryption operators.
Parameters for general Blowfish block cipher modes.
The BC FIPS provider.
See https://www.bsi.bund.de/cae/servlet/contentblob/471398/publicationFile/30615/BSI-TR-03111_pdf.pdf
A wrapper class that allows block ciphers to be used to process data in
a piecemeal fashion.
A buffering class to allow translation from one format to another to
be done in discrete chunks.
A buffering class to allow translation from one format to another to
be done in discrete chunks.
An output stream that buffers data to be feed into an encapsulated output stream.
Builder and holder class for preparing SP 800-56A/56B compliant MacData.
Builder to create OtherInfo
Standard type strings for the headers of KAS/KTS MAC calculations.
Source class for implementations of Camellia based algorithms.
Factory for Camellia AEAD encryption/decryption operators.
Parameters for Camellia AEAD and MAC modes..
Camellia key generator.
Factory for Camellia key wrap/unwrap operators.
Factory for producing Camellia MAC calculators.
Factory for basic Camellia encryption/decryption operators.
Parameters for general Camellia block cipher modes.
Camellia WRAP operator parameters for KW and KWP.
Source class for implementations of CAST5 based algorithms.
Factory for CAST5 AEAD encryption/decryption operators.
Parameters for CAST5 AEAD and MAC modes..
CAST5 key generator.
Factory for producing CAST5 MAC calculators.
Factory for basic CAST5 encryption/decryption operators.
Parameters for general CAST5 block cipher modes.
implements Cipher-Block-Chaining (CBC) mode on top of a simple cipher.
standard CBC Block Cipher MAC - if no padding is specified the default of
pad of zeroes is used.
Implements the Counter with Cipher Block Chaining mode (CCM) detailed in
NIST Special Publication 800-38C.
RFC 5084: CCMParameters object.
CertEtcToken ::= CHOICE {
certificate [0] IMPLICIT Certificate ,
esscertid [1] ESSCertId ,
pkistatus [2] IMPLICIT PKIStatusInfo ,
assertion [3] ContentInfo ,
crl [4] IMPLICIT CertificateList,
ocspcertstatus [5] CertStatus,
oscpcertid [6] IMPLICIT CertId ,
oscpresponse [7] IMPLICIT OCSPResponse,
capabilities [8] SMIMECapabilities,
extension Extension
}
ISIS-MTT PROFILE: The responder may include this extension in a response to
send the hash of the requested certificate to the responder.
an X509Certificate structure.
an Iso7816CertificateBody structure.
an Iso7816CertificateHolderAuthorization structure.
PKIX RFC-2459
The X.509 v2 CRL syntax is as follows.
This class helps to support crossCerfificatePairs in a LDAP directory
according RFC 2587
PKCS10 Certification request object.
PKCS10 CertificationRequestInfo object.
CertifiedKeyPair ::= SEQUENCE {
certOrEncCert CertOrEncCert,
privateKey [0] EncryptedValue OPTIONAL,
-- see [CRMF] for comment on encoding
publicationInfo [1] PKIPublicationInfo OPTIONAL
}
CertPolicyId, used in the CertificatePolicies and PolicyMappings
X509V3 Extensions.
implements a Cipher-FeedBack (CFB) mode on top of a simple cipher.
Source class for implementations of ChaCha20 based algorithms.
ChaCha20 key generator.
Factory for basic ChaCha20 encryption/decryption operators.
Parameters for ChaCha20 cipher.
Interface for a converter that produces a byte encoding for a char array.
A CipherInputStream is composed of an InputStream and a cipher so that read() methods return data
that are read in from the underlying InputStream but have been additionally processed by the
Cipher.
A CipherInputStream is composed of an InputStream and a cipher so that read() methods return data
that are read in from the underlying InputStream but have been additionally processed by the
Cipher.
The base class for symmetric, or secret, cipher key generators.
Returned stream for writing data for encryption/decryption.
A CipherOutputStream is composed of an OutputStream and a cipher so that write() methods process
the written data with the cipher, and the output of the cipher is in turn written to the
underlying OutputStream.
A CipherOutputStream is composed of an OutputStream and a cipher so that write() methods process
the written data with the cipher, and the output of the cipher is in turn written to the
underlying OutputStream.
all parameter classes implement this.
CMAC - as specified at www.nuee.nagoya-u.ac.jp/labs/tiwata/omac/omac.html
From RFC 6211
RFC 5652 CMS attribute OID constants.
A simple collection backed store.
Commitment type qualifiers, used in the Commitment-Type-Indication attribute (RFC3126).
CompleteRevocationRefs ::= SEQUENCE OF CrlOcspRef
RFC 3274: CMS Compressed Data.
Parser of RFC 3274
CompressedData object.Carrier class for a key pair which validates the consistency of the keys at construction time.
RFC 5652
ContentInfo object parser.CRL Bag for PKCS#12
CrlIdentifier ::= SEQUENCE
{
crlissuer Name,
crlIssuedTime UTCTime,
crlNumber INTEGER OPTIONAL
}
CRLListID ::= SEQUENCE {
crls SEQUENCE OF CrlValidatedID }
The CRLNumber object.
CrlOcspRef ::= SEQUENCE {
crlids [0] CRLListID OPTIONAL,
ocspids [1] OcspListID OPTIONAL,
otherRev [2] OtherRevRefs OPTIONAL
}
The CRLReason enumeration.
CrlValidatedID ::= SEQUENCE {
crlHash OtherHash,
crlIdentifier CrlIdentifier OPTIONAL }
the foundation class for the hard exceptions thrown by the crypto packages.
GOST Algorithms OBJECT IDENTIFIERS :
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)}
Permissions that need to be configured if a SecurityManager is used.
Basic registrar class for providing defaults for cryptography services in this module.
Available properties that can be set.
The CscaMasterList object.
an iso7816Certificate structure.
Data ::= CHOICE {
message OCTET STRING ,
messageImprint DigestInfo,
certs [0] SEQUENCE SIZE (1..MAX) OF
TargetEtcChain
}
The DataGroupHash object.
this exception is thrown if a buffer that is meant to have output
copied into it turns out to be too short, or if we've been given
insufficient input.
A declaration of majority.
Exception thrown if an attempt is made to decode invalid data, or some other failure occurs.
JcaJceHelper that always returns implementations based on this JVM's default settings.
A DER encoding version of an application specific object.
A BIT STRING with DER encoding - the first byte contains the count of padding bits included in the byte array's last byte.
DER BMPString object encodes BMP (Basic Multilingual Plane) subset
(aka UCS-2) of UNICODE (ISO 10646) characters in codepoints 0 to 65535.
Class representing the DER-type External
Parser DER EXTERNAL tagged objects.
DER Generalized time object.
ASN.1 GENERAL-STRING data type.
Basic class for streaming DER encoding generators.
DER IA5String object - this is a ISO 646 (ASCII) string encoding code points 0 to 127.
base interface for general purpose byte derivation functions.
Parameters for key/byte stream derivation classes
Builder and holder class for preparing SP 800-56A/56B compliant MacData.
Builder to create OtherInfo
Standard type strings for the headers of KAS/KTS MAC calculations.
A NULL object.
DER NumericString object - this is an ascii string of characters {0,1,2,3,4,5,6,7,8,9, }.
Carrier class for a DER encoding OCTET STRING
Parser for DER encoded OCTET STRINGS
Builder and holder class for preparing SP 800-56A compliant OtherInfo.
Builder to create OtherInfo
Stream that outputs encoding based on distinguished encoding rules.
DER PrintableString object.
Definite length SEQUENCE, encoding tells explicit number of bytes
that the content of this sequence occupies.
A stream generator for DER SEQUENCEs
Parser class for DER SEQUENCEs.
A DER encoded SET object
Parser class for DER SETs.
DER T61String (also the teletex string), try not to use this if you don't need to.
DER TaggedObject - in ASN.1 notation this is any object preceded by
a [n] where n is some number - these are assumed to follow the construction
rules (as with sequences).
DER UniversalString object - encodes UNICODE (ISO 10646) characters using 32-bit format.
DER UTC time object.
DER UTF8String object.
DER VisibleString object encoding ISO 646 (ASCII) character code points 32 to 126.
Source class for implementations of DES based algorithms.
Factory for DES AEAD encryption/decryption operators.
Parameters for DES AEAD and MAC modes..
DES key generator.
Factory for producing DES MAC calculators.
Factory for basic DES encryption/decryption operators.
Parameters for general DES block cipher modes.
Container class for Diffie-Hellman domain parameters.
Extension class for DHParameterSpec that wraps a DHDomainParameters object and provides the q domain parameter.
A DHPrivateKeySpec that also carries a set of DH domain parameters.
A DHPublicKeySpec that also carries a set of DH domain parameters.
X9.42 definition of a DHPublicKey
Parameter spec to provide Diffie-Hellman Unified model keys and user keying material.
Validation parameters for confirming Diffie-Hellman parameter generation.
interface that a message digest conforms to.
Marker interface for a digest algorithm
base interface for general purpose Digest based byte derivation functions.
RFC 5652 DigestedData object.
The DigestInfo object.
Interface describing an operator factory for creating digest calculators.
The DirectoryString CHOICE object.
DisplayText class, used in
CertificatePolicies X509 V3 extensions (in policy qualifiers).The DistributionPoint object.
The DistributionPointName object.
A DER encoding version of an application specific object.
A Definite length BIT STRING
Class representing the Definite-Length-type External
Stream that outputs encoding based on definite length.
The DLSequence encodes a SEQUENCE using definite length form.
The DLSet encodes ASN.1 SET value without element ordering,
and always using definite length form.
Definite Length TaggedObject - in ASN.1 notation this is any object preceded by
a [n] where n is some number - these are assumed to follow the construction
rules (as with sequences).
X9.44 Diffie-Hellman domain parameters.
Source class for non-FIPS implementations of DSA based algorithms.
interface for classes implementing algorithms modeled similar to the Digital Signature Alorithm.
DSA domain generation parameters for non-FIPS usages.
Generator for DSA domain parameters for non-FIPS usages.
DSA key pair generation parameters for non-FIPS usages.
DSA key pair generator class for non-FIPS usages.
Operator factory for creating non-FIPS DSA based signing and verification operators.
Parameters for non-FIPS DSA signatures.
Container class for DSA domain parameters.
Parameter spec for guiding the generation of DSA Domain Parameters.
Extension class for DSAParameterSpec that wraps a DSADomainParameters object and provides the validation
parameters if available.
Validation parameters for confirming DSA parameter generation.
Source class for implementations of DSTU4145 based algorithms.
DSTU4145 key pair generation parameters.
DSTU4145 key pair generator class.
Operator factory for creating little-endian format DSTU4145 based signing and verification operators.
Operator factory for creating DSTU4145 based signing and verification operators.
Parameters for DSTU4145 signatures.
Main interface for a DSTU-4145 key.
Container class for DSTU4145 parameters.
ParameterSpec for a DSTU4145 key.
DSTU4145 encodes points somewhat differently than X9.62
It compresses the point to the size of the field element
Interface that a DSTU-4145 private key needs to conform to.
This class specifies a DSTU4145 private key with its associated parameters.
Interface that a DSTU-4145 public key needs to conform to.
This class specifies a DSTU4145 public key with its associated parameters.
Command line ASN.1 Dump utility.
Executable class that displays information about the module
DVCSCertInfo::= SEQUENCE {
version Integer DEFAULT 1 ,
dvReqInfo DVCSRequestInformation,
messageImprint DigestInfo,
serialNumber Integer,
responseTime DVCSTime,
dvStatus [0] PKIStatusInfo OPTIONAL,
policy [1] PolicyInformation OPTIONAL,
reqSignature [2] SignerInfos OPTIONAL,
certs [3] SEQUENCE SIZE (1..MAX) OF
TargetEtcChain OPTIONAL,
extensions Extensions OPTIONAL
}
DVCSCertInfo::= SEQUENCE {
version Integer DEFAULT 1 ,
dvReqInfo DVCSRequestInformation,
messageImprint DigestInfo,
serialNumber Integer,
responseTime DVCSTime,
dvStatus [0] PKIStatusInfo OPTIONAL,
policy [1] PolicyInformation OPTIONAL,
reqSignature [2] SignerInfos OPTIONAL,
certs [3] SEQUENCE SIZE (1..MAX) OF
TargetEtcChain OPTIONAL,
extensions Extensions OPTIONAL
}
DVCSErrorNotice ::= SEQUENCE {
transactionStatus PKIStatusInfo ,
transactionIdentifier GeneralName OPTIONAL
}
OIDs for RFC 3029
Data Validation and Certification Server Protocols
DVCSRequest ::= SEQUENCE {
requestInformation DVCSRequestInformation,
data Data,
transactionIdentifier GeneralName OPTIONAL
}
DVCSRequestInformation ::= SEQUENCE {
version INTEGER DEFAULT 1 ,
service ServiceType,
nonce Nonce OPTIONAL,
requestTime DVCSTime OPTIONAL,
requester [0] GeneralNames OPTIONAL,
requestPolicy [1] PolicyInformation OPTIONAL,
dvcs [2] GeneralNames OPTIONAL,
dataLocations [3] GeneralNames OPTIONAL,
extensions [4] IMPLICIT Extensions OPTIONAL
}
DVCSRequestInformation ::= SEQUENCE {
version INTEGER DEFAULT 1 ,
service ServiceType,
nonce Nonce OPTIONAL,
requestTime DVCSTime OPTIONAL,
requester [0] GeneralNames OPTIONAL,
requestPolicy [1] PolicyInformation OPTIONAL,
dvcs [2] GeneralNames OPTIONAL,
dataLocations [3] GeneralNames OPTIONAL,
extensions [4] IMPLICIT Extensions OPTIONAL
}
DVCSResponse ::= CHOICE
{
dvCertInfo DVCSCertInfo ,
dvErrorNote [0] DVCSErrorNotice
}
DVCSTime ::= CHOICE {
genTime GeneralizedTime,
timeStampToken ContentInfo
}
German Federal Office for Information Security
(Bundesamt für Sicherheit in der Informationstechnik)
http://www.bsi.bund.de/
A Two-Pass Authenticated-Encryption Scheme Optimized for Simplicity and
Efficiency - by M.
Source class for non-FIPS implementations of Elliptic Curve based algorithms.
Operator factory for creating non-FIPS EC DSA based signing and verification operators.
EC DSA signature parameters for non-FIPS algorithms.
EC key pair generation parameters for non-FIPS usages.
EC key pair generator class for non-FIPS usages.
ECC-CMS-SharedInfo ::= SEQUENCE {
keyInfo AlgorithmIdentifier,
entityUInfo [0] EXPLICIT OCTET STRING OPTIONAL,
suppPubInfo [2] EXPLICIT OCTET STRING }
base class for an elliptic curve
Elliptic curves over F2m.
Elliptic curve over Fp
Container class for Elliptic Curve domain parameters.
Base interface for an EC domain parameters ID.
General index for Elliptic Curve parameters.
Extension class for ECParameterSpec that wraps a ECDomainParameters object or an ECParameterSpec
an Iso7816ECDSAPublicKeyStructure structure.
Class representing the Elements of the finite field
F2m in polynomial basis (PB)
representation.Source class for implementations of ECGOST3410 based algorithms.
ECGOST3410 key pair generation parameters.
ECGOST3410 key pair generator class.
Operator factory for creating ECGOST3410 based signing and verification operators.
Parameters for ECGOST3410 signatures.
table of the available named parameters for GOST 3410-2001.
Interface that a ECGOST-3410 private key needs to conform to.
This class specifies a ECGOST3410-94 private key with its associated parameters.
Interface that a ECGOST-3410 public key needs to conform to.
This class specifies a ECGOST3410-94 public key with its associated parameters.
Extension class that identifies this domain parameter set as being the ImplicitlyCa domain
parameters for this JVM.
Extension of ECParameterSpec which marks a parameter set as being the ImplicitlyCA parameters for this JVM.
Interface for classes encapsulating a point multiplication algorithm
for
ECPoints.A general class that reads all X9.62 style EC curve tables.
base class for points on elliptic curves.
Elliptic curve points over F2m
Elliptic curve points over Fp
the elliptic curve private key object from SEC 1
Base interface for an EdDSA signing/verification key.
ParameterSpec for EdDSA signature algorithms.
Source class for implementations of Edwards Elliptic Curve based algorithms.
Edwards Curve DSA key pair generator.
Operator factory for creating Edwards Curve DSA based signing and verification operators.
Edwards Curve key pair generation parameters.
Factory for Agreement operators based on Edwards Curve Diffie-Hellman.
Edwards Curve Diffie-Hellman key pair generator.
Edwards Elliptic Curve Object Identifiers (RFC 8410)
Source class for implementations of ElGamal based algorithms.
ElGamal key pair generation parameters.
ElGamal key pair generator class.
Factory for creating ElGamal key wrap/unwrap operators.
Parameters for use with OAEP formatted key wrapping/unwrapping and encryption/decryption.
Factory for creating ElGamal encryption/decryption operators.
Base class for ElGamal encryption/decryption and key wrap/unwrap parameters.
Parameters for use with PKCS#1 v1.5 formatted key wrapping/unwrapping and encryption/decryption.
Parameters for use with unformatted encryption/decryption.
Marker interface for parameters that can also be used for key wrapping.
Interface describing an encapsulated secret extractor.
Interface describing an encapsulated secret generator, such as for RSA KTS.
Interface implemented by objects that can be converted into byte arrays.
Encode and decode byte arrays (typically from binary to 7-bit ASCII
encodings).
Exception thrown if an attempt is made to encode invalid data, or some other failure occurs.
RFC 5652 EncryptedContentInfo object.
Parser for RFC 5652 EncryptedContentInfo object.
RFC 5652 EncryptedData object.
The EncryptedData object.
EncryptedObjectStoreData ::= SEQUENCE {
encryptionAlgorithm AlgorithmIdentifier
encryptedContent OCTET STRING
}
EncryptedPrivateKeyObjectData ::= SEQUENCE {
encryptedPrivateKeyInfo EncryptedPrivateKeyInfo,
certificates SEQUENCE OF Certificate
}
EncryptedSecretKeyData ::= SEQUENCE {
keyEncryptionAlgorithm AlgorithmIdentifier,
encryptedKeyData OCTET STRING
}
Base interface describing an entropy source for a DRBG.
Base interface describing a provider of entropy sources.
Utility methods for making use of EntropySources.
RFC 5652 EnvelopedData object.
Parser of RFC 5652
EnvelopedData object.RFC 5544:
Binding Documents with Time-Stamps; Evidence object.
The extendedKeyUsage object.
an object for the elements in the X.509 V3 extension block.
Generator for X.509 extensions
Basic 20 byte finger print class.
Base class for the approved mode AEADOperatorFactory implementations.
Source class for approved implementations of AES based algorithms
Factory for AEAD encryption/decryption operations.
Parameters for AES AEAD and MAC modes..
AES key generator.
Factory for producing FIPS AES key wrap/unwrap operators.
Factory for producing FIPS AES MAC calculators.
Factory for basic AES encryption/decryption operators.
General AES operator parameters.
Parameters for AES key wrap operators.
Base class for the FIPS approved mode Agreement implementations.
Base class for the approved mode AgreementFactory implementations.
Base parameters class for Diffie-Hellman and MQV based key agreement algorithms.
Base class for FIPS approved algorithm identifier implementations.
Base class for the FIPS approved mode AsymmetricKeyPairGenerator implementations.
Error thrown if a key pair consistency test fails.
Source class for FIPS approved mode Diffie-Hellman implementations.
Parameters for Diffie-Hellman based key agreement.
Factory for Agreement operators based on Diffie-Hellman
Factory for Unified Agreement operators based on Diffie-Hellman
Parameters for Diffie-Hellman based key agreement using DHU.
Initial builder for DHU parameters.
Parameters for generating Diffie-Hellman domain parameters.
Generator class for Diffie-Hellman domain parameters.
Parameters for Diffie-Hellman key pair generation.
Key pair generator for Diffie-Hellman key pairs.
Factory for Agreement operators based on MQV
Parameters for Diffie-Hellman based key agreement using MQV.
Initial builder for MQV parameters.
Marker class for a FIPS approved digest algorithm
Base class for classes that produce digest calculators implementing the various FIPS secure hash algorithms.
Source class for FIPS approved implementations of Deterministic Random Bit Generators (DRBGs) from SP 800-90A.
Builder for SecureRandom objects based on the FIPS DRBGs.
Source class for FIPS approved implementations of DSA based algorithms.
Parameters for DSA domain parameter generation.
Domain parameter generator for DSA.
Domain parameter validator for DSA.
Parameters for DSA key pair generation.
DSA key pair generator.
Operator factory for creating DSA based signing and verification operators.
Parameters for DSA signatures.
Source class for FIPS approved implementations of Elliptic Curve algorithms.
Parameters for EC key agreement.
Factory for Agreement operators based on EC Diffie-Hellman and Cofactor Diffie-Hellman.
Factory for Agreement operators based on EC MQV
Parameters for EC DHU key agreement.
Initial builder for DHU parameters.
An enumeration of ECDomainParametersID for the NIST defined EC domain parameters.
Operator factory for creating EC DSA based signing and verification operators.
Parameters for EC DSA signatures.
Parameters for EC key pair generation.
EC key pair generator class.
Factory for Agreement operators based on EC MQV
Parameters for EC MQV key agreement.
Initial builder for MQV parameters.
Base class for the approved mode EncapsulatedSecretExtractor implementations.
Base class for the approved mode EncapsulatingSecretGenerator implementations.
The FipsBlockCipherProvider class is used to provide FIPS implementations to the general package so that the base FIPS engine can be
used in other ways than FIPS allows for.
Base class for the approved mode InputAEADDecryptor implementations.
Base class for the approved mode InputDecryptor implementations.
Source class for FIPS approved Key Derivation Function (KDF) implementations.
Parameters for the X9.63 and CONCATENATION key derivation function.
Parameters builder for the X9.63 and CONCATENATION key derivation function.
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with key agreement.
Factory for operators that derive key material and are associated with key agreement.
An enumeration of the counter locations for Feedback Mode and Double Pipeline Iteration Mode.
Factory for Counter Mode KDFs.
Parameters for the Counter Mode key derivation function.
Parameters for the Counter Mode parameters builder.
Factory for Double Pipeline Iteration Mode KDF.
Parameters for the Double Pipeline Mode key derivation function.
Parameters for the Double Pipeline Mode parameters builder.
Factory for Feedback Mode KDFs.
Parameters for the Feedback Mode key derivation function.
Parameters for the Feedback Mode parameters builder.
Factory for operators that derive key material using the IKEv2 KDF.
Parameters for the IKVEv2 key derivation function.
Parameters builder for the IKEv2 key derivation function.
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with IKEv2.
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with SP 800-108.
Factory for operators that derive key material using the SRTP KDF.
Parameters for the SRTP key derivation function.
Parameters for the SRTP key derivation function.
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with SRTP.
Factory for operators that derive key material using the SSH KDF.
Parameters for the SSH key derivation function.
Parameters builder for the SSH key derivation function.
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with SSH key exchange.
Factory for operators that derive key material using the TLS family of KDFs.
Parameters for the TLS key derivation functions.
Parameter builder for TLS 1.0/1.1
Parameter builder for TLS 1.2
An enumeration of the FIPS approved psuedo-random-function (PRF) for KDFs used with TLS.
The standard string values for TLS key calculation stages.
Base class for the approved mode KDFOperatorFactory implementations.
Base class for the approved mode KeyUnwrapper implementations.
Base class for the approved mode KeyUnwrapper implementations which need a SecureRandom.
Base class for the approved mode KeyWrapOperatorFactory implementations.
Base class for the approved mode KeyWrapper implementations.
Base class for the approved mode KeyWrapper implementations which need a SecureRandom.
Base class for the approved mode KTSOperatorFactory implementations.
Base class for the approved mode MACOperatorFactory implementations.
Nonce generator for use with AEAD ciphers such as GCM.
Base error class for FIPS errors.
Base class for the approved mode OutputAEADDecryptor implementations.
Base class for the approved mode OutputAEADEncryptor implementations.
Base class for the approved mode OutputDecryptor implementations.
Base class for the approved mode OutputDigestCalculator implementations.
Base class for the approved mode OutputEncryptor implementations.
Base class for the approved mode OutputMACCalculator implementations.
Base class for a FIPS signature generator..
Base class for a FIPS signature generator that makes use of a SecureRandom as part of the signing process.
Base class for a FIPS signature verifier.
Base class for a FIPS extendable output function calculator.
Base class for parameter types used in FIPS implementations.
Base class for the approved mode PasswordBasedDeriverFactory implementations.
Source class for FIPS approved implementations of Password-Based Key Derivation algorithms.
Factory for password based key derivation functions that are based on PBKDF2 (PKCS#5 scheme 2).
PBKD parameters.
Initial builder for PBKDF2 parameters.
Local register that provides access to engines for FIPS algorithms for use with general/non-FIPS-approved modes of use.
Source class for FIPS approved implementations of RSA algorithms.
Parameters for RSA key pair generation.
RSA key pair generator class.
Factory for creating RSA key wrap/unwrap operators.
Factory for producing key transport operators based on RSA.
Base class for parameters used with RSA based key transport algorithms.
Parameters for RSA based key transport using OAEP.
Parameters for use with OAEP formatted key wrapping/unwrapping and encryption/decryption.
Parameters for use with PKCS#1 v1.5 format key wrapping/unwrapping.
Parameters for PKCS#1 v1.5 digest signatures.
Parameters for RSA PSS digest signatures.
Operator factory for creating RSA based signing and verification operators.
Base class for RSA digest based signature algorithm parameters.
Parameters for RSA based key transport using SVE.
Base class for RSA key wrapping/unwrapping parameters.
Parameters for RSA X9.31 digest signatures.
Base class for DRBG/RNG SecureRandom implementations that use FIPS approved algorithms.
Error thrown if a self test fails.
Source class for implementations of FIPS approved secure hash algorithms.
Parameters for HMAC modes.
Customizable SHAKE (cSHAKE) parameters.
HMAC key generator
Factory for producing HMAC calculators.
Factory for producing digest calculators.
Generic digest parameters.
Factory for producing extendable output function (XOF) calculators.
Base class for the approved mode SignatureOperatorFactory implementations.
Status utility class - it has three methods on it, one for returning "isReady" status, one for a status message,
and one for the current module checksum.
Base class for the FIPS approved mode SymmetricKeyGenerator implementations.
Base class for the approved mode SymmetricOperatorFactory implementations.
Source class for approved implementations of AES based algorithms
Parameters for Triple-DES AEAD and MAC modes..
Triple-DES key generator.
Factory for producing FIPS Triple-DES key wrap/unwrap operators.
Factory for producing FIPS Triple-DES MAC calculators.
Factory for basic Triple-DES encryption/decryption operators.
General Triple-DES operator parameters.
Parameters for Triple-DES key wrap operators.
Error thrown on an unapproved operation.
Base class for the approved mode XOFOperatorFactory implementations.
An "entropy" provider which returns pre-defined data on request.
Class holding precomputation data for fixed-point multiplications.
A secure random that returns pre-seeded data to calls of nextBytes() or generateSeed().
BigInteger Source - in this case we expect requests for data that will be used
for BigIntegers.
Data Source - in this case we just expect requests for byte arrays.
Base class for sources of fixed "Randomness"
An implementation of the GOST CFB mode with CryptoPro key meshing as described in RFC 4357.
Implements the Galois/Counter mode (GCM) detailed in
NIST Special Publication 800-38D.
RFC 5084: GCMParameters object.
Base class for the marker/algorithm ids for non-FIPS algorithms.
Base class for parameter classes for algorithms allow for authentication using MACs.
base implementation of MD4 family style digest as outlined in
"Handbook of Applied Cryptography", pages 344 - 347.
Marker class for a digest algorithm
The GeneralName object.
The base class for parameter classes for non-FIPS algorithms.
Base class for parameter classes for algorithms that require an initialization vector or nonce.
Base class for DRBG/RNG SecureRandom implementations that use non-FIPS approved algorithms.
Class for containing a restriction object subtrees in NameConstraints.
RFC 5990 GenericHybridParameters class.
The GMAC specialisation of Galois/Counter mode (GCM) detailed in NIST Special Publication
800-38D.
GNU project OID collection
implements the GOST 28147 OFB counter mode (GCTR).
Source class for implementations of GOST28147 based algorithms.
Factory for GOST28147 AEAD encryption/decryption operators.
Parameters for GOST28147 AEAD and MAC modes.
GOST28147 key generator.
Factory for producing GOST28147 MAC calculators.
Factory for basic GOST28147 encryption/decryption operators.
Parameters for general GOST28147 block cipher modes.
A parameter spec generating parameters for GOST-28147.
ASN.1 algorithm identifier parameters for GOST-28147
A parameter spec for the GOST-28147 cipher.
Source class for implementations of GOST3410 based algorithms.
GOST3410 key pair generation parameters.
GOST3410 key pair generator class.
Operator factory for creating GOST3410 based signing and verification operators.
Parameters for GOST3410 signatures.
Domain parameters for GOST R 34.10-1994.
ParameterSpec for a GOST 3410-94 key.
Main interface for a GOST keys.
table of the available named parameters for GOST 3410-94.
Generic base type for GOST R 34.10-1994 and GOST R 34.10-2001.
ParameterSpec for a GOST 3410 key.
Interface that a GOST-3410 private key needs to conform to.
This class specifies a GOST3410-94 private key with its associated parameters.
Interface that a GOST-3410 public key needs to conform to.
This class specifies a GOST3410-94 public key with its associated parameters.
Utility class for converting hex data to bytes and back again.
A streaming Hex encoder.
Converters for going from hex to binary and back.
HMAC implementation based on RFC2104
H(K XOR opad, H(K XOR ipad, text))
The Holder object.
IANA:
{ iso(1) identifier-organization(3) dod(6) internet(1) } == IETF defined things
{ ISOITU(2) intorgs(23) icao(136) }
Source class for implementations of IDEA based algorithms.
Factory for IDEA AEAD encryption/decryption operators.
Parameters for IDEA AEAD and MAC modes.
IDEA key generator.
Factory for producing IDEA MAC calculators.
Factory for basic IDEA encryption/decryption operators.
Parameters for general IDEA block cipher modes.
Implementation of
IetfAttrSyntax as specified by RFC3281.Utility classes that attempt to conform to the practices given in the RFCs published by the IETF.
Exception thrown when an attempt is made to use an illegal key with an algorithm, A key
may be regarded as illegal if it has been created for a specific mode of a particular algorithm
and an attempt is made to use it for a different mode.
Example InfoTypeAndValue contents include, but are not limited
to, the following (un-comment in this ASN.1 module and use as
appropriate for a given environment):
Interface implemented by objects that can be converted from streaming to in-memory objects.
Base interface for an input consuming AEAD Decryptor supporting associated text.
Base interface for an input consuming Decryptor.
Utility methods for ints.
this exception is thrown whenever we find something we don't expect in a
message.
Exception thrown when something unexpected is encountered processing an encrypted stream.
Exception thrown when something unexpected is encountered in verifying a signature.
Exception thrown when an invalid key wrapping is encountered.
Utility methods for processing String objects containing IP addresses.
ISISMT -- Industrial Signature Interoperability Specification
A padder that adds ISO10126-2 padding to a block.
The Iso4217CurrencyCode object.
A padder that adds the padding according to the scheme referenced in
ISO 7814-4 - scheme 2 from ISO 9797-1.
OIDS from ISO/IEC 10118-3:2004
RFC 5652: IssuerAndSerialNumber object.
IssuingDistributionPoint ::= SEQUENCE {
distributionPoint [0] DistributionPointName OPTIONAL,
onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE,
onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE,
onlySomeReasons [3] ReasonFlags OPTIONAL,
indirectCRL [4] BOOLEAN DEFAULT FALSE,
onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
Utility class to allow use of Iterable feature in JDK 1.5+
Base interface for the helper classes for working with the JCA/JCE conform to.
Source class for non-FIPS key derivation functions (KDF).
Factory for scrypt KDFs.
Parameters for the scrypt key derivation function.
Parameters builder for the SCrypt key derivation function.
Interface describing a Key Derivation Function (KDF).
This KDF has been defined by the publicly available NIST SP 800-108 specification.
Note that counter is only supported at the location presented in the
NIST SP 800-108 specification, not in the additional locations present
in the CAVP test vectors.
Interface describing a factory that creates Key Derivation Function (KDF) calculators.
parameters for Key derivation functions for IEEE P1363a
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652:
Content encryption key delivery mechanisms.
Base interface for keys.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652:
Content encryption key delivery mechanisms.
The basic interface for key encapsulation mechanisms.
The base class for parameters to key generators.
Created by dgh on 16/06/15.
The KeyPurposeId object.
ASN.1 def for Diffie-Hellman key exchange KeySpecificInfo structure.
RFC 5652:
Content encryption key delivery mechanisms.
Base interface for a key un-wrapper.
Interface describing a KeyUnwrapper which also requires a SecureRandom as part of its configuration.
The KeyUsage object.
Base interface for a creator of key wrappers and un-wrappers.
Base interface for a key wrapper.
Interface describing a KeyWrapper which also requires a SecureRandom as part of its configuration.
Korea Information Security Agency (KISA)
({iso(1) member-body(2) kr(410) kisa(200004)})
KeySpec for use with secret key extraction with a SecretKeyFactory supporting KTS.
Builder class for creating a KTSExtractKeySpec.
KeySpec for use with secret key generation with a SecretKeyFactory supporting KTS.
Builder class for creating a KTSGenerateKeySpec.
Base KeySpec for creating the agreed key value in a KTS key exchange such as RSA-KEMs
Carrier class for a KTS secret key plus its encapsulation, as well as details about the MAC key if provided.
Base interface for a creator of secret value encapsulators and extractors.
Parameter spec for doing KTS based wrapping via the Cipher API.
Builder class for creating a KTSParameterSpec.
KeySpec for use with the RSA-KTS-KEM-KWS SecretKeyFactory.
The LDSSecurityObject object (V1.8).
The Bouncy Castle License.
The base interface for implementations of message authentication codes (MACs).
base interface for general purpose Mac based byte derivation functions.
Base interface for a creator of MAC calculators.
An output stream which calculates a MAC based on the data that is written to it.
this exception is thrown whenever a cipher requires a change of key, iv
or similar after x amount of bytes enciphered
Interface for Memoable objects.
Exception to be thrown on a failure to reset an object implementing Memoable.
General utility class for helping with MessageDigest.
RFC 5544:
Binding Documents with Time-Stamps; MetaData object.
Microsoft
Monetary limit for transactions.
The MonetaryValue object.
Parameter spec to provide MQV ephemeral keys and user keying material.
RFC 5753/3278: MQVuserKeyingMaterial object.
EC domain parameters associated with a specific object identifier.
JcaJceHelper that always returns implementations based on the named provider specified at construction time.
Structure for a name or pseudonym.
Names of authorities which are responsible for the administration of title
registers.
The NetscapeCertType object.
A Cipher Text Stealing (CTS) mode cipher.
Utility class for fetching curves using their NIST names as published in FIPS-PUB 186-3
NIST:
iso/itu(2) joint-assign(16) us(840) organization(1) gov(101) csor(3)
NoticeReference class, used in
CertificatePolicies X509 V3 extensions
(in policy qualifiers).From RFC 3657
Use of the Camellia Encryption Algorithm
in Cryptographic Message Syntax (CMS)
Optimal Asymmetric Encryption Padding (OAEP) - see PKCS 1 V 2.
ObjectData ::= SEQUENCE {
type INTEGER,
identifier UTF8String,
creationDate GeneralizedTime,
lastModifiedDate GeneralizedTime,
data OCTET STRING,
comment UTF8String OPTIONAL
}
ObjectDataSequence ::= SEQUENCE OF ObjectData
ObjectDigestInfo ASN.1 structure used in v2 attribute certificates.
ObjectStore ::= SEQUENCE {
CHOICE {
encryptedObjectStoreData EncryptedObjectStoreData,
objectStoreData ObjectStoreData
}
integrityCheck ObjectStoreIntegrityCheck
}
ObjectStoreData ::= SEQUENCE {
version INTEGER.
ObjectStoreIntegrityCheck ::= CHOICE {
PbeMacIntegrityCheck
}
An implementation of the "work in progress" Internet-Draft The OCB Authenticated-Encryption
Algorithm, licensed per:
OcspIdentifier ::= SEQUENCE {
ocspResponderID ResponderID, -- As in OCSP response data
producedAt GeneralizedTime -- As in OCSP response data
}
OcspListID ::= SEQUENCE {
ocspResponses SEQUENCE OF OcspResponsesID
}
OcspResponsesID ::= SEQUENCE {
ocspIdentifier OcspIdentifier,
ocspRepHash OtherHash OPTIONAL
}
implements a Output-FeedBack (OFB) mode on top of a simple cipher.
Class for breaking up an OID into it's component tokens, ala
java.util.StringTokenizer.
OIW organization's OIDs:
Implements OpenPGP's rather strange version of Cipher-FeedBack (CFB) mode
on top of a simple cipher.
Base error class for errors that occur in the general classes.
Exception thrown if an operator has not been properly initialized.
Interface allowing an operator to be created with a particular SecureRandom.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652: OriginatorInfo object.
RFC 5652:
Content encryption key delivery mechanisms.
OtherHash ::= CHOICE {
sha1Hash OtherHashValue, -- This contains a SHA-1 hash
otherHash OtherHashAlgAndValue
}
ASN.1 def for Diffie-Hellman key exchange OtherInfo structure.
RFC 5652: OtherKeyAttribute object.
The OtherName object.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652: OtherRevocationInfoFormat object.
OtherRevRefs ::= SEQUENCE {
otherRevRefType OtherRevRefType,
otherRevRefs ANY DEFINED BY otherRevRefType
}
OtherRevRefType ::= OBJECT IDENTIFIER
OtherRevVals ::= SEQUENCE {
otherRevValType OtherRevValType,
otherRevVals ANY DEFINED BY OtherRevValType
}
OtherRevValType ::= OBJECT IDENTIFIER
Base interface for an output producing AEAD Decryptor supporting associated text.
Base interface for an output producing AEAD Encryptor supporting associated text.
Base interface for a cipher which produces encrypted/decrypted output.
Base interface for an output producing Decryptor.
Base interface for a digest calculator.
Base interface for an output producing Encryptor.
Base interface for a MAC calculator.
Base interface for an output signer.
Interface for an output signer that can make use of a SecureRandom,
Interface for an output signer that also supports message recovery from the signature.
Utility class for creating OutputStreams from different JCA/JCE operators.
Base interface for an output verifier which can be used to verify a signature against a data stream.
Interface for an output signer that also supports message recovery from the signature.
Base interface for an eXtendable Output Funnction (XOF) calculator.
Utility methods for converting byte arrays into ints and longs, and back again.
EAC encoding date object
A wrapper class that allows block ciphers to be used to process data in
a piecemeal fashion with padding.
Base interface for operator parameters.
Interface describing parameters that have an initialization vector (IV) associated with them.
Cipher parameters with a fixed salt value associated with them.
Base interface for a password based deriver of bytes for symmetric keys.
The target key type we are trying to produce a key for.
Base interface for a creator of password based key derivers.
Standard char[] to byte[] converters for password based derivation algorithms.
RFC 5652:
Content encryption key delivery mechanisms.
PathProcInput ::= SEQUENCE {
acceptablePolicySet SEQUENCE SIZE (1..MAX) OF
PolicyInformation,
inhibitPolicyMapping BOOLEAN DEFAULT FALSE,
explicitPolicyReqd [0] BOOLEAN DEFAULT FALSE ,
inhibitAnyPolicy [1] BOOLEAN DEFAULT FALSE
}
super class for all Password Based Encryption (PBE) parameter generator classes.
Source class for implementations of Password-Based Key Derivation Algorithms
Factory for password based key derivation functions.
Initial builder for OpenSSL
PBKD parameters.
Initial builder for general PBKD parameters.
A password based key for use with PBKDF1 as defined in PKCS#5.
A password based key for use with PBKDF1 as defined in PKCS#5 with full PBE parameters.
Configuration class for a PBKDF using PKCS#5 Scheme 2.
A password based key for use with PBKDF2 as defined in PKCS#5.
PBEKeySpec allowing for the use of alternate PRFs with PBKDF2.
A password based key for use with PBKDF2 as defined in PKCS#5 with full PBE parameters.
PBEParameterSpec allowing for the use of alternate PRFs with PBKDF2.
PBKDF2-params ::= SEQUENCE {
salt CHOICE {
specified OCTET STRING,
otherSource AlgorithmIdentifier {{PBKDF2-SaltSources}}
},
iterationCount INTEGER (1..MAX),
keyLength INTEGER (1..MAX) OPTIONAL,
prf AlgorithmIdentifier {{PBKDF2-PRFs}} DEFAULT algid-hmacWithSHA1 }
Base class for PBKDF configs.
Base interface for keys associated with various password based key derivation functions (PBKDF).
PbkdMacIntegrityCheck ::= SEQUENCE {
macAlgorithm AlgorithmIdentifier,
pbkdAlgorithm KeyDerivationFunc,
mac OCTET STRING
}
Exception thrown on failure to generate a PEM object.
Class representing a PEM header (name, value) pair.
A generic PEM object - type, header properties, and byte content.
Base interface for generators of PEM objects.
Base interface for parsers to convert PEM objects into specific objects.
A generic PEM reader, based on the format outlined in RFC 1421
A generic PEM writer, based on RFC 1421
Contains personal data for the otherName field in the subjectAltNames
extension.
the infamous Pfx from PKCS12
A password based key for use with PKCS#12.
A password based key for use with PKCS#12 with full PBE parameters.
LoadStoreParameter to allow for additional config with PKCS12 files.
this does your basic PKCS 1 v1.5 padding - whether or not you should be using this
depends on your application - see PKCS1 Version 2 for details.
A padder that adds PKCS7/PKCS5 padding to a block.
pkcs-1 OBJECT IDENTIFIER ::=
PKIFailureInfo ::= BIT STRING {
badAlg (0),
-- unrecognized or unsupported Algorithm Identifier
badMessageCheck (1), -- integrity check failed (e.g., signature did not verify)
badRequest (2),
-- transaction not permitted or supported
badTime (3), -- messageTime was not sufficiently close to the system time, as defined by local policy
badCertId (4), -- no certificate could be found matching the provided criteria
badDataFormat (5),
-- the data submitted has the wrong format
wrongAuthority (6), -- the authority indicated in the request is different from the one creating the response token
incorrectData (7), -- the requester's data is incorrect (for notary services)
missingTimeStamp (8), -- when the timestamp is missing but should be there (by policy)
badPOP (9) -- the proof-of-possession failed
certRevoked (10),
certConfirmed (11),
wrongIntegrity (12),
badRecipientNonce (13),
timeNotAvailable (14),
-- the TSA's time source is not available
unacceptedPolicy (15),
-- the requested TSA policy is not supported by the TSA
unacceptedExtension (16),
-- the requested extension is not supported by the TSA
addInfoNotAvailable (17)
-- the additional information requested could not be understood
-- or is not available
badSenderNonce (18),
badCertTemplate (19),
signerNotTrusted (20),
transactionIdInUse (21),
unsupportedVersion (22),
notAuthorized (23),
systemUnavail (24),
systemFailure (25),
-- the request cannot be handled due to system failure
duplicateCertReq (26)
PKIPublicationInfo ::= SEQUENCE {
action INTEGER {
dontPublish (0),
pleasePublish (1) },
pubInfos SEQUENCE SIZE (1..MAX) OF SinglePubInfo OPTIONAL }
-- pubInfos MUST NOT be present if action is "dontPublish"
-- (if action is "pleasePublish" and pubInfos is omitted,
-- "dontCare" is assumed)
Generic interface for a PKIX based certificate store.
This class is a Selector implementation for certificates.
Builder for a PKIXCertStoreSelector.
Generic interface for a PKIX based CRL store.
This class is a Selector implementation for X.509 certificate revocation
lists.
Builder for a PKIXCRLStoreSelector.
This class contains extended parameters for PKIX certification path builders.
Builder for a PKIXExtendedBuilderParameters object.
This class extends the PKIXParameters with a validity model parameter.
Builder for a PKIXExtendedParameters object.
Password-based MAC value for use with POPOSigningKeyInput.
Exception thrown when something unexpected is encountered processing plain text input data for signature or block encryption.
PKIX RFC 5280
PolicyMappings V3 extension, described in RFC3280.
PolicyQualifierId, used in the CertificatePolicies
X509V3 extension.
Policy qualifiers, used in the X509V3 CertificatePolicies
extension.
Interface for classes storing precomputation data for multiplication
algorithms.
Utility methods for generating primes and testing for primality.
Used to return the output from the
Enhanced
Miller-Rabin Probabilistic Primality Test
Used to return the output from the
Shawe-Taylor Random_Prime
Routine
RFC 5958
PrivateKeyUsagePeriod ::= SEQUENCE {
notBefore [0] GeneralizedTime OPTIONAL,
notAfter [1] GeneralizedTime OPTIONAL }
Attribute to indicate that the certificate holder may sign in the name of a
third person.
Professions, specializations, disciplines, fields of activity, etc.
Utility method for accessing system properties.
JcaJceHelper that always returns implementations based on the specified provider at construction time.
This is designed to parse
the PublicKeyAndChallenge created by the KEYGEN tag included by
Mozilla based browsers.
The QCStatement object.
Source class for implementations of RC2 based algorithms.
Factory for RC2 AEAD encryption/decryption operators.
Parameters for RC2 AEAD and MAC modes.
RC2 key generator.
Factory for RC2 key wrap/unwrap operators.
Factory for producing RC2 MAC calculators.
Factory for basic RC2 encryption/decryption operators.
Parameters for general RC2 block cipher modes.
Holding class for a single Relative Distinguished Name (RDN).
The ReasonFlags object.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652:
Content encryption key delivery mechanisms.
RFC 5652:
Content encryption key delivery mechanisms.
Interface describing recovered message details from a signature.
ISIS-MTT-Optional: The certificate requested by the client by inserting the
RetrieveIfAllowed extension in the request, will be returned in this
extension.
Some other restriction regarding the usage of this certificate.
RevocationValues ::= SEQUENCE {
crlVals [0] SEQUENCE OF CertificateList OPTIONAL,
ocspVals [1] SEQUENCE OF BasicOCSPResponse OPTIONAL,
otherRevVals [2] OtherRevVals OPTIONAL}
A style template that conforms specifically to RFC 4519.
Implementation of the RoleSyntax object as specified by the RFC3281.
Source class for non-FIPS implementations of RSA based algorithms.
Parameters for ISO 9796-2 PSS signature algorithms.
Parameters for ISO 9796-2 signature algorithms.
RSA key pair generation parameters for non-FIPS usages.
RSA key pair generator class for non-FIPS usages.
Factory for creating non-FIPS RSA key wrap/unwrap operators.
Parameters for use with non-FIPS RSA OAEP formatted key wrapping/unwrapping and encryption/decryption.
Factory for creating non-FIPS encryption/decryption operators.
Base class for RSA encryption/decryption and key wrap/unwrap parameters.
Parameters for use with non-FIPS RSA PKCS#1 v1.5 formatted key wrapping/unwrapping and encryption/decryption.
Parameters for PKCS#1 v1.5 signature algorithms.
Parameters for use with unformatted RSA encryption/decryption.
Operator factory for creating non-FIPS RSA based signing and verification operators.
Base class for non-FIPS RSA digest based signature algorithm parameters.
Operator factory for creating RSA based signing and verification operators which also offer message recovery.
Base class for parameters that can also be used for key wrapping.
Parameters for PKCS#1 v1.5 signature algorithms.
RFC 5990 RSA KEM parameters class.
an Iso7816RSAPublicKeyStructure structure.
the foundation class for the exceptions thrown by the crypto packages.
Parent class for exceptions arising due to cryptographic operations in the various streams created by the FIPS factory classes.
Source class for scrypt utility KDF, an augmentation of the PBKDF2 PBE algorithm which incorporates a memory-hard component.
Factory for scrypt KDFs.
Parameters for the scrypt key derivation function.
Parameters builder for the scrypt key derivation function.
Configuration class for a PBKDF based around scrypt.
RFC 7914 scrypt parameters.
RFC 5940:
Additional Cryptographic Message Syntax (CMS) Revocation Information Choices.
Certicom object identifiers
SecretKeyData ::= SEQUENCE {
keyAlgorithm OBJECT IDENTIFIER,
keyBytes OCTET STRING
}
Interface describing secret with encapsulation details.
Source class for implementations of non-FIPS secure hash algorithms.
Parameters for HMAC modes.
HMAC key generator
Factory for producing HMAC calculators.
Factory for producing digest calculators.
Generic digest parameters.
Source provider for SecureRandom implementations.
The SEED encryption algorithm as described in RFC 4269.
Factory for SEED AEAD encryption/decryption operators.
Parameters for SEED AEAD and MAC modes.
SEED key generator.
Factory for SEED key wrap/unwrap operators.
Factory for producing SEED MAC calculators.
Factory for basic SEED encryption/decryption operators.
Parameters for general SEED block cipher modes.
SEED general WRAP operator parameters for KW and KWP.
Interface a selector from a store should conform to.
The SemanticsInformation object.
The Serpent encryption algorithm.
Factory for Serpent AEAD encryption/decryption operators.
Parameters for Serpent AEAD and MAC modes.
Serpent key generator.
Factory for Serpent key wrap/unwrap operators.
Factory for producing Serpent MAC calculators.
Factory for basic Serpent encryption/decryption operators.
Parameters for general Serpent block cipher modes.
Serpent key wrap/unwrap operator parameters for KW and KWP.
ServiceType ::= ENUMERATED { cpd(1), vsd(2), cpkc(3), ccpd(4) }
The SHACAL-2 encryption algorithm.
Factory for SHACAL-2 AEAD encryption/decryption operators.
Parameters for SHACAL-2 AEAD and MAC modes.
SHACAL-2 key generator.
Factory for producing SHACAL-2 MAC calculators.
Factory for basic SHACAL-2 encryption/decryption operators.
Parameters for general SHACAL-2 block cipher modes.
Implements the Segmented Integer Counter (SIC) mode on top of a simple
block cipher.
Object identifiers of SigI specifciation (German Signature Law
Interoperability specification).
Interface describing an operator factory that produces signers and verifiers.
Interface describing an operator factory that produces signers and verifiers for
algorithms that support message recovery.
a PKCS#7 signed data object.
Parser for RFC 5652:
SignedData object.
SignedPublicKeyAndChallenge ::= SEQUENCE {
publicKeyAndChallenge PublicKeyAndChallenge,
signatureAlgorithm AlgorithmIdentifier,
signature BIT STRING
}
Generic signer interface for hash based and message recovery signers.
RFC 5652:
Identify who signed the containing
SignerInfo object.RFC 5652:
Signature container per Signer, see
SignerIdentifier.a PKCS#7 signer info object.
Signer-Location attribute (RFC3126).
Signer with message recovery.
Base interface for a cipher only able to handle a single block of data.
Base interface for a decryptor only able to decrypt a single block of data.
Interface for a decryptor only able to decrypt a single block of data that makes use of
a SecureRandom in the process (usually for algorithmic blinding).
Base interface for a encryptor only able to encrypt a single block of data.
Interface for a encryptor only able to encrypt a single block of data that makes use of
a SecureRandom in the process.
SinglePubInfo ::= SEQUENCE {
pubMethod INTEGER {
dontCare (0),
x500 (1),
web (2),
ldap (3) },
pubLocation GeneralName OPTIONAL }
Source class for implementations of SipHash based algorithms
Parameters for SipHash MAC modes.
SipHash key generator.
Factory for producing SipHash MAC calculators.
Ciphers producing a key stream which can be reset to particular points in the stream.
General interface for a stream cipher that supports skipping.
Handler class for dealing with S/MIME Capabilities
Handler for creating a vector S/MIME Capabilities
The SMIMEEncryptionKeyPreference object.
an implementation of the AES Key Wrapper from the NIST Key Wrap
Specification as described in RFC 3394/SP800-38F.
an implementation of the AES Key Wrapper from the NIST Key Wrap
Specification as described in RFC 3394/SP800-38F.
A generic interface describing a simple store of objects.
Exception thrown if there's an issue doing a match in store.
A parent class for block cipher modes that do not require block aligned data to be processed, but can function in
a streaming mode which produces
the interface stream ciphers conform to.
Parent class for exceptions arising due to cryptographic operations in the various streams created by the FIPS factory classes.
Exception thrown when too much data is written to an InputStream
Utility methods to assist with stream processing.
An interface defining a list of strings.
String utilities.
This extension may contain further X.500 attributes of the subject.
The SubjectKeyIdentifier object.
The object that contains the public key stored in a certficate.
Interface describing a symmetric key.
Interface describing a symmetric key generator.
Interface describing an operator factory that creates operators for doing
encryption and decryption using symmetric ciphers.
Basic class describing a secret key implementation.
Target structure used in target information extension for attribute
certificates from RFC 3281.
TargetEtcChain ::= SEQUENCE {
target CertEtcToken,
chain SEQUENCE SIZE (1..MAX) OF
CertEtcToken OPTIONAL,
pathProcInput [0] PathProcInput OPTIONAL
}
Target information extension for attributes certificates according to RFC
3281.
Targets structure used in target information extension for attribute
certificates from RFC 3281.
A padder that adds Trailing-Bit-Compliment padding to a block.
The TBSCertificate object.
PKIX RFC-2459 - TBSCertList object.
An input stream which copies anything read through it to another stream.
An output stream which copies anything written into it to another stream.
Elliptic curves defined in "ECC Brainpool Standard Curves and Curve Generation"
http://www.ecc-brainpool.org/download/draft_pkix_additional_ecc_dp.txt
Object identifiers based on the TeleTrust branch.
A fixed secure random designed to return data for someone needing to create a single BigInteger.
A fixed secure random designed to return data for someone needing random bytes.
A class for returning "quick entropy" for testing purposes.
RFC 5652:
Dual-mode timestamp format producing either UTCTIme or GeneralizedTime.
RFC 5544
Binding Documents with Time-Stamps; TimeStampAndCRL object.
RFC 5544:
Binding Documents with Time-Stamps; TimeStampedData object.
Parser for RFC 5544:
TimeStampedData object.RFC 5544
Binding Documents with Time-Stamps; TimeStampTokenEvidence object.
General interface for a translator.
Source class for non-FIPS approved-mode implementations of TripleDES based algorithms.
Factory for non-FIPS Triple-DES AEAD encryption/decryption operators.
Parameters for Triple-DES non-FIPS AEAD and MAC modes..
Specific Triple-DES key generator for non-FIPS algorithms.
Factory for non-FIPS Triple-DES key wrap/unwrap operators.
Factory for producing non-FIPS Triple-DES MAC calculators.
Factory for basic non-FIPS Triple-DES encryption/decryption operators.
Parameters for general Triple-DES non-FIPS block cipher modes.
Source class for implementations of Twofish based algorithms.
Factory for Twofish AEAD encryption/decryption operators.
Parameters for Twofish AEAD and MAC modes.
Twofish key generator.
Factory for Twofish key wrap/unwrap operators.
Factory for producing Twofish MAC calculators.
Factory for basic Twofish encryption/decryption operators.
Parameters for general Twofish block cipher modes.
General WRAP operator parameters for KW and KWP.
The TypeOfBiometricData object.
Ukrainian object identifiers
A runtime exception that may be thrown by an update operation on an
UpdateOutputStream if the underlying stream throws an IOException.
An extension of output stream that provides update methods which allow
for data to feed into the stream without the need to handle checked exceptions.
Convert binary data to and from UrlBase64 encoding.
Convert binary data to and from UrlBase64 encoding.
User keying material for the KDF used in key agreement algorithms.
UserNotice class, used in
CertificatePolicies X509 extensions (in policy
qualifiers).Utilities for working with UTF-8 encodings.
Generator for Version 1 TBSCertificateStructures.
Generator for Version 2 AttributeCertificateInfo
Generator for Version 2 TBSCertList structures.
Generator for Version 3 TBSCertificateStructures.
Diffie-Hellman domain validation parameters.
Class implementing the WNAF (Window Non-Adjacent Form) multiplication
algorithm.
Class holding precomputation data for the WNAF (Window Non-Adjacent Form)
algorithm.
Parameter spec to allow keywrapping to be configured to use the inverse function.
Class implementing the WTNAF (Window
τ-adic Non-Adjacent Form) algorithm.Class holding precomputation data for the WTNAF (Window
τ-adic Non-Adjacent Form) algorithm.The X.500 Name object.
A builder class for making X.500 Name objects.
This interface provides a profile to conform to when
DNs are being converted into strings and back.
Class for breaking up an X500 Name into it's component tokens, ala
java.util.StringTokenizer.
A padder that adds X9.23 padding to a block - if a SecureRandom is
passed in random padding is assumed, otherwise padding with zeros is used.
Source class for implementations of Pseudo Random Number Generator (PRNG) from X9.31
Base for Builder for SecureRandom objects based on the X9.31 PRNG.
Builder for SecureRandom objects based on the X9.31 PRNG.
Table of the current named curves defined in X.962 EC-DSA.
The Parameters ASN.1 CHOICE from X9.62.
ASN.1 def for Elliptic-Curve Curve structure.
ASN.1 def for Elliptic-Curve ECParameters structure.
A holding class that allows for X9ECParameters to be lazily constructed.
Class for describing an ECPoint as a DER object.
Class for processing an FieldElement as a DER object.
ASN.1 def for Elliptic-Curve Field ID structure.
A class which converts integers to byte arrays, allowing padding and calculations
to be done according the the filed size of the curve or field element involved.
Object identifiers for the various X9 standards.
Base interface for XDH agreement keys.
ParameterSpec for XDH key agreement algorithms.
With FIPS PUB 202 a new kind of message digest was announced which supported extendable output, or variable digest sizes.
Base interface for a creator of extendable output function (XOF) calculators.
Interface for SecretKey's that can be explictly zeroized.