org.apache.poi.poifs.crypt.agile

Class AgileDecryptor

java.lang.Object

org.apache.poi.poifs.crypt.Decryptor

org.apache.poi.poifs.crypt.agile.AgileDecryptor

public class AgileDecryptor
extends Decryptor

Decryptor implementation for Agile Encryption

Field Summary

Fields

Modifier and Type	Field and Description
protected static byte[]	kCryptoKeyBlock
protected static byte[]	kHashedVerifierBlock
protected static byte[]	kIntegrityKeyBlock
protected static byte[]	kIntegrityValueBlock
protected static byte[]	kVerifierInputBlock

Fields inherited from class org.apache.poi.poifs.crypt.Decryptor

DEFAULT_PASSWORD, info

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AgileDecryptor(AgileEncryptionInfoBuilder builder)

Method Summary

Methods

Modifier and Type	Method and Description
protected int	getBlockSizeInBytes()
InputStream	getDataStream(DirectoryNode dir)
protected int	getKeySizeInBytes()
long	getLength()
protected static int	getNextBlockSize(int inputLen, int blockSize)
protected static byte[]	hashInput(AgileEncryptionInfoBuilder builder, byte[] pwHash, byte[] blockKey, byte[] inputKey, int cipherMode)
boolean	verifyPassword(KeyPair keyPair, X509Certificate x509) instead of a password, it's also possible to decrypt via certificate.
boolean	verifyPassword(String password) set decryption password

Methods inherited from class org.apache.poi.poifs.crypt.Decryptor

getDataStream, getDataStream, getInstance, getIntegrityHmacKey, getIntegrityHmacValue, getSecretKey, getVerifier, setIntegrityHmacKey, setIntegrityHmacValue, setSecretKey, setVerifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

kVerifierInputBlock

protected static final byte[] kVerifierInputBlock

kHashedVerifierBlock

protected static final byte[] kHashedVerifierBlock

kCryptoKeyBlock

protected static final byte[] kCryptoKeyBlock

kIntegrityKeyBlock

protected static final byte[] kIntegrityKeyBlock

kIntegrityValueBlock

protected static final byte[] kIntegrityValueBlock

Constructor Detail

AgileDecryptor

protected AgileDecryptor(AgileEncryptionInfoBuilder builder)

Method Detail

verifyPassword

public boolean verifyPassword(String password)
                       throws GeneralSecurityException

set decryption password

Specified by:

verifyPassword in class Decryptor

Throws:

GeneralSecurityException

verifyPassword

public boolean verifyPassword(KeyPair keyPair,
                     X509Certificate x509)
                       throws GeneralSecurityException

instead of a password, it's also possible to decrypt via certificate. Warning: this code is experimental and hasn't been validated

Parameters:

keyPair -

x509 -

Returns:

true, when the data can be successfully decrypted with the given private key

Throws:

GeneralSecurityException

See Also:

Agile encryption with certificates

getNextBlockSize

protected static int getNextBlockSize(int inputLen,
                   int blockSize)

hashInput

protected static byte[] hashInput(AgileEncryptionInfoBuilder builder,
               byte[] pwHash,
               byte[] blockKey,
               byte[] inputKey,
               int cipherMode)

getDataStream

public InputStream getDataStream(DirectoryNode dir)
                          throws IOException,
                                 GeneralSecurityException

Specified by:

getDataStream in class Decryptor

Throws:

IOException

GeneralSecurityException

getLength

public long getLength()

Specified by:

getLength in class Decryptor

getBlockSizeInBytes

protected int getBlockSizeInBytes()

getKeySizeInBytes

protected int getKeySizeInBytes()