com.arxanfintech.common.crypto

Class Crypto

java.lang.Object

com.arxanfintech.common.crypto.Crypto

public class Crypto
extends Object

Constructor Summary

Constructors

Constructor and Description
Crypto(byte[] ePrivKeyBytes, byte[] tlsCertBytes) Initialize the Crypto Object with enrollment private key and TLS Certificate byte array
Crypto(InputStream epkIS, InputStream tcIS) Initialize the Crypto Object with enrollment private key and TLS Certificate input stream

Method Summary

Modifier and Type	Method and Description
String	decryptAndVerify(byte[] data) decrypt and verify signature of data
String	encryptWithBase64(byte[] data) Encrypt data with TLS certificate and convert cipher to base64
byte[]	getEPrivKeyBytes()
X509Certificate	getTlsCert()
byte[]	getTlsCertBytes()
String	signAndEncrypt(byte[] data) Sign and encrypt data then convert cipher to base64
String	signDataWithBase64(byte[] data) Generate the signature with the enrollment private key

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Crypto

public Crypto(InputStream epkIS,
              InputStream tcIS)
       throws IOException,
              CertificateException,
              NoSuchAlgorithmException,
              InvalidKeySpecException,
              NoSuchProviderException

Initialize the Crypto Object with enrollment private key and TLS Certificate input stream

Parameters:

epkIS - enrollment private key

tcIS - TLS Certificate

Throws:

IOException - IOException

CertificateException - CertificateException

InvalidKeySpecException - InvalidKeySpecException

NoSuchAlgorithmException - NoSuchAlgorithmException

NoSuchProviderException - NoSuchProviderException

Crypto

public Crypto(byte[] ePrivKeyBytes,
              byte[] tlsCertBytes)
       throws IOException,
              CertificateException,
              NoSuchAlgorithmException,
              InvalidKeySpecException,
              NoSuchProviderException

Initialize the Crypto Object with enrollment private key and TLS Certificate byte array

Parameters:

ePrivKeyBytes - enrollment private key

tlsCertBytes - TLS Certificate

Throws:

IOException - IOException

CertificateException - CertificateException

InvalidKeySpecException - InvalidKeySpecException

NoSuchAlgorithmException - NoSuchAlgorithmException

NoSuchProviderException - NoSuchProviderException

Method Detail

getEPrivKeyBytes

public byte[] getEPrivKeyBytes()

Returns:

enrollment private key

getTlsCertBytes

public byte[] getTlsCertBytes()

Returns:

TLS Certificate in bytes array

getTlsCert

public X509Certificate getTlsCert()

Returns:

TLS Certificate

signDataWithBase64

public String signDataWithBase64(byte[] data)
                          throws InvalidKeyException,
                                 NoSuchAlgorithmException,
                                 NoSuchProviderException,
                                 SignatureException

Generate the signature with the enrollment private key

Parameters:

data - data to sign

Returns:

the signature in base64

Throws:

SignatureException - SignatureException

NoSuchProviderException - NoSuchProviderException

NoSuchAlgorithmException - NoSuchAlgorithmException

InvalidKeyException - InvalidKeyException

encryptWithBase64

public String encryptWithBase64(byte[] data)
                         throws NoSuchAlgorithmException,
                                NoSuchProviderException,
                                NoSuchPaddingException,
                                InvalidKeyException,
                                IllegalBlockSizeException,
                                BadPaddingException,
                                InvalidAlgorithmParameterException,
                                org.spongycastle.crypto.InvalidCipherTextException,
                                IOException

Encrypt data with TLS certificate and convert cipher to base64

Parameters:

data - byte array to encrypt

Returns:

cipher in base64

Throws:

NoSuchAlgorithmException - NoSuchAlgorithmException

NoSuchProviderException - NoSuchProviderException

NoSuchPaddingException - NoSuchPaddingException

InvalidKeyException - InvalidKeyException

IllegalBlockSizeException - IllegalBlockSizeException

BadPaddingException - BadPaddingException

InvalidAlgorithmParameterException - InvalidAlgorithmParameterException

IOException - IOException

org.spongycastle.crypto.InvalidCipherTextException - InvalidCipherTextException

signAndEncrypt

public String signAndEncrypt(byte[] data)
                      throws NoSuchAlgorithmException,
                             NoSuchProviderException,
                             NoSuchPaddingException,
                             InvalidKeyException,
                             IllegalBlockSizeException,
                             BadPaddingException,
                             SignatureException,
                             InvalidAlgorithmParameterException,
                             org.spongycastle.crypto.InvalidCipherTextException,
                             IOException

Sign and encrypt data then convert cipher to base64

Parameters:

data - data byte array to encrypt

Returns:

cipher in base64

Throws:

NoSuchAlgorithmException - NoSuchAlgorithmException

NoSuchProviderException - NoSuchProviderException

NoSuchPaddingException - NoSuchPaddingException

InvalidKeyException - InvalidKeyException

IllegalBlockSizeException - IllegalBlockSizeException

BadPaddingException - BadPaddingException

SignatureException - SignatureException

InvalidAlgorithmParameterException - InvalidAlgorithmParameterException

IOException - IOException

org.spongycastle.crypto.InvalidCipherTextException - InvalidCipherTextException

decryptAndVerify

public String decryptAndVerify(byte[] data)
                        throws NoSuchAlgorithmException,
                               NoSuchProviderException,
                               NoSuchPaddingException,
                               InvalidKeyException,
                               IllegalBlockSizeException,
                               BadPaddingException,
                               SignatureException,
                               InvalidAlgorithmParameterException,
                               org.spongycastle.crypto.InvalidCipherTextException,
                               IOException

decrypt and verify signature of data

Parameters:

data - data byte array to decrypt and verify

Returns:

original plain text

Throws:

NoSuchAlgorithmException - NoSuchAlgorithmException

NoSuchProviderException - NoSuchProviderException

NoSuchPaddingException - NoSuchPaddingException

InvalidKeyException - InvalidKeyException

IllegalBlockSizeException - IllegalBlockSizeException

BadPaddingException - BadPaddingException

SignatureException - SignatureException

InvalidAlgorithmParameterException - InvalidAlgorithmParameterException

IOException - IOException

org.spongycastle.crypto.InvalidCipherTextException - InvalidCipherTextException