se.swedenconnect.opensaml.xmlsec.algorithm

Class ExtendedAlgorithmSupport

java.lang.Object

se.swedenconnect.opensaml.xmlsec.algorithm.ExtendedAlgorithmSupport

public final class ExtendedAlgorithmSupport
extends Object

OpenSAML's AlgorithmSupport class does not offer utility methods needed for key agreement. This class offers such methods.

Author:

Martin Lindström (martin@idsec.se), Stefan Santesson (stefan@idsec.se)

Method Summary

Modifier and Type	Method and Description
static boolean	isKeyAgreementAlgorithm(AlgorithmDescriptor algorithm) Checks whether the supplied descriptor represents an algorithm that may be used for key agreement.
static boolean	isKeyWrappingAlgorithm(AlgorithmDescriptor algorithm) Checks whether the supplied descriptor represents an algorithm that my be used for key wrapping.
static boolean	isRSAPSS(String signatureAlgorithm) Predicate that tells whether the supplied algorithm is a RSA-PSS algorithm.
static boolean	peerCredentialSupportsKeyAgreement(Credential credential) Check whether the supplied peer credential may be used in a key agreement protocol.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

isRSAPSS

public static boolean isRSAPSS(String signatureAlgorithm)

Predicate that tells whether the supplied algorithm is a RSA-PSS algorithm.

Parameters:

signatureAlgorithm - the algorithm to test

Returns:

true if the algorithm is a RSA-PSS algorithm, and false otherwise

isKeyWrappingAlgorithm

public static boolean isKeyWrappingAlgorithm(@Nullable
                                             AlgorithmDescriptor algorithm)

Checks whether the supplied descriptor represents an algorithm that my be used for key wrapping.

Parameters:

algorithm - the algorithm descriptor to evaluate

Returns:

true if the algorithm may be used for key wrapping, false otherwise

isKeyAgreementAlgorithm

public static boolean isKeyAgreementAlgorithm(@Nullable
                                              AlgorithmDescriptor algorithm)

Checks whether the supplied descriptor represents an algorithm that may be used for key agreement.

Parameters:

algorithm - the algorithm descriptor to evaluate

Returns:

true if the algorithm may be used for key agreement, false otherwise

peerCredentialSupportsKeyAgreement

public static boolean peerCredentialSupportsKeyAgreement(@Nullable
                                                         Credential credential)

Check whether the supplied peer credential may be used in a key agreement protocol.

Parameters:

credential - the credential to test

Returns:

true if the credential may be used in a key agreement protocol, and false otherwise