com.amazonaws.services.s3.internal.crypto.CryptoRuntime Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of aws-java-sdk-s3 Show documentation
Show all versions of aws-java-sdk-s3 Show documentation
The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with Amazon Simple Storage Service
The newest version!
/*
* Copyright 2013-2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License").
* You may not use this file except in compliance with the License.
* A copy of the License is located at
*
* http://aws.amazon.com/apache2.0
*
* or in the "license" file accompanying this file. This file is distributed
* on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
* express or implied. See the License for the specific language governing
* permissions and limitations under the License.
*/
package com.amazonaws.services.s3.internal.crypto;
import java.security.Provider;
import java.security.Security;
import com.amazonaws.services.s3.internal.crypto.v1.S3KeyWrapScheme;
import javax.crypto.Cipher;
import org.apache.commons.logging.LogFactory;
public class CryptoRuntime {
public static final String BOUNCY_CASTLE_PROVIDER = "BC";
private static final String BC_PROVIDER_FQCN = "org.bouncycastle.jce.provider.BouncyCastleProvider";
/**
* @return {@code com.amazonaws.services.s3.crypto.preferDefaultSecurityProvider} system property
* parsed as a boolean or false if the property is unset.
*/
public static boolean preferDefaultSecurityProvider() {
final String preferDefaultSecurityProvider = System.getProperty("com.amazonaws.services.s3.crypto.preferDefaultSecurityProvider");
if (preferDefaultSecurityProvider == null) {
return false;
}
return Boolean.parseBoolean(preferDefaultSecurityProvider);
}
public static synchronized boolean isBouncyCastleAvailable() {
return Security.getProvider(BOUNCY_CASTLE_PROVIDER) != null;
}
public static synchronized void enableBouncyCastle() {
if (isBouncyCastleAvailable()) {
return;
}
try {
@SuppressWarnings("unchecked")
Class c = (Class)Class.forName(BC_PROVIDER_FQCN);
Provider provider = c.newInstance();
Security.addProvider(provider);
} catch (Exception e) {
LogFactory.getLog(CryptoRuntime.class).debug(
"Bouncy Castle not available", e);
}
}
/**
* Used only for unit test when the same class loader is used across
* multiple unit tests.
*/
public static void recheck() {
recheckAesGcmAvailablility();
recheckRsaKeyWrapAvailablility();
}
public static boolean isAesGcmAvailable() { return AesGcm.isAvailable; }
public static void recheckAesGcmAvailablility() { AesGcm.recheck(); }
public static boolean isRsaKeyWrapAvailable() {
return RsaEcbOaepWithSHA256AndMGF1Padding.isAvailable;
}
private static void recheckRsaKeyWrapAvailablility() {
RsaEcbOaepWithSHA256AndMGF1Padding.recheck();
}
private static final class AesGcm {
static volatile boolean isAvailable = check();
static boolean recheck() { return isAvailable = check(); }
private static boolean check() {
try {
Cipher.getInstance(
ContentCryptoScheme.AES_GCM.getCipherAlgorithm(),
BOUNCY_CASTLE_PROVIDER);
return true;
} catch (Exception e) {
return false;
}
}
}
private static final class RsaEcbOaepWithSHA256AndMGF1Padding {
static volatile boolean isAvailable = check();
static boolean recheck() { return isAvailable = check(); }
private static boolean check() {
try {
Cipher.getInstance(S3KeyWrapScheme.RSA_ECB_OAEPWithSHA256AndMGF1Padding,
BOUNCY_CASTLE_PROVIDER);
return true;
} catch (Exception e) {
return false;
}
}
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy