com.microsoft.azure.keyvault.extensions.KeyVaultKey Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of azure-keyvault-extensions Show documentation
This package contains Microsoft Azure Key Vault SDK Extensions.
There is a newer version: 1.2.6
Show newest version
/**
 *
 * Copyright (c) Microsoft and contributors.  All rights reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 */

package com.microsoft.azure.keyvault.extensions;

import java.io.IOException;
import java.security.NoSuchAlgorithmException;
import java.util.concurrent.Future;

import org.apache.commons.lang3.tuple.Pair;
import org.apache.commons.lang3.tuple.Triple;

import com.microsoft.azure.keyvault.KeyVaultClient;
import com.microsoft.azure.keyvault.core.IKey;
import com.microsoft.azure.keyvault.models.KeyBundle;
import com.microsoft.azure.keyvault.models.KeyOperationResult;
import com.microsoft.azure.keyvault.webkey.JsonWebKey;
import com.microsoft.azure.keyvault.webkey.JsonWebKeyType;

public class KeyVaultKey implements IKey {

    class FutureDecryptResult extends FutureAdapter {

        FutureDecryptResult(Future source) {
            super(source);
        }

        @Override
        protected byte[] translate(KeyOperationResult result) throws IOException {
            return result.getResult();
        }
    }

    class FutureSignResult extends FutureAdapter> {

        private final String _algorithm;

        FutureSignResult(String algorithm, Future source) {
            super(source);
            _algorithm = algorithm;
        }

        @Override
        protected Pair translate(KeyOperationResult result) throws IOException {
            return Pair.of(result.getResult(), _algorithm);
        }
    }

    private final KeyVaultClient _client;
    private IKey                 _implementation;

    protected KeyVaultKey(KeyVaultClient client, KeyBundle keyBundle) {

        if (client == null) {
            throw new IllegalArgumentException("client");
        }

        if (keyBundle == null) {
            throw new IllegalArgumentException("keyBundle");
        }

        JsonWebKey key = keyBundle.getKey();

        if (key == null) {
            throw new IllegalArgumentException("keyBundle must contain a key");
        }

        if (key.getKty().equals(JsonWebKeyType.RSA)) {
            _implementation = new RsaKey(keyBundle.getKey());
        } else if (key.getKty().equals(JsonWebKeyType.RSAHSM)) {
            _implementation = new RsaKey(keyBundle.getKey());
        }

        if (_implementation == null) {
            throw new IllegalArgumentException(String.format("The key type %s is not supported", keyBundle.getKey().getKty()));
        }

        _client = client;
    }

    @Override
    public void close() throws IOException {
        if (_implementation != null) {
            _implementation.close();
        }
    }

    @Override
    public String getDefaultEncryptionAlgorithm() {
        if (_implementation == null) {
            return null;
        }

        return _implementation.getDefaultEncryptionAlgorithm();
    }

    @Override
    public String getDefaultKeyWrapAlgorithm() {

        if (_implementation == null) {
            return null;
        }

        return _implementation.getDefaultKeyWrapAlgorithm();
    }

    @Override
    public String getDefaultSignatureAlgorithm() {

        if (_implementation == null) {
            return null;
        }

        return _implementation.getDefaultSignatureAlgorithm();
    }

    @Override
    public String getKid() {

        if (_implementation == null) {
            return null;
        }

        return _implementation.getKid();
    }

    @Override
    public Future decryptAsync(byte[] ciphertext, byte[] iv, byte[] authenticationData, byte[] authenticationTag, String algorithm) {
        if (_implementation == null) {
            return null;
        }

        if (Strings.isNullOrWhiteSpace(algorithm)) {
            algorithm = getDefaultEncryptionAlgorithm();
        }

        // Never local
        return new FutureDecryptResult(_client.decryptAsync(_implementation.getKid(), algorithm, ciphertext));
    }

    @Override
    public Future> encryptAsync(byte[] plaintext, byte[] iv, byte[] authenticationData, String algorithm) throws NoSuchAlgorithmException {
        if (_implementation == null) {
            return null;
        }

        return _implementation.encryptAsync(plaintext, iv, authenticationData, algorithm);
    }

    @Override
    public Future> wrapKeyAsync(byte[] plaintext, String algorithm) throws NoSuchAlgorithmException {
        if (_implementation == null) {
            return null;
        }

        return _implementation.wrapKeyAsync(plaintext, algorithm);
    }

    @Override
    public Future unwrapKeyAsync(byte[] ciphertext, String algorithm) {
        if (_implementation == null) {
            return null;
        }

        if (Strings.isNullOrWhiteSpace(algorithm)) {
            algorithm = getDefaultKeyWrapAlgorithm();
        }

        // Never local
        return new FutureDecryptResult(_client.unwrapKeyAsync(_implementation.getKid(), algorithm, ciphertext));
    }

    @Override
    public Future> signAsync(byte[] digest, String algorithm) {
        if (_implementation == null) {
            return null;
        }

        if (Strings.isNullOrWhiteSpace(algorithm)) {
            algorithm = getDefaultSignatureAlgorithm();
        }

        // Never local
        return new FutureSignResult(algorithm, _client.signAsync(_implementation.getKid(), algorithm, digest));
    }

    @Override
    public Future verifyAsync(byte[] digest, byte[] signature, String algorithm) {
        if (_implementation == null) {
            return null;
        }

        return _implementation.verifyAsync(digest, signature, algorithm);
    }
}