org.bouncycastle.cms.jcajce.JceKEMRecipientInfoGenerator Maven / Gradle / Ivy

Go to download

package org.bouncycastle.cms.jcajce;

import java.security.Provider;
import java.security.PublicKey;
import java.security.SecureRandom;
import java.security.cert.CertificateEncodingException;
import java.security.cert.X509Certificate;

import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.cms.IssuerAndSerialNumber;
import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
import org.bouncycastle.cert.jcajce.JcaX509CertificateHolder;
import org.bouncycastle.cms.KEMRecipientInfoGenerator;

public class JceKEMRecipientInfoGenerator
    extends KEMRecipientInfoGenerator
{
    public JceKEMRecipientInfoGenerator(X509Certificate recipientCert, ASN1ObjectIdentifier symWrapAlgorithm)
        throws CertificateEncodingException
    {
        super(new IssuerAndSerialNumber(new JcaX509CertificateHolder(recipientCert).toASN1Structure()), new JceCMSKEMKeyWrapper(recipientCert.getPublicKey(), symWrapAlgorithm));
    }

    public JceKEMRecipientInfoGenerator(byte[] subjectKeyIdentifier, PublicKey publicKey, ASN1ObjectIdentifier symWrapAlgorithm)
    {
        super(subjectKeyIdentifier, new JceCMSKEMKeyWrapper(publicKey, symWrapAlgorithm));
    }

    public JceKEMRecipientInfoGenerator setProvider(String providerName)
    {
        ((JceCMSKEMKeyWrapper)this.wrapper).setProvider(providerName);

        return this;
    }

    public JceKEMRecipientInfoGenerator setProvider(Provider provider)
    {
        ((JceCMSKEMKeyWrapper)this.wrapper).setProvider(provider);

        return this;
    }

    public JceKEMRecipientInfoGenerator setSecureRandom(SecureRandom random)
    {
        ((JceCMSKEMKeyWrapper)this.wrapper).setSecureRandom(random);

        return this;
    }

    public JceKEMRecipientInfoGenerator setKDF(AlgorithmIdentifier kdfAlgorithm)
    {
        ((JceCMSKEMKeyWrapper)this.wrapper).setKDF(kdfAlgorithm);

        return this;
    }

    /**
     * Internally algorithm ids are converted into cipher names using a lookup table. For some providers
     * the standard lookup table won't work. Use this method to establish a specific mapping from an
     * algorithm identifier to a specific algorithm.
     * 
     *     For example:
     *  
     *     unwrapper.setAlgorithmMapping(PKCSObjectIdentifiers.rsaEncryption, "RSA");
     *


     * @param algorithm  OID of algorithm in recipient.
     * @param algorithmName JCE algorithm name to use.
     * @return the current RecipientInfoGenerator.
     */
    public JceKEMRecipientInfoGenerator setAlgorithmMapping(ASN1ObjectIdentifier algorithm, String algorithmName)
    {
        ((JceCMSKEMKeyWrapper)this.wrapper).setAlgorithmMapping(algorithm, algorithmName);

        return this;
    }
}