com.cryptshare.api

Class AesProtectionService

java.lang.Object

com.cryptshare.api.AesProtectionService

All Implemented Interfaces:

IProtectionService

public class AesProtectionService
extends java.lang.Object
implements IProtectionService

Implementation of IProtectionService that uses the AES encryption to protect data. The encryption requires a symmetric key, which is derived from a key source. The key source is retrieved using a IKeySourceProvider implementation that is chosen by the code that uses this class, according to the respective requirements and conditions.

Constructor Summary

Constructors

Constructor and Description
AesProtectionService(IKeySourceProvider keySourceProvider) Constructor to create an instance that uses a certain IKeySourceProvider.

Method Summary

Modifier and Type	Method and Description
byte[]	protect(byte[] bytesToProtect) Protects the given content in an appropriate way so that uprotection is only possible with a specific knowledge or priviledge, depending on the implementation.
byte[]	unprotect(byte[] protectedBytes) Removes the protection from the given protected content.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AesProtectionService

public AesProtectionService(IKeySourceProvider keySourceProvider)

Constructor to create an instance that uses a certain IKeySourceProvider.

Parameters:

keySourceProvider - The IKeySourceProvider to retrieve the key source for the encryption and decryption. The key source is processed by a key derivation function to fulfill the requirements of the algorithm and to increase security.

Method Detail

protect

public byte[] protect(byte[] bytesToProtect)
               throws ClientException

Description copied from interface: IProtectionService

Protects the given content in an appropriate way so that uprotection is only possible with a specific knowledge or priviledge, depending on the implementation. This method is deterministic, meaning that the same content always produces the same protected outcome.

Specified by:

protect in interface IProtectionService

Parameters:

bytesToProtect - The content to protect.

Returns:

The protected content, which may vary in size, compared to the original content.

Throws:

ClientException - If the protection fails.

unprotect

public byte[] unprotect(byte[] protectedBytes)
                 throws ClientException

Description copied from interface: IProtectionService

Removes the protection from the given protected content. This is only possible with a specific knowledge or privilege, depending on the implementation.

Specified by:

unprotect in interface IProtectionService

Parameters:

protectedBytes - The content to unprotect.

Returns:

The unprotected content.

Throws:

ClientException - If the unprotection fails.