001 // Copyright (C) 2002 IAIK
002 // https://jce.iaik.tugraz.at
003 //
004 // Copyright (C) 2003 - 2025 Stiftung Secure Information and
005 // Communication Technologies SIC
006 // https://sic.tech
007 //
008 // All rights reserved.
009 //
010 // Redistribution and use in source and binary forms, with or without
011 // modification, are permitted provided that the following conditions
012 // are met:
013 // 1. Redistributions of source code must retain the above copyright
014 // notice, this list of conditions and the following disclaimer.
015 // 2. Redistributions in binary form must reproduce the above copyright
016 // notice, this list of conditions and the following disclaimer in the
017 // documentation and/or other materials provided with the distribution.
018 //
019 // THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
020 // ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
021 // IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
022 // ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
023 // FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
024 // DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
025 // OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
026 // HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
027 // LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
028 // OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
029 // SUCH DAMAGE.
030
031 // Copyright (C) 2002 IAIK
032 // https://sic.tech/
033 //
034 // Copyright (C) 2003 - 2025 Stiftung Secure Information and
035 // Communication Technologies SIC
036 // https://sic.tech/
037 //
038 // All rights reserved.
039 //
040 // This source is provided for inspection purposes and recompilation only,
041 // unless specified differently in a contract with IAIK. This source has to
042 // be kept in strict confidence and must not be disclosed to any third party
043 // under any circumstances. Redistribution in source and binary forms, with
044 // or without modification, are <not> permitted in any case!
045 //
046 // THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
047 // ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
048 // IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
049 // ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
050 // FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
051 // DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
052 // OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
053 // HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
054 // LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
055 // OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
056 // SUCH DAMAGE.
057 //
058 // $Header: /IAIK-CMS/current/src/demo/cms/envelopedData/AESEnvelopedDataDemo.java 7 12.02.25 17:58 Dbratko $
059 // $Revision: 7 $
060 //
061
062
063 package demo.cms.envelopedData;
064
065 import iaik.asn1.structures.AlgorithmID;
066
067 import java.io.IOException;
068 import java.security.NoSuchAlgorithmException;
069
070 import demo.DemoUtil;
071
072
073 /**
074 * Demonstrates the usage of class {@link iaik.cms.EnvelopedDataStream} and
075 * {@link iaik.cms.EnvelopedData} for encrypting data using the CMS type
076 * EnvelopedData with the AES cipher algorithm.
077 * <br>
078 * AES is used for both content encryption (according to RFC 3565) and
079 * content encryption key wrapping (according to RFC 3394).
080 * <p>
081 * This demo creates an EnvelopedData object and subsequently shows several
082 * ways that may be used for decrypting the content for some particular
083 * recipient.
084 * <p>
085 * Keys and certificates are retrieved from the demo KeyStore ("cms.keystore")
086 * which has to be located in your current working directory and may be
087 * created by running the {@link demo.keystore.SetupCMSKeyStore
088 * SetupCMSKeyStore} program.
089 *
090 * @see iaik.cms.EnvelopedDataStream
091 * @see iaik.cms.EnvelopedData
092 * @see iaik.cms.RecipientInfo
093 * @see iaik.cms.KeyTransRecipientInfo
094 * @see iaik.cms.KeyAgreeRecipientInfo
095 * @see iaik.cms.KEKRecipientInfo
096 */
097 public class AESEnvelopedDataDemo extends EnvelopedDataDemo {
098
099
100 /**
101 * Creates an AESEnvelopedDataDemo and setups the demo certificates.
102 * <br>
103 * Keys and certificates are retrieved from the demo KeyStore ("cms.keystore")
104 * file which has to be located in your current working directory and may be
105 * created by running {@link demo.keystore.SetupCMSKeyStore
106 * SetupCMSKeyStore}.
107 * <br>
108 * AES and AES KeyWrap are used for content encryption and
109 * content encryption key wrapping.
110 *
111 * @throws IOException if an file read error occurs
112 * @throws NoSuchAlgorithmException if the requested algorithms are not supported
113 */
114 public AESEnvelopedDataDemo() throws IOException, NoSuchAlgorithmException {
115 super((AlgorithmID)AlgorithmID.aes128_CBC.clone(),
116 (AlgorithmID)AlgorithmID.cms_aes128_wrap.clone(),
117 128);
118 }
119
120 /**
121 * Main method.
122 *
123 * @throws IOException
124 * if an I/O error occurs when reading required keys
125 * and certificates from files
126 */
127 public static void main(String argv[]) throws Exception {
128
129 DemoUtil.initDemos();
130
131 // AES with 128 bit keys
132 System.out.println("\n***** AES-128 demo *****\n");
133 (new AESEnvelopedDataDemo()).start();
134 // AES with 192 bit keys
135 System.out.println("\n***** AES-192 demo *****\n");
136 (new EnvelopedDataDemo((AlgorithmID)AlgorithmID.aes192_CBC.clone(),
137 (AlgorithmID)AlgorithmID.cms_aes192_wrap.clone(),
138 192)).start();
139 // AES with 256 bit keys
140 System.out.println("\n***** AES-256 demo *****\n");
141 (new EnvelopedDataDemo((AlgorithmID)AlgorithmID.aes256_CBC.clone(),
142 (AlgorithmID)AlgorithmID.cms_aes256_wrap.clone(),
143 256)).start();
144
145
146 System.out.println("\nReady!");
147 DemoUtil.waitKey();
148 }
149 }