iaik.security.cipher

Class GCMCMSParameterSpec

java.lang.Object

iaik.security.cipher.GCMParameterSpec

iaik.security.cipher.GCMCMSParameterSpec

All Implemented Interfaces:

java.security.spec.AlgorithmParameterSpec

public class GCMCMSParameterSpec
extends GCMParameterSpec

GCM (Galois/Counter mode) parameter specification.

This class extends class GCMParameterSpec to may be used for CMS when the mac value is not available at the time when creating the parameter specification and therefore maybe to be set later.

Version:

File Revision 2

See Also:

AlgorithmParameterSpec

Constructor Summary

Constructors

Constructor and Description
GCMCMSParameterSpec() Creates a GCM Parameter specification with default values.
GCMCMSParameterSpec(byte[] aaData, byte[] nonce) Creates a GCM Parameter specification with the given additional data and nonce.
GCMCMSParameterSpec(byte[] aaData, byte[] nonce, byte[] macBlock) Creates a GCM Parameter specification with the given additional data, nonce and MAC block.
GCMCMSParameterSpec(byte[] aaData, byte[] nonce, int macLen) Creates a GCM Parameter specification with the given additional data, nonce and MAC length.

Method Summary

Modifier and Type	Method and Description
void	setMac(byte[] mac) Sets the mac value.

Methods inherited from class iaik.security.cipher.GCMParameterSpec

getAAD, getMac, getMacLength, getNonce, setMacLength

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GCMCMSParameterSpec

public GCMCMSParameterSpec(byte[] aaData,
                           byte[] nonce,
                           int macLen)
                    throws java.security.InvalidAlgorithmParameterException

Creates a GCM Parameter specification with the given additional data, nonce and MAC length. This constructor shall be used to specify algorithm parameters for encryption. The MAC block is null. (No MAC block must be specified for encryption.)

Parameters:

aaData - the additional data that is authenticated

nonce - bytes used to generate the IV

macLen - number of bytes used as MAC

Throws:

java.security.InvalidAlgorithmParameterException

GCMCMSParameterSpec

public GCMCMSParameterSpec(byte[] aaData,
                           byte[] nonce,
                           byte[] macBlock)
                    throws java.security.InvalidAlgorithmParameterException

Creates a GCM Parameter specification with the given additional data, nonce and MAC block. This constructor shall be used to specify the algorithm parameters for decryption. Nonce and MAC block must be set for decryption. If the MAC block is not available at the time when creating the Parameter spec it maybe set later.

Parameters:

aaData - the additional data that is authenticated

nonce - bytes used to generate the IV

macBlock - the MAC block used to verify authenticity

Throws:

java.security.InvalidAlgorithmParameterException

GCMCMSParameterSpec

public GCMCMSParameterSpec(byte[] aaData,
                           byte[] nonce)
                    throws java.security.InvalidAlgorithmParameterException

Creates a GCM Parameter specification with the given additional data and nonce. MAC length will be set to 12 bytes.

Parameters:

aaData - the additional data that is authenticated

nonce - bytes used to generate the IV

Throws:

java.security.InvalidAlgorithmParameterException

GCMCMSParameterSpec

public GCMCMSParameterSpec()
                    throws java.security.InvalidAlgorithmParameterException

Creates a GCM Parameter specification with default values. The nonce will be generated and the MAC length will be set to 12 bytes.

Throws:

java.security.InvalidAlgorithmParameterException

Method Detail

setMac

public void setMac(byte[] mac)

Sets the mac value.

For CMS the mac value is not appended to the cipher data, rather it has to be set/got by/from parameters.

Parameters:

mac - the mac value (not cloned)