Package org.bouncycastle.crypto

Class CryptoServicesPermission

java.lang.Object

java.security.Permission

org.bouncycastle.crypto.CryptoServicesPermission

All Implemented Interfaces:

Serializable, Guard

public class CryptoServicesPermission
extends Permission

Permissions that need to be configured if a SecurityManager is used.

See Also:

• Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_RANDOM	Enable the setting of the default SecureRandom.
static final String	FIPS_EXPORT_KEYS	Allow a caller to export secret/private keys to be from the jar.
static final String	FIPS_MODE_CHANGE_TO_APPROVED_MODE_ENABLED	Enable a thread to change its state into approved mode.
static final String	FIPS_MODE_EXPORT_PRIVATE_KEY	Enable the export of a private key from the jar.
static final String	FIPS_MODE_EXPORT_SECRET_KEY	Enable the export of a secret key from the jar.
static final String	FIPS_MODE_TLS_NULL_DIGEST_ENABLED	Enable support for signature algorithms that can take an actual digest as an argument, rather than message to be digested.
static final String	FIPS_MODE_TLS_PKCS15_KEY_WRAP_ENABLED	Enable support for PKCS 1.5 RSA encryption to be used for key wrapping.
static final String	FIPS_MODE_UNAPPROVED_MODE_ENABLED	Enable unapproved mode as the default.
static final String	FIPS_TLS_ALGORITHMS_ENABLED	Enable full TLS support for providers like the JSSE.
static final String	GLOBAL_CONFIG	Enable the setting of global configuration properties.
static final String	THREAD_LOCAL_CONFIG	Enable the setting of thread local configuration properties.

Constructor Summary

Constructors

Constructor	Description
CryptoServicesPermission(String name)

Method Summary

Modifier and Type	Method	Description
boolean	equals(Object obj)
String	getActions()
int	hashCode()
boolean	implies(Permission permission)

Methods inherited from class java.security.Permission

checkGuard, getName, newPermissionCollection, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Details

FIPS_EXPORT_KEYS

public static final String FIPS_EXPORT_KEYS

Allow a caller to export secret/private keys to be from the jar. This permission enables both FIPS_MODE_EXPORT_PRIVATE_KEY and FIPS_MODE_EXPORT_SECRET_KEY.

See Also:

• Constant Field Values

FIPS_TLS_ALGORITHMS_ENABLED

public static final String FIPS_TLS_ALGORITHMS_ENABLED

Enable full TLS support for providers like the JSSE. This permission enables FIPS_MODE_TLS_ECDH_ENABLED and FIPS_MODE_TLS_PKCS15_KEY_WRAP_ENABLED.

See Also:

• Constant Field Values

FIPS_MODE_UNAPPROVED_MODE_ENABLED

public static final String FIPS_MODE_UNAPPROVED_MODE_ENABLED

Enable unapproved mode as the default.

See Also:

• Constant Field Values

FIPS_MODE_CHANGE_TO_APPROVED_MODE_ENABLED

public static final String FIPS_MODE_CHANGE_TO_APPROVED_MODE_ENABLED

Enable a thread to change its state into approved mode.

See Also:

• Constant Field Values

FIPS_MODE_EXPORT_PRIVATE_KEY

public static final String FIPS_MODE_EXPORT_PRIVATE_KEY

Enable the export of a private key from the jar.

See Also:

• Constant Field Values

FIPS_MODE_EXPORT_SECRET_KEY

public static final String FIPS_MODE_EXPORT_SECRET_KEY

Enable the export of a secret key from the jar.

See Also:

• Constant Field Values

FIPS_MODE_TLS_NULL_DIGEST_ENABLED

public static final String FIPS_MODE_TLS_NULL_DIGEST_ENABLED

Enable support for signature algorithms that can take an actual digest as an argument, rather than message to be digested.

See Also:

• Constant Field Values

FIPS_MODE_TLS_PKCS15_KEY_WRAP_ENABLED

public static final String FIPS_MODE_TLS_PKCS15_KEY_WRAP_ENABLED

Enable support for PKCS 1.5 RSA encryption to be used for key wrapping.

See Also:

• Constant Field Values

GLOBAL_CONFIG

public static final String GLOBAL_CONFIG

Enable the setting of global configuration properties. This permission implies THREAD_LOCAL_CONFIG

See Also:

• Constant Field Values

THREAD_LOCAL_CONFIG

public static final String THREAD_LOCAL_CONFIG

Enable the setting of thread local configuration properties.

See Also:

• Constant Field Values

DEFAULT_RANDOM

public static final String DEFAULT_RANDOM

Enable the setting of the default SecureRandom.

See Also:

• Constant Field Values

Constructor Details

CryptoServicesPermission

public CryptoServicesPermission(String name)

Method Details

implies

public boolean implies(Permission permission)

Specified by:

implies in class Permission

equals

public boolean equals(Object obj)

Specified by:

equals in class Permission

hashCode

public int hashCode()

Specified by:

hashCode in class Permission

getActions

public String getActions()

Specified by:

getActions in class Permission