|
Bouncy Castle Cryptography Library 1.85 | |||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||
PKCS10CertificationRequest that exposes the request's
public key as an AsymmetricKeyParameter (no JCA dependency).CertificationRequest.
PKCS10CertificationRequest as a lightweight-aware holder.
PKCS12MacCalculatorBuilder for the MAC algorithm
advertised by an incoming PFX's .InputDecryptorProvider that handles the PKCS#12 password-based
encryption schemes from RFC 7292 Appendix C (e.g. OutputEncryptor that applies one of the PKCS#12
password-based encryption schemes from RFC 7292 Appendix C. PKCS12MacCalculatorBuilder that produces a PBMAC1 calculator
(RFC 8018 §7.1) for use as PKCS#12 PFX integrity protection per RFC 9579. PKCS12MacCalculatorBuilderProvider that returns PBMAC1
(RFC 8018 / RFC 9579) MAC calculator builders. KeyParameter form.
DeltaCertificateRequestAttributeValue.
PKCS12SecretBag.
InputDecryptorProvider.
OutputEncryptor.
InputDecryptorProvider that can
produce decryptors for the password-based algorithm identifiers it is asked for.
OutputEncryptor.
AccessDescription suitable for adding to a
SubjectInfoAccess extension: accessMethod is
BCObjectIdentifiers.id_ad_certDiscovery, accessLocation is an
GeneralName whose type-id is
BCObjectIdentifiers.id_on_relatedCertificateDescriptor and
whose value is the descriptor built from the current builder state.
CRLValidation.CRLValidation(X500Name, SubjectPublicKeyInfo,
X509ContentVerifierProviderBuilder, Store) so CRLs are checked against the issuer's key.
CertConfirmContent message.CertConfirmContent message.CertReqMsg.RelatedCertificate extension value identifying the
supplied certificate by digest.
RequesterCertificate value.
DigestAlgorithmIdentifierFinder, returning
the that names a digest in the contexts where
this finder is used by CMS / S/MIME / PKIX operator builders.
SignatureAlgorithmIdentifierFinder,
returning the (algorithm OID plus any
algorithm-specific parameters) used to name a signature scheme in
X.509 certificates, CMS SignedData, OCSP responses and related PKIX
structures.
Attribute whose first value is a DeltaCertificateRequest sequence.
ContentSigner for signers whose signature encoding has
a fixed, predictable length — RSA (PKCS#1 v1.5 and PSS: the modulus size),
Ed25519/Ed448 and ML-DSA qualify; DER-encoded ECDSA/DSA do not (the
INTEGER components vary in length).
Attribute.
X509ObjectIdentifiers.id_ce_ct_embeddedSCTList
certificate extension, if present.
X509ObjectIdentifiers.id_ce_ct_transparencyInformation
certificate extension, if present.
CMSSignedGenerator.setEncoding(String))
signed object with encapsulated content in two passes over the supplied
content, with nothing buffered - so the content may exceed the size of a
Java array, and no length needs to be known in advance.
CMSAuthenticatedData.getAuthAttributes() instead.
PKCS12SafeBag.getType():
pkcs8ShroudedKeyBag → PKCS8EncryptedPrivateKeyInfo, certBag →
X509CertificateHolder, keyBag → PrivateKeyInfo,
crlBag → X509CRLHolder, secretBag → PKCS12SecretBag.
ClassLoader which loads the resource files or null
if the default ClassLoader is used.
ASN1ParsingException if absent.
ASN1ParsingException if the
content is absent or not an .
BERSet if the field used the indefinite-length (BER) method,
a DLSet otherwise, with the algorithm identifiers in their
original wire order.
EncryptedData, raising
ASN1ParsingException if absent.
SignedCertificateTimestampList).
TransItemList).
AsymmetricKeyParameter.
PublicKey.
PKCS12SafeBags contained in the ContentInfo this factory was created over.
CMSAuthenticatedData.getUnauthAttributes() instead.
RelatedCertificate extension
value over the supplied candidate certificate and report whether it
matches the stored hash.
CertificateRepMessageBuilder.PKCS10CertificationRequest that returns the request's public
key as a JCA PublicKey. CertificationRequest.
PKCS10CertificationRequest as a JCA-aware holder.
PKCS12SafeBagBuilder that accepts standard JCA
X509Certificate and PrivateKey inputs.X509Certificate.
PrivateKey.
PrivateKey (no encryption).
PKCS8EncryptedPrivateKeyInfoBuilder that accepts a standard
PrivateKey as input.PrivateKey, transparently decrypting the password-protected variants.
PBEMacCalculatorProvider that vends PBMAC1 (RFC 8018 / RFC 9579)
verifier MAC calculators via the JCA. PKCS12MacCalculatorBuilderProvider that handles both the legacy PKCS#12
PBE-MAC (RFC 7292) and the RFC 9579 PBMAC1 protection schemes. InputDecryptorProvider that handles the password-based
decryption schemes encountered in PKCS#12 / PKCS#8: the legacy family
(RFC 7292 Appendix C), PBES2 / PBKDF2 and PBES2 / scrypt (RFC 8018, RFC 7914), and the older
PBE1 schemes (, ).OutputEncryptor that applies one of the password-based
encryption schemes used to protect PKCS#8 / PKCS#12 payloads:
the legacy PKCS#12 family (RFC 7292 Appendix C) — selected when
the constructor is passed one of those OIDs,
PBES2 (RFC 8018) — selected for any other key-encryption algorithm; the embedded
key-derivation function may be PBKDF2 or scrypt (RFC 7914) via an explicit
PBKDFConfig.OutputEncryptor for encryptors that can predict the
exact ciphertext length produced for a given plaintext length. GeneralSecurityException subclass or a lightweight
) returned by the JCA or lightweight
machinery the builder was driving.
GeneralSecurityException, IOException,
or lightweight ) that triggered the failure.
IOException.
GeneralSecurityException subclass or a
lightweight from inside the operator.
CMSAuthEnvelopedDataStreamGenerator.open(OutputStream, long, OutputAEADEncryptor).
CMSAuthenticatedDataStreamGenerator.open(OutputStream, long, MacCalculator).
CMSAuthenticatedDataStreamGenerator.open(OutputStream, long, MacCalculator).
CMSAuthenticatedDataStreamGenerator.open(OutputStream, long, MacCalculator) and
CMSAuthenticatedDataStreamGenerator.open(OutputStream, long, MacCalculator, DigestCalculator).
CMSEnvelopedDataStreamGenerator.open(OutputStream, long, OutputEncryptor).
CMSSignedGenerator.setEncoding(String))
signed object with encapsulated content of exactly
octets, in a single pass with nothing buffered - so the content may
exceed the size of a Java array.
PKCS12SafeBag. PKCS12SafeBags carried in one ContentInfo of a
PFX's AuthenticatedSafe. SecretBag ASN.1 structure used by the
PKCS#12 secretBag bag type.PKCS12SecretBag carrying an arbitrary secret value
identified by the supplied bag-type OID.EncryptedPrivateKeyInfo structure.
PrivateKeyInfo.
PrivateKeyInfo.
org.bouncycastle.pkcs and its
sub-packages.IOException thrown by classes in org.bouncycastle.pkcs and its
sub-packages to signal malformed or corrupted PKCS encodings.RelatedCertificateDescriptor structure
defined by draft-ietf-lamps-certdiscovery, plus the wrapping required to
place it in a SubjectInfoAccess extension.
RelatedCertificate certificate extension carried on an
end-entity certificate (OID
X509ObjectIdentifiers.id_pe_relatedCert
/ Extension.relatedCertificate), and
the RequesterCertificate CSR attribute value the requester
includes in the CSR to prove they hold the private key of the related
certificate (attribute OID
PKCSObjectIdentifiers.id_aa_relatedCertRequest).OperatorException used when an operator method has no
clause to declare a checked exception on.
SignedCertificateTimestampDataV2.
TransItem whose
versioned_type is (0x0102) or
(0x0103).
ClassLoader which loads the resource files.
Filter that is used to filter the arguments of this message
BCObjectIdentifiers.id_rcd: agility, redundancy, dual,
privKeyStmt or self).
KeyFactory lookups to the named JCE provider.
KeyFactory lookups to the supplied JCE provider.
TransItemList. X509ObjectIdentifiers.id_ce_ct_transparencyInformation).
Attribute
carrying PKCSObjectIdentifiers.id_aa_relatedCertRequest, ready to
drop into a attributes set.
Properties.PKCS12_MAX_IT_COUNT security property (default
5,000,000).
ContentVerifier.
signature
field must cover straight into : the DER encoding of
followed by the DER encoding of , per
RFC 9763 sec. 4.1 ("concatenation of DER-encoded IssuerAndSerialNumber
and BinaryTime").
|
Bouncy Castle Cryptography Library 1.85 | |||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||