org.bouncycastle.jcajce.provider.asymmetric.rsa

Class RSAKEMCipherSpi

java.lang.Object

javax.crypto.CipherSpi

org.bouncycastle.jcajce.provider.asymmetric.rsa.RSAKEMCipherSpi

public class RSAKEMCipherSpi
extends javax.crypto.CipherSpi

Cipher SPI implementing the ISO 18033-2 / RFC 9690 RSA-KEM key-transport scheme, registered under the JCE service name "RSA-KTS-KEM-KWS" and aliased against the id-kem-rsa object identifier (1.0.18033.2.2.4).

Driven by the CMS pipeline through org.bouncycastle.cms.jcajce.JceKEMRecipientInfoGenerator (wrap) and org.bouncycastle.cms.jcajce.JceKEMEnvelopedRecipient (unwrap) when the recipient holds an RSA key; the analogous peer for ML-KEM is MLKEMCipherSpi.

Cipher operates in WRAP_MODE / UNWRAP_MODE only and requires a KTSParameterSpec carrying the KDF (KDF2 / KDF3 / HKDF per RFC 9690 §4) and the AES-Wrap variant. Wrap output is the RSA-KEM ciphertext (modulus-byte length) concatenated with the AES-wrapped CEK; the CMS caller splits them based on the modulus length.

Constructor Summary

Constructors

Constructor and Description
RSAKEMCipherSpi()

Method Summary

Modifier and Type	Method and Description
protected byte[]	engineDoFinal(byte[] bytes, int i, int i1)
protected int	engineDoFinal(byte[] bytes, int i, int i1, byte[] bytes1, int i2)
protected int	engineGetBlockSize()
protected byte[]	engineGetIV()
protected int	engineGetKeySize(java.security.Key key)
protected int	engineGetOutputSize(int inputLen)
protected java.security.AlgorithmParameters	engineGetParameters()
protected void	engineInit(int opmode, java.security.Key key, java.security.spec.AlgorithmParameterSpec paramSpec, java.security.SecureRandom random)
protected void	engineInit(int opmode, java.security.Key key, java.security.AlgorithmParameters algorithmParameters, java.security.SecureRandom random)
protected void	engineInit(int opmode, java.security.Key key, java.security.SecureRandom random)
protected void	engineSetMode(java.lang.String mode)
protected void	engineSetPadding(java.lang.String padding)
protected java.security.Key	engineUnwrap(byte[] wrappedKey, java.lang.String wrappedKeyAlgorithm, int wrappedKeyType)
protected byte[]	engineUpdate(byte[] bytes, int i, int i1)
protected int	engineUpdate(byte[] bytes, int i, int i1, byte[] bytes1, int i2)
protected byte[]	engineWrap(java.security.Key key)

Methods inherited from class javax.crypto.CipherSpi

engineDoFinal, engineUpdate, engineUpdateAAD, engineUpdateAAD

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RSAKEMCipherSpi

public RSAKEMCipherSpi()

Method Detail

engineSetMode

protected void engineSetMode(java.lang.String mode)
                      throws java.security.NoSuchAlgorithmException

Specified by:

engineSetMode in class javax.crypto.CipherSpi

Throws:

java.security.NoSuchAlgorithmException

engineSetPadding

protected void engineSetPadding(java.lang.String padding)
                         throws javax.crypto.NoSuchPaddingException

Specified by:

engineSetPadding in class javax.crypto.CipherSpi

Throws:

javax.crypto.NoSuchPaddingException

engineGetKeySize

protected int engineGetKeySize(java.security.Key key)

Overrides:

engineGetKeySize in class javax.crypto.CipherSpi

engineGetBlockSize

protected int engineGetBlockSize()

Specified by:

engineGetBlockSize in class javax.crypto.CipherSpi

engineGetOutputSize

protected int engineGetOutputSize(int inputLen)

Specified by:

engineGetOutputSize in class javax.crypto.CipherSpi

engineGetIV

protected byte[] engineGetIV()

Specified by:

engineGetIV in class javax.crypto.CipherSpi

engineGetParameters

protected java.security.AlgorithmParameters engineGetParameters()

Specified by:

engineGetParameters in class javax.crypto.CipherSpi

engineInit

protected void engineInit(int opmode,
                          java.security.Key key,
                          java.security.SecureRandom random)
                   throws java.security.InvalidKeyException

Specified by:

engineInit in class javax.crypto.CipherSpi

Throws:

java.security.InvalidKeyException

engineInit

protected void engineInit(int opmode,
                          java.security.Key key,
                          java.security.spec.AlgorithmParameterSpec paramSpec,
                          java.security.SecureRandom random)
                   throws java.security.InvalidKeyException,
                          java.security.InvalidAlgorithmParameterException

Specified by:

engineInit in class javax.crypto.CipherSpi

Throws:

java.security.InvalidKeyException

java.security.InvalidAlgorithmParameterException

engineInit

protected void engineInit(int opmode,
                          java.security.Key key,
                          java.security.AlgorithmParameters algorithmParameters,
                          java.security.SecureRandom random)
                   throws java.security.InvalidKeyException,
                          java.security.InvalidAlgorithmParameterException

Specified by:

engineInit in class javax.crypto.CipherSpi

Throws:

java.security.InvalidKeyException

java.security.InvalidAlgorithmParameterException

engineUpdate

protected byte[] engineUpdate(byte[] bytes,
                              int i,
                              int i1)

Specified by:

engineUpdate in class javax.crypto.CipherSpi

engineUpdate

protected int engineUpdate(byte[] bytes,
                           int i,
                           int i1,
                           byte[] bytes1,
                           int i2)
                    throws javax.crypto.ShortBufferException

Specified by:

engineUpdate in class javax.crypto.CipherSpi

Throws:

javax.crypto.ShortBufferException

engineDoFinal

protected byte[] engineDoFinal(byte[] bytes,
                               int i,
                               int i1)
                        throws javax.crypto.IllegalBlockSizeException,
                               javax.crypto.BadPaddingException

Specified by:

engineDoFinal in class javax.crypto.CipherSpi

Throws:

javax.crypto.IllegalBlockSizeException

javax.crypto.BadPaddingException

engineDoFinal

protected int engineDoFinal(byte[] bytes,
                            int i,
                            int i1,
                            byte[] bytes1,
                            int i2)
                     throws javax.crypto.ShortBufferException,
                            javax.crypto.IllegalBlockSizeException,
                            javax.crypto.BadPaddingException

Specified by:

engineDoFinal in class javax.crypto.CipherSpi

Throws:

javax.crypto.ShortBufferException

javax.crypto.IllegalBlockSizeException

javax.crypto.BadPaddingException

engineWrap

protected byte[] engineWrap(java.security.Key key)
                     throws javax.crypto.IllegalBlockSizeException,
                            java.security.InvalidKeyException

Overrides:

engineWrap in class javax.crypto.CipherSpi

Throws:

javax.crypto.IllegalBlockSizeException

java.security.InvalidKeyException

engineUnwrap

protected java.security.Key engineUnwrap(byte[] wrappedKey,
                                         java.lang.String wrappedKeyAlgorithm,
                                         int wrappedKeyType)
                                  throws java.security.InvalidKeyException,
                                         java.security.NoSuchAlgorithmException

Overrides:

engineUnwrap in class javax.crypto.CipherSpi

Throws:

java.security.InvalidKeyException

java.security.NoSuchAlgorithmException