public class AgileDecryptor extends Decryptor
Modifier and Type | Field and Description |
---|---|
protected static byte[] |
kCryptoKeyBlock |
protected static byte[] |
kHashedVerifierBlock |
protected static byte[] |
kIntegrityKeyBlock |
protected static byte[] |
kIntegrityValueBlock |
protected static byte[] |
kVerifierInputBlock |
builder, DEFAULT_PASSWORD, DEFAULT_POIFS_ENTRY
Modifier | Constructor and Description |
---|---|
protected |
AgileDecryptor(AgileEncryptionInfoBuilder builder) |
Modifier and Type | Method and Description |
---|---|
java.io.InputStream |
getDataStream(DirectoryNode dir)
Return a stream with decrypted data.
|
long |
getLength()
Returns the length of the encrypted data that can be safely read with
Decryptor.getDataStream(org.apache.poi.poifs.filesystem.DirectoryNode) . |
protected static int |
getNextBlockSize(int inputLen,
int blockSize) |
protected static byte[] |
hashInput(EncryptionInfoBuilder builder,
byte[] pwHash,
byte[] blockKey,
byte[] inputKey,
int cipherMode) |
protected static javax.crypto.Cipher |
initCipherForBlock(javax.crypto.Cipher existing,
int block,
boolean lastChunk,
EncryptionInfoBuilder builder,
javax.crypto.SecretKey skey,
int encryptionMode) |
boolean |
verifyPassword(java.security.KeyPair keyPair,
java.security.cert.X509Certificate x509)
instead of a password, it's also possible to decrypt via certificate.
|
boolean |
verifyPassword(java.lang.String password)
set decryption password
|
getBlockSizeInBytes, getDataStream, getDataStream, getDataStream, getInstance, getIntegrityHmacKey, getIntegrityHmacValue, getKeySizeInBytes, getSecretKey, getVerifier, setIntegrityHmacKey, setIntegrityHmacValue, setSecretKey, setVerifier
protected static final byte[] kVerifierInputBlock
protected static final byte[] kHashedVerifierBlock
protected static final byte[] kCryptoKeyBlock
protected static final byte[] kIntegrityKeyBlock
protected static final byte[] kIntegrityValueBlock
protected AgileDecryptor(AgileEncryptionInfoBuilder builder)
public boolean verifyPassword(java.lang.String password) throws java.security.GeneralSecurityException
verifyPassword
in class Decryptor
java.security.GeneralSecurityException
public boolean verifyPassword(java.security.KeyPair keyPair, java.security.cert.X509Certificate x509) throws java.security.GeneralSecurityException
keyPair
- x509
- java.security.GeneralSecurityException
protected static int getNextBlockSize(int inputLen, int blockSize)
protected static byte[] hashInput(EncryptionInfoBuilder builder, byte[] pwHash, byte[] blockKey, byte[] inputKey, int cipherMode)
public java.io.InputStream getDataStream(DirectoryNode dir) throws java.io.IOException, java.security.GeneralSecurityException
Decryptor
Use Decryptor.getLength()
to get the size of that data that can be safely read from the stream.
Just reading to the end of the input stream is not sufficient because there are
normally padding bytes that must be discarded
getDataStream
in class Decryptor
dir
- the node to read fromjava.io.IOException
java.security.GeneralSecurityException
public long getLength()
Decryptor
Decryptor.getDataStream(org.apache.poi.poifs.filesystem.DirectoryNode)
.
Just reading to the end of the input stream is not sufficient because there are
normally padding bytes that must be discarded
The length variable is initialized in Decryptor.getDataStream(org.apache.poi.poifs.filesystem.DirectoryNode)
,
an attempt to call getLength() prior to getDataStream() will result in IllegalStateException.
protected static javax.crypto.Cipher initCipherForBlock(javax.crypto.Cipher existing, int block, boolean lastChunk, EncryptionInfoBuilder builder, javax.crypto.SecretKey skey, int encryptionMode) throws java.security.GeneralSecurityException
java.security.GeneralSecurityException
Copyright 2018 The Apache Software Foundation or its licensors, as applicable.