Package be.fgov.ehealth.etee.crypto.encrypt

Classes for sealing of message and validation of ETKs.

See:
Description

Interface Summary

DataSealer	A DataSealer is a thread safe object that can protect data that must be exchanged between two parties.
DataSealerBuilder.BuildStep	Build the DataSealer
DataSealerBuilder.OCSPPolicyStep	First step: Choose an OCSP-policy.
DataSealerBuilder.PublicKeyEncryptionPolicyStep	Third step (optional): Choose a public key EncryptionPolicy.
DataSealerBuilder.SecretKeyEncryptionPolicyStep	Fourth step (optional): Choose a secret key EncryptionPolicy.
DataSealerBuilder.SigningPolicyStep	Second step: Choose a signing-policy.
EncryptionTokenChecker	Checks validity of an EncryptionToken.
EncryptionTokenCheckerBuilder.BuildStep	Build the EncryptionTokenChecker
EncryptionTokenCheckerBuilder.OCSPPolicyStep	First step: Choose an OCSP-policy.
EncryptionTokenCheckerBuilder.TrustStoreStep	Second step: Choose a truststore with trust anchors for certpath validation of the certificates found in the EncryptionToken.

Class Summary

DataSealerBuilder	This builder will create and configure an instance of DataSealer.
EncryptionToken	This class is the eHealth EncryptionToken (aka ETK).
EncryptionTokenCheckerBuilder	Builder for EncryptionTokenChecker with steps.
EncryptionTokenFactory	Factory to create EncryptionTokens.

Exception Summary

DataSealerException

A custom exception, thrown when something went wrong while sealing data with the DataSealer

Package be.fgov.ehealth.etee.crypto.encrypt Description

Classes for sealing of message and validation of ETKs.

Use the Builders as starting point to configure the services.

Supported Policies and Options can be passed through the builders.
See be.fgov.ehealth.etee.crypto.policies

Following unsigned attributes can be added to the CMS messages

• id-aa-ets-revocationValues: OCSPResponses and CRLs on the certificates contained in the sealed message.