Package be.business.connector.core.utils

Class EncryptionUtils

java.lang.Object

be.business.connector.core.utils.EncryptionUtils

public class EncryptionUtils
extends Object

The Class EncryptionUtils.

Field Summary

Fields

Modifier and Type	Field	Description
static String	AUTHENTICATION_ALIAS	The Constant AUTHENTICATION_ALIAS.
static String	PROP_KEYSTORE_FILE	The Constant PROP_KEYSTORE_FILE.
static String	PROP_KEYSTORE_P12_FOLDER	The Constant PROP_KEYSTORE_P12_FOLDER.
static String	PROP_KEYSTORE_PASSWORD	The Constant PROP_KEYSTORE_PASSWORD.

Constructor Summary

Constructors

Constructor	Description
EncryptionUtils(PropertyHandler propertyHandler)	Instantiates a new encryption utils.

Method Summary

Modifier and Type	Method	Description
void	clearKeystore()	Clear keystore.
void	clearMandateKeystore()	Clear keystore.
void	clearOldKeystore()	Clear keystore.
SecretKey	generateSecretKey()	Generate secret key.
X509Certificate	getCertificate()	Gets the certificate.
X509Certificate	getFallbackCertificate()	Gets the fallback certificate.
PrivateKey	getFallbackPrivateKey()	Gets the fallback private key.
PublicKey	getFallbackPublicKey()	Gets the fallback public key.
static EncryptionUtils	getInstance()	Gets the single instance of EncryptionUtils.
KeyStore	getKeyStore()	Gets the client key store.
X509Certificate	getMandateCertificate()
KeyStore	getMandateOrganisationKeyStore()
PrivateKey	getMandatePrivateKey()	Gets the private key for authentication.
PublicKey	getMandatePublicKey()	Gets the public key for authentication.
X509Certificate	getOldCertificate()
KeyStore	getOldKeyStore()
PrivateKey	getOldPrivateKey()
PublicKey	getOldPublicKey()
String	getOldSystemKeystoreDirectory()
String	getOldSystemKeystorePassword()
String	getOldSystemKeystorePath()
String	getOldSystemKeystoreRiziv()
PrivateKey	getPrivateKey()	Gets the private key for authentication.
PublicKey	getPublicKey()	Gets the public key for authentication.
String	getSystemKeystorePassword()
String	getSystemKeystorePath()
static String	getThumbPrint(X509Certificate cert)
KeyStore	getTSAKeyStore()	Gets the client key store.
List<String>	getTsaStoreAliases()
static String	hexify(byte[] bytes)
be.fgov.ehealth.etee.crypto.encrypt.DataSealer	initOldSealing()
be.fgov.ehealth.etee.crypto.decrypt.DataUnsealer	initOldUnSealing()
be.fgov.ehealth.etee.crypto.encrypt.DataSealer	initSealing()	Inits the sealing.
be.fgov.ehealth.etee.crypto.decrypt.DataUnsealer	initUnsealing()	Inits the unsealing.
KeyStore	loadCaKeystore()
KeyStore	loadKeyStore(InputStream stream, char[] pwd)
String	queueDecrypt(byte[] data, PublicKey publicKey)	queueEncrypt / queueDecryt works only for marshaled object.
byte[]	queueEncrypt(byte[] data, PublicKey publicKey)	queueEncrypt / queueDecryt works only for marshaled object.
void	setOldSystemKeystoreDirectory(String oldSystemKeystoreDirectory)
void	setOldSystemKeystorePassword(String oldSystemKeystorePassword)
void	setOldSystemKeystorePath(String oldSystemKeystorePath)
void	setOldSystemKeystoreRiziv(String oldSystemKeystoreRiziv)
void	setSystemKeystoreDirectory(String systemKeystoreDirectory)
void	setSystemKeystorePassword(String systemKeystorePassword)
void	setSystemKeystorePath(String systemKeystorePath)
void	setSystemKeystoreRiziv(String systemKeystoreRiziv)
void	unlockPersonalKey(String niss, String pwd)	Unlock personal key.
byte[]	unsealingData(be.fgov.ehealth.etee.crypto.status.CryptoResult<be.fgov.ehealth.etee.crypto.decrypt.UnsealedData> rslt)	Unsealing data.
static byte[]	unsealWithSymmKey(Key symmKey, byte[] objectToUnseal)	Unseal with symm key.
void	verifyDecryption(be.fgov.ehealth.etee.crypto.encrypt.EncryptionToken myETK)	Verify decryption.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUTHENTICATION_ALIAS

public static final String AUTHENTICATION_ALIAS

The Constant AUTHENTICATION_ALIAS.

See Also:

Constant Field Values

PROP_KEYSTORE_FILE

public static final String PROP_KEYSTORE_FILE

The Constant PROP_KEYSTORE_FILE.

See Also:

Constant Field Values

PROP_KEYSTORE_PASSWORD

public static final String PROP_KEYSTORE_PASSWORD

The Constant PROP_KEYSTORE_PASSWORD.

See Also:

Constant Field Values

PROP_KEYSTORE_P12_FOLDER

public static final String PROP_KEYSTORE_P12_FOLDER

The Constant PROP_KEYSTORE_P12_FOLDER.

See Also:

Constant Field Values

Constructor Detail

EncryptionUtils

public EncryptionUtils(PropertyHandler propertyHandler)

Instantiates a new encryption utils.

Parameters:

propertyHandler - the property handler

Method Detail

getInstance

public static EncryptionUtils getInstance()

Gets the single instance of EncryptionUtils.

Returns:

single instance of EncryptionUtils

generateSecretKey

public SecretKey generateSecretKey()
                            throws IntegrationModuleException

Generate secret key.

Returns:

the key

Throws:

IntegrationModuleException - the integration module exception

unsealWithSymmKey

public static byte[] unsealWithSymmKey(Key symmKey,
                                       byte[] objectToUnseal)

Unseal with symm key.

Parameters:

symmKey - the symm key

objectToUnseal - the object to unseal

Returns:

the byte[]

getKeyStore

public KeyStore getKeyStore()
                     throws IntegrationModuleException

Gets the client key store.

Returns:

the client key store

Throws:

IntegrationModuleException - the exception

getTSAKeyStore

public KeyStore getTSAKeyStore()
                        throws IntegrationModuleException

Gets the client key store.

Returns:

the client key store

Throws:

IntegrationModuleException - the exception

getTsaStoreAliases

public List<String> getTsaStoreAliases()

getSystemKeystorePath

public String getSystemKeystorePath()
                             throws IntegrationModuleException

Throws:

IntegrationModuleException

getOldKeyStore

public KeyStore getOldKeyStore()
                        throws IntegrationModuleException

Throws:

IntegrationModuleException

getOldSystemKeystorePath

public String getOldSystemKeystorePath()

getMandateOrganisationKeyStore

public KeyStore getMandateOrganisationKeyStore()

clearKeystore

public void clearKeystore()

Clear keystore.

clearOldKeystore

public void clearOldKeystore()

Clear keystore.

clearMandateKeystore

public void clearMandateKeystore()

Clear keystore.

getThumbPrint

public static String getThumbPrint(X509Certificate cert)
                            throws NoSuchAlgorithmException,
                                   CertificateEncodingException

Throws:

NoSuchAlgorithmException

CertificateEncodingException

hexify

public static String hexify(byte[] bytes)

initSealing

public be.fgov.ehealth.etee.crypto.encrypt.DataSealer initSealing()
                                                           throws KeyStoreException,
                                                                  UnrecoverableKeyException,
                                                                  NoSuchAlgorithmException,
                                                                  CertificateException,
                                                                  IOException,
                                                                  IntegrationModuleException

Inits the sealing.

Returns:

the data sealer

Throws:

KeyStoreException - the key store exception

UnrecoverableKeyException - the unrecoverable key exception

NoSuchAlgorithmException - the no such algorithm exception

CertificateException - the certificate exception

IOException - Signals that an I/O exception has occurred.

IntegrationModuleException - the exception

IntegrationModuleException - the exception

initOldSealing

public be.fgov.ehealth.etee.crypto.encrypt.DataSealer initOldSealing()
                                                              throws KeyStoreException,
                                                                     UnrecoverableKeyException,
                                                                     NoSuchAlgorithmException,
                                                                     IntegrationModuleException

Throws:

KeyStoreException

UnrecoverableKeyException

NoSuchAlgorithmException

IntegrationModuleException

initUnsealing

public be.fgov.ehealth.etee.crypto.decrypt.DataUnsealer initUnsealing()
                                                               throws CertificateException,
                                                                      IOException,
                                                                      KeyStoreException,
                                                                      NoSuchAlgorithmException,
                                                                      UnrecoverableKeyException,
                                                                      IntegrationModuleException

Inits the unsealing.

Returns:

the data unsealer

Throws:

CertificateException - the certificate exception

IOException - Signals that an I/O exception has occurred.

KeyStoreException - the key store exception

NoSuchAlgorithmException - the no such algorithm exception

UnrecoverableKeyException - the unrecoverable key exception

IntegrationModuleException - the exception

IntegrationModuleException - the exception

initOldUnSealing

public be.fgov.ehealth.etee.crypto.decrypt.DataUnsealer initOldUnSealing()
                                                                  throws CertificateException,
                                                                         IOException,
                                                                         KeyStoreException,
                                                                         NoSuchAlgorithmException,
                                                                         IntegrationModuleException

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

IntegrationModuleException

unlockPersonalKey

public void unlockPersonalKey(String niss,
                              String pwd)
                       throws IntegrationModuleException

Unlock personal key.

Parameters:

niss - the niss

pwd - the pwd

Throws:

IntegrationModuleException - the integration module exception

unsealingData

public byte[] unsealingData(be.fgov.ehealth.etee.crypto.status.CryptoResult<be.fgov.ehealth.etee.crypto.decrypt.UnsealedData> rslt)
                     throws IOException

Unsealing data.

Parameters:

rslt - the rslt

Returns:

the byte[]

Throws:

IOException - Signals that an I/O exception has occurred.

loadCaKeystore

public KeyStore loadCaKeystore()
                        throws IntegrationModuleException

Throws:

IntegrationModuleException

loadKeyStore

public KeyStore loadKeyStore(InputStream stream,
                             char[] pwd)
                      throws IntegrationModuleException

Throws:

IntegrationModuleException

getCertificate

public X509Certificate getCertificate()
                               throws IntegrationModuleException

Gets the certificate.

Returns:

the certificate

Throws:

IntegrationModuleException - the exception

getOldCertificate

public X509Certificate getOldCertificate()
                                  throws IntegrationModuleException

Throws:

IntegrationModuleException

getPrivateKey

public PrivateKey getPrivateKey()
                         throws IntegrationModuleException

Gets the private key for authentication.

Returns:

the private key

Throws:

IntegrationModuleException - the exception

getOldPrivateKey

public PrivateKey getOldPrivateKey()
                            throws IntegrationModuleException

Throws:

IntegrationModuleException

getPublicKey

public PublicKey getPublicKey()
                       throws IntegrationModuleException

Gets the public key for authentication.

Returns:

the public key

Throws:

IntegrationModuleException - the exception

getOldPublicKey

public PublicKey getOldPublicKey()
                          throws IntegrationModuleException

Throws:

IntegrationModuleException

getMandatePrivateKey

public PrivateKey getMandatePrivateKey()

Gets the private key for authentication.

Returns:

the private key

getMandatePublicKey

public PublicKey getMandatePublicKey()

Gets the public key for authentication.

Returns:

the public key

getFallbackPrivateKey

public PrivateKey getFallbackPrivateKey()
                                 throws IntegrationModuleException

Gets the fallback private key.

Returns:

the fallback private key

Throws:

IntegrationModuleException - the exception

getFallbackPublicKey

public PublicKey getFallbackPublicKey()
                               throws IntegrationModuleException

Gets the fallback public key.

Returns:

the fallback public key

Throws:

IntegrationModuleException - the exception

getFallbackCertificate

public X509Certificate getFallbackCertificate()
                                       throws IntegrationModuleException

Gets the fallback certificate.

Returns:

the fallback certificate

Throws:

IntegrationModuleException - the exception

getMandateCertificate

public X509Certificate getMandateCertificate()

verifyDecryption

public void verifyDecryption(be.fgov.ehealth.etee.crypto.encrypt.EncryptionToken myETK)
                      throws IntegrationModuleException

Verify decryption.

Parameters:

myETK - the my etk

Throws:

IntegrationModuleException - the integration module exception

setSystemKeystorePassword

public void setSystemKeystorePassword(String systemKeystorePassword)

Parameters:

systemKeystorePassword - the systemKeystorePassword to set

getSystemKeystorePassword

public String getSystemKeystorePassword()
                                 throws IntegrationModuleException

Throws:

IntegrationModuleException

setSystemKeystorePath

public void setSystemKeystorePath(String systemKeystorePath)

Parameters:

systemKeystorePath - the systemKeystorePath to set

setSystemKeystoreDirectory

public void setSystemKeystoreDirectory(String systemKeystoreDirectory)

Parameters:

systemKeystoreDirectory - the systemKeystoreDirectory to set

setSystemKeystoreRiziv

public void setSystemKeystoreRiziv(String systemKeystoreRiziv)

Parameters:

systemKeystoreRiziv - the systemKeystoreRiziv to set

setOldSystemKeystorePath

public void setOldSystemKeystorePath(String oldSystemKeystorePath)

Parameters:

oldSystemKeystorePath - the oldSystemKeystorePath to set

setOldSystemKeystorePassword

public void setOldSystemKeystorePassword(String oldSystemKeystorePassword)

Parameters:

oldSystemKeystorePassword - the oldSystemKeystorePassword to set

getOldSystemKeystorePassword

public String getOldSystemKeystorePassword()

setOldSystemKeystoreDirectory

public void setOldSystemKeystoreDirectory(String oldSystemKeystoreDirectory)

Parameters:

oldSystemKeystoreDirectory - the oldSystemKeystoreDirectory to set

getOldSystemKeystoreDirectory

public String getOldSystemKeystoreDirectory()

Returns:

the oldSystemKeystoreDirectory

setOldSystemKeystoreRiziv

public void setOldSystemKeystoreRiziv(String oldSystemKeystoreRiziv)

Parameters:

oldSystemKeystoreRiziv - the oldSystemKeystoreRiziv to set

getOldSystemKeystoreRiziv

public String getOldSystemKeystoreRiziv()

Returns:

the oldSystemKeystoreRiziv

queueEncrypt

public byte[] queueEncrypt(byte[] data,
                           PublicKey publicKey)
                    throws IntegrationModuleException

queueEncrypt / queueDecryt works only for marshaled object.

Parameters:

data - data

publicKey - publicKey

Returns:

bytes

Throws:

IntegrationModuleException - the exception

queueDecrypt

public String queueDecrypt(byte[] data,
                           PublicKey publicKey)
                    throws IntegrationModuleException

queueEncrypt / queueDecryt works only for marshaled object.

Parameters:

data - data

publicKey - publicKey

Returns:

the decrypted data

Throws:

IntegrationModuleException - the exception