com.nimbusds.jose.aws.kms.crypto

Class KmsSymmetricDecrypter

java.lang.Object

com.nimbusds.jose.crypto.impl.PublicBaseJWEProvider

com.nimbusds.jose.aws.kms.crypto.impl.KmsSymmetricCryptoProvider

com.nimbusds.jose.aws.kms.crypto.KmsSymmetricDecrypter

All Implemented Interfaces:

com.nimbusds.jose.CriticalHeaderParamsAware, com.nimbusds.jose.jca.JCAAware<com.nimbusds.jose.jca.JWEJCAContext>, com.nimbusds.jose.JOSEProvider, com.nimbusds.jose.JWEDecrypter, com.nimbusds.jose.JWEProvider

@ThreadSafe
public class KmsSymmetricDecrypter
extends KmsSymmetricCryptoProvider
implements com.nimbusds.jose.JWEDecrypter, com.nimbusds.jose.CriticalHeaderParamsAware

Decrypter implementation for SYMMETRIC (AES based) signing with public/private key stored in AWS KMS.

See KmsSymmetricCryptoProvider for supported algorithms and encryption methods, and for details of various constructor parameters.

Field Summary

Fields inherited from class com.nimbusds.jose.aws.kms.crypto.impl.KmsSymmetricCryptoProvider

ENCRYPTION_CONTEXT_HEADER, ENCRYPTION_METHOD_TO_DATA_KEY_SPEC_MAP, SUPPORTED_ALGORITHMS, SUPPORTED_ENCRYPTION_METHODS

Constructor Summary

Constructors

Constructor and Description
KmsSymmetricDecrypter(@NonNull com.amazonaws.services.kms.AWSKMS kms, @NonNull java.lang.String keyId)
KmsSymmetricDecrypter(@NonNull com.amazonaws.services.kms.AWSKMS kms, @NonNull java.lang.String keyId, @NonNull java.util.Map<java.lang.String,java.lang.String> encryptionContext)
KmsSymmetricDecrypter(@NonNull com.amazonaws.services.kms.AWSKMS kms, @NonNull java.lang.String keyId, @NonNull java.util.Map<java.lang.String,java.lang.String> encryptionContext, @NonNull java.util.Set<java.lang.String> defCritHeaders)
KmsSymmetricDecrypter(@NonNull com.amazonaws.services.kms.AWSKMS kms, @NonNull java.lang.String keyId, @NonNull java.util.Set<java.lang.String> defCritHeaders)

Method Summary

Modifier and Type	Method and Description
byte[]	decrypt(@NonNull com.nimbusds.jose.JWEHeader header, @NonNull com.nimbusds.jose.util.Base64URL encryptedKey, @NonNull com.nimbusds.jose.util.Base64URL iv, @NonNull com.nimbusds.jose.util.Base64URL cipherText, @NonNull com.nimbusds.jose.util.Base64URL authTag)
java.util.Set<java.lang.String>	getDeferredCriticalHeaderParams()
com.nimbusds.jose.jca.JWEJCAContext	getJCAContext()
java.util.Set<java.lang.String>	getProcessedCriticalHeaderParams()
java.util.Set<com.nimbusds.jose.EncryptionMethod>	supportedEncryptionMethods()
java.util.Set<com.nimbusds.jose.JWEAlgorithm>	supportedJWEAlgorithms()

Methods inherited from class com.nimbusds.jose.aws.kms.crypto.impl.KmsSymmetricCryptoProvider

getEncryptionContext, getKeyId, getKms, validateJWEHeader

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.nimbusds.jose.JWEProvider

supportedEncryptionMethods, supportedJWEAlgorithms

Methods inherited from interface com.nimbusds.jose.jca.JCAAware

getJCAContext

Constructor Detail

KmsSymmetricDecrypter

public KmsSymmetricDecrypter(@NonNull
                             @NonNull com.amazonaws.services.kms.AWSKMS kms,
                             @NonNull
                             @NonNull java.lang.String keyId,
                             @NonNull
                             @NonNull java.util.Map<java.lang.String,java.lang.String> encryptionContext)

KmsSymmetricDecrypter

public KmsSymmetricDecrypter(@NonNull
                             @NonNull com.amazonaws.services.kms.AWSKMS kms,
                             @NonNull
                             @NonNull java.lang.String keyId)

KmsSymmetricDecrypter

public KmsSymmetricDecrypter(@NonNull
                             @NonNull com.amazonaws.services.kms.AWSKMS kms,
                             @NonNull
                             @NonNull java.lang.String keyId,
                             @NonNull
                             @NonNull java.util.Set<java.lang.String> defCritHeaders)

KmsSymmetricDecrypter

public KmsSymmetricDecrypter(@NonNull
                             @NonNull com.amazonaws.services.kms.AWSKMS kms,
                             @NonNull
                             @NonNull java.lang.String keyId,
                             @NonNull
                             @NonNull java.util.Map<java.lang.String,java.lang.String> encryptionContext,
                             @NonNull
                             @NonNull java.util.Set<java.lang.String> defCritHeaders)

Method Detail

getProcessedCriticalHeaderParams

public java.util.Set<java.lang.String> getProcessedCriticalHeaderParams()

Specified by:

getProcessedCriticalHeaderParams in interface com.nimbusds.jose.CriticalHeaderParamsAware

getDeferredCriticalHeaderParams

public java.util.Set<java.lang.String> getDeferredCriticalHeaderParams()

Specified by:

getDeferredCriticalHeaderParams in interface com.nimbusds.jose.CriticalHeaderParamsAware

decrypt

public byte[] decrypt(@NonNull
                      @NonNull com.nimbusds.jose.JWEHeader header,
                      @NonNull
                      @NonNull com.nimbusds.jose.util.Base64URL encryptedKey,
                      @NonNull
                      @NonNull com.nimbusds.jose.util.Base64URL iv,
                      @NonNull
                      @NonNull com.nimbusds.jose.util.Base64URL cipherText,
                      @NonNull
                      @NonNull com.nimbusds.jose.util.Base64URL authTag)
               throws com.nimbusds.jose.JOSEException

Specified by:

decrypt in interface com.nimbusds.jose.JWEDecrypter

Throws:

com.nimbusds.jose.JOSEException

supportedJWEAlgorithms

public java.util.Set<com.nimbusds.jose.JWEAlgorithm> supportedJWEAlgorithms()

Specified by:

supportedJWEAlgorithms in interface com.nimbusds.jose.JWEProvider

supportedEncryptionMethods

public java.util.Set<com.nimbusds.jose.EncryptionMethod> supportedEncryptionMethods()

Specified by:

supportedEncryptionMethods in interface com.nimbusds.jose.JWEProvider

getJCAContext

public com.nimbusds.jose.jca.JWEJCAContext getJCAContext()

Specified by:

getJCAContext in interface com.nimbusds.jose.jca.JCAAware<com.nimbusds.jose.jca.JWEJCAContext>