com.google.crypto.tink.apps.paymentmethodtoken

Class PaymentMethodTokenRecipient

java.lang.Object

com.google.crypto.tink.apps.paymentmethodtoken.PaymentMethodTokenRecipient

public final class PaymentMethodTokenRecipient
extends Object

An implementation of the recipient side of Google Payment Method Token.

Warning

This implementation only supports versions ECv1, ECv2 and ECv2SigningOnly.

Typical usage

 PaymentMethodTokenRecipient recipient = new PaymentMethodTokenRecipient.Builder()
     .fetchSenderVerifyingKeysWith(
         GooglePaymentsPublicKeysManager.INSTANCE_PRODUCTION)
     .recipientId(recipientId)
     // Multiple recipient private keys can be added to support graceful key rotations
     .addRecipientPrivateKey(recipientPrivateKey1)
     .addRecipientPrivateKey(recipientPrivateKey2)
     .build();
 String ciphertext = ...;
 String plaintext = recipient.unseal(ciphertext);
 

Custom decryption

Recipients that store private keys in HSM can provide implementations of PaymentMethodTokenRecipientKem and configure Tink to use their custom code with PaymentMethodTokenRecipient.Builder.addRecipientKem(com.google.crypto.tink.apps.paymentmethodtoken.PaymentMethodTokenRecipientKem).

 PaymentMethodTokenRecipient recipient = new PaymentMethodTokenRecipient.Builder()
     .fetchSenderVerifyingKeysWith(
         GooglePaymentsPublicKeysManager.INSTANCE_PRODUCTION)
     .recipientId(recipientId)
     .addRecipientKem(new MyPaymentMethodTokenRecipientKem())
     .build();
 String ciphertext = ...;
 String plaintext = recipient.unseal(ciphertext);
 

Since:

1.0.0

See Also:

Google Payment Method Token standard

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	PaymentMethodTokenRecipient.Builder Builder for PaymentMethodTokenRecipient.

Method Summary

Modifier and Type	Method and Description
String	unseal(String sealedMessage) Unseal the given sealedMessage by performing the necessary signature verification and decryption (if required) steps based on the protocolVersion.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

unseal

public String unseal(String sealedMessage)
              throws GeneralSecurityException

Unseal the given sealedMessage by performing the necessary signature verification and decryption (if required) steps based on the protocolVersion.

Throws:

GeneralSecurityException