Package org.apache.wss4j.common.crypto

Class AlgorithmSuiteValidator

java.lang.Object

org.apache.wss4j.common.crypto.AlgorithmSuiteValidator

public class AlgorithmSuiteValidator
extends Object

Validate signature/encryption/etc. algorithms against an AlgorithmSuite policy.

Constructor Summary

Constructors

Constructor	Description
AlgorithmSuiteValidator(AlgorithmSuite algorithmSuite)

Method Summary

Modifier and Type	Method	Description
void	checkAsymmetricKeyLength(X509Certificate x509Certificate)	Check the asymmetric key length
void	checkAsymmetricKeyLength(X509Certificate[] x509Certificates)	Check the asymmetric key length
void	checkAsymmetricKeyLength(PublicKey publicKey)	Check the asymmetric key length
void	checkC14nAlgorithm(String c14nAlgorithm)	Check the C14n Algorithm
void	checkDerivedKeyAlgorithm(String algorithm)	Check Derived Key algorithm
void	checkEncryptionDerivedKeyLength(int derivedKeyLength)	Check the Encryption Derived Key length.
void	checkEncryptionKeyWrapAlgorithm(String keyWrapAlgorithm)
void	checkKeyAgreementMethodAlgorithm(String keyAgreementMethodAlgorithm)
void	checkKeyDerivationFunction(String keyDerivationFunction)	Method to check the Key Derivation algorithm is on the approved list of the AlgorithmSuite configuration.
void	checkSignatureAlgorithms(XMLSignature xmlSignature)	Check the Signature Algorithms
void	checkSignatureDerivedKeyLength(int derivedKeyLength)	Check the Signature Derived Key length.
void	checkSignatureMethod(String signatureMethod)	Check the Signature Method
void	checkSymmetricEncryptionAlgorithm(String symmetricAlgorithm)
void	checkSymmetricKeyLength(int secretKeyLength)	Check the symmetric key length

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AlgorithmSuiteValidator

public AlgorithmSuiteValidator(AlgorithmSuite algorithmSuite)

Method Details

checkSignatureMethod

public void checkSignatureMethod(String signatureMethod)
                          throws WSSecurityException

Check the Signature Method

Throws:

WSSecurityException

checkC14nAlgorithm

public void checkC14nAlgorithm(String c14nAlgorithm)
                        throws WSSecurityException

Check the C14n Algorithm

Throws:

WSSecurityException

checkSignatureAlgorithms

public void checkSignatureAlgorithms(XMLSignature xmlSignature)
                              throws WSSecurityException

Check the Signature Algorithms

Throws:

WSSecurityException

checkEncryptionKeyWrapAlgorithm

public void checkEncryptionKeyWrapAlgorithm(String keyWrapAlgorithm)
                                     throws WSSecurityException

Throws:

WSSecurityException

checkKeyAgreementMethodAlgorithm

public void checkKeyAgreementMethodAlgorithm(String keyAgreementMethodAlgorithm)
                                      throws WSSecurityException

Throws:

WSSecurityException

checkKeyDerivationFunction

public void checkKeyDerivationFunction(String keyDerivationFunction)
                                throws WSSecurityException

Method to check the Key Derivation algorithm is on the approved list of the AlgorithmSuite configuration.

Parameters:

keyDerivationFunction - the key derivation function to be validated

Throws:

WSSecurityException - if the approved list is not empty and the key derivation function is not on the list

checkSymmetricEncryptionAlgorithm

public void checkSymmetricEncryptionAlgorithm(String symmetricAlgorithm)
                                       throws WSSecurityException

Throws:

WSSecurityException

checkAsymmetricKeyLength

public void checkAsymmetricKeyLength(X509Certificate[] x509Certificates)
                              throws WSSecurityException

Check the asymmetric key length

Throws:

WSSecurityException

checkAsymmetricKeyLength

public void checkAsymmetricKeyLength(X509Certificate x509Certificate)
                              throws WSSecurityException

Check the asymmetric key length

Throws:

WSSecurityException

checkAsymmetricKeyLength

public void checkAsymmetricKeyLength(PublicKey publicKey)
                              throws WSSecurityException

Check the asymmetric key length

Throws:

WSSecurityException

checkSymmetricKeyLength

public void checkSymmetricKeyLength(int secretKeyLength)
                             throws WSSecurityException

Check the symmetric key length

Throws:

WSSecurityException

checkSignatureDerivedKeyLength

public void checkSignatureDerivedKeyLength(int derivedKeyLength)
                                    throws WSSecurityException

Check the Signature Derived Key length. The supplied key length is denominated in bytes (the denomination of the wsc:Length element of a DerivedKeyToken), whereas the AlgorithmSuite requirement is denominated in bits.

Throws:

WSSecurityException

checkEncryptionDerivedKeyLength

public void checkEncryptionDerivedKeyLength(int derivedKeyLength)
                                     throws WSSecurityException

Check the Encryption Derived Key length. The supplied key length is denominated in bytes (the denomination of the wsc:Length element of a DerivedKeyToken), whereas the AlgorithmSuite requirement is denominated in bits.

Throws:

WSSecurityException

checkDerivedKeyAlgorithm

public void checkDerivedKeyAlgorithm(String algorithm)
                              throws WSSecurityException

Check Derived Key algorithm

Throws:

WSSecurityException