inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-08-07 17:49:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added Encryptor interface for symmetric encryption esp. targeting SealedObject

Browse Source 
- This will allow a keystore to be checked in (.keystore) and specified by installer
   - Algorithm parameters embedded in SealedObject but also supported by other Cipher methods
   ALF-8646: RINF 38: Text data encryption
   ALF-8956: RINF 38: Encryption key password specified by installer
   ALF-9055: RINF 38: Support encryption against existing data


git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@28438 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Derek Hulley
2011-06-16 15:42:56 +00:00
parent ccc07404e8
commit 1c2b677a47
33 changed files with 1022 additions and 705 deletions
Download Patch File Download Diff File Expand all files Collapse all files

104
source/java/org/alfresco/repo/security/encryption/AbstractKeyProvider.java
View File

@@ -1,101 +1,21 @@
package org.alfresco.repo.security.encryption;
import java.security.InvalidParameterException;
import java.security.Key;
import java.security.NoSuchAlgorithmException;
import java.security.Security;
import javax.crypto.KeyGenerator;
import org.alfresco.util.ParameterCheck;
import org.alfresco.error.AlfrescoRuntimeException;
import org.alfresco.repo.security.authentication.PasswordGenerator;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
public abstract class AbstractKeyProvider /*extends AbstractLifecycleBean*/ implements KeyProvider
/**
* Basic support for key providers
*
* @author Derek Hulley
* @since 4.0
*/
public abstract class AbstractKeyProvider implements KeyProvider
{
private static final Log logger = LogFactory.getLog(KeyProvider.class);
private static int KEY_SIZE = 256; // this requires unlimited strength policy files
private static int DEFAULT_KEY_SIZE = 128; // default key size should work if KEY_SIZE doesn't
private static String KEY_ALGORITHM = "AES";
protected PasswordGenerator passwordGenerator;
private Key key;
public void setKey(Key key)
@Override
public Key getKey(AlfrescoKeyAlias keyAlias)
{
this.key = key;
}
public PasswordGenerator getPasswordGenerator()
{
return passwordGenerator;
}
public void setPasswordGenerator(PasswordGenerator passwordGenerator)
{
this.passwordGenerator = passwordGenerator;
}
public Key getKey()
{
return key;
}
protected KeyGenerator getKeyGenerator()
{
KeyGenerator keyGenerator = null;
try
{
keyGenerator = KeyGenerator.getInstance(KEY_ALGORITHM);
}
catch(NoSuchAlgorithmException e)
{
Security.addProvider(new BouncyCastleProvider());
try
{
keyGenerator = KeyGenerator.getInstance(KEY_ALGORITHM);
}
catch(NoSuchAlgorithmException e1)
{
throw new AlfrescoRuntimeException("Unable to initialise encryption engine, no key generator is available", e1);
}
}
if(keyGenerator == null)
{
throw new AlfrescoRuntimeException("Unable to initialise encryption engine, no key generator is available");
}
try
{
keyGenerator.init(KEY_SIZE);
}
catch(InvalidParameterException e)
{
logger.warn(KEY_SIZE + " bits key size is not supported, trying " + DEFAULT_KEY_SIZE + " bits");
try
{
// try a smaller key size
keyGenerator.init(DEFAULT_KEY_SIZE);
}
catch(InvalidParameterException e1)
{
throw new AlfrescoRuntimeException("Unable to initialise encryption engine, no key generator is available", e1);
}
}
return keyGenerator;
}
protected Key generateSecretKey()
{
KeyGenerator keyGenerator = getKeyGenerator();
return keyGenerator.generateKey();
ParameterCheck.mandatory("keyAlias", keyAlias);
return getKey(keyAlias.name());
}
}