Package net.shibboleth.oidc.security.jose

Class DecryptionParameters

java.lang.Object

org.opensaml.xmlsec.AlgorithmPolicyParameters

net.shibboleth.oidc.security.jose.DecryptionParameters

public class DecryptionParameters
extends AlgorithmPolicyParameters

Describes the decryption parameters the system is required to use to decrypt a JWE.

Since:

2.2.0

Field Summary

Fields

Modifier and Type	Field	Description
private CriteriaSet	additionalCriteria	Carries additional criterion made available to the resolvers at runtime.
private JOSEObjectCredentialResolver	contentEncryptionKeyCredentialResolver	The content encryption key (CEK) resolver.
private JOSEObjectCredentialResolver	kekKeyCredentialResolver	The encrypted content encrypted key's (CEK) credential resolver.

Constructor Summary

Constructors

Constructor	Description
DecryptionParameters()	Constructor .

Method Summary

Modifier and Type	Method	Description
CriteriaSet	getAdditionalCriteria()	Get the criteria set to add additional criterion too.
CredentialResolver	getContentEncryptionKeyCredentialResolver()	Get the CredentialResolver to use when processing the encrypted content.
CredentialResolver	getKEKCredentialResolver()	Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
void	setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver resolver)	Set the KeyInfoCredentialResolver to use when processing the encrypted content.
void	setKEKCredentialResolver(JOSEObjectCredentialResolver resolver)	Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Methods inherited from class org.opensaml.xmlsec.AlgorithmPolicyParameters

getExcludedAlgorithms, getIncludedAlgorithms, setExcludedAlgorithms, setIncludedAlgorithms

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

additionalCriteria

@Nonnull
private final CriteriaSet additionalCriteria

Carries additional criterion made available to the resolvers at runtime.

kekKeyCredentialResolver

@Nullable
private JOSEObjectCredentialResolver kekKeyCredentialResolver

The encrypted content encrypted key's (CEK) credential resolver.

contentEncryptionKeyCredentialResolver

@Nullable
private JOSEObjectCredentialResolver contentEncryptionKeyCredentialResolver

The content encryption key (CEK) resolver.

Constructor Detail

DecryptionParameters

public DecryptionParameters()

Constructor .

Method Detail

getAdditionalCriteria

@Nonnull
public CriteriaSet getAdditionalCriteria()

Get the criteria set to add additional criterion too.

Returns:

the criteria set.

getContentEncryptionKeyCredentialResolver

@Nullable
public CredentialResolver getContentEncryptionKeyCredentialResolver()

Get the CredentialResolver to use when processing the encrypted content.

Returns:

the KeyInfoCredentialResolver instance

setContentEncryptionKeyCredentialResolver

public void setContentEncryptionKeyCredentialResolver(@Nullable
                                                      JOSEObjectCredentialResolver resolver)

Set the KeyInfoCredentialResolver to use when processing the encrypted content.

Parameters:

resolver - the CredentialResolver instance

getKEKCredentialResolver

@Nullable
public CredentialResolver getKEKCredentialResolver()

Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Returns:

the CredentialResolver instance

setKEKCredentialResolver

public void setKEKCredentialResolver(@Nullable
                                     JOSEObjectCredentialResolver resolver)

Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Parameters:

resolver - the CredentialResolver instance