blob: 0361e9fbf98c863bb2e460c1b531fc634578ccea (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
|
package org.bouncycastle.asn1.cms;
import org.bouncycastle.asn1.ASN1EncodableVector;
import org.bouncycastle.asn1.ASN1GeneralizedTime;
import org.bouncycastle.asn1.ASN1Object;
import org.bouncycastle.asn1.ASN1OctetString;
import org.bouncycastle.asn1.ASN1Primitive;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.DEROctetString;
import org.bouncycastle.asn1.DERSequence;
/**
* <a href="http://tools.ietf.org/html/rfc5652#section-6.2.3">RFC 5652</a>:
* Content encryption key delivery mechanisms.
* <p>
* <pre>
* KEKIdentifier ::= SEQUENCE {
* keyIdentifier OCTET STRING,
* date GeneralizedTime OPTIONAL,
* other OtherKeyAttribute OPTIONAL
* }
* </pre>
*/
public class KEKIdentifier
extends ASN1Object
{
private ASN1OctetString keyIdentifier;
private ASN1GeneralizedTime date;
private OtherKeyAttribute other;
public KEKIdentifier(
byte[] keyIdentifier,
ASN1GeneralizedTime date,
OtherKeyAttribute other)
{
this.keyIdentifier = new DEROctetString(keyIdentifier);
this.date = date;
this.other = other;
}
private KEKIdentifier(
ASN1Sequence seq)
{
keyIdentifier = (ASN1OctetString)seq.getObjectAt(0);
switch (seq.size())
{
case 1:
break;
case 2:
if (seq.getObjectAt(1) instanceof ASN1GeneralizedTime)
{
date = (ASN1GeneralizedTime)seq.getObjectAt(1);
}
else
{
other = OtherKeyAttribute.getInstance(seq.getObjectAt(1));
}
break;
case 3:
date = (ASN1GeneralizedTime)seq.getObjectAt(1);
other = OtherKeyAttribute.getInstance(seq.getObjectAt(2));
break;
default:
throw new IllegalArgumentException("Invalid KEKIdentifier");
}
}
/**
* Return a KEKIdentifier object from a tagged object.
*
* @param obj the tagged object holding the object we want.
* @param explicit true if the object is meant to be explicitly
* tagged false otherwise.
* @exception IllegalArgumentException if the object held by the
* tagged object cannot be converted.
*/
public static KEKIdentifier getInstance(
ASN1TaggedObject obj,
boolean explicit)
{
return getInstance(ASN1Sequence.getInstance(obj, explicit));
}
/**
* Return a KEKIdentifier object from the given object.
* <p>
* Accepted inputs:
* <ul>
* <li> null → null
* <li> {@link KEKIdentifier} object
* <li> {@link org.bouncycastle.asn1.ASN1Sequence#getInstance(java.lang.Object) ASN1Sequence} input formats with KEKIdentifier structure inside
* </ul>
*
* @param obj the object we want converted.
* @exception IllegalArgumentException if the object cannot be converted.
*/
public static KEKIdentifier getInstance(
Object obj)
{
if (obj == null || obj instanceof KEKIdentifier)
{
return (KEKIdentifier)obj;
}
if (obj instanceof ASN1Sequence)
{
return new KEKIdentifier((ASN1Sequence)obj);
}
throw new IllegalArgumentException("Invalid KEKIdentifier: " + obj.getClass().getName());
}
public ASN1OctetString getKeyIdentifier()
{
return keyIdentifier;
}
public ASN1GeneralizedTime getDate()
{
return date;
}
public OtherKeyAttribute getOther()
{
return other;
}
/**
* Produce an object suitable for an ASN1OutputStream.
*/
public ASN1Primitive toASN1Primitive()
{
ASN1EncodableVector v = new ASN1EncodableVector();
v.add(keyIdentifier);
if (date != null)
{
v.add(date);
}
if (other != null)
{
v.add(other);
}
return new DERSequence(v);
}
}
|
