package com.google.crypto.tink.aead;
import com.google.crypto.tink.Aead;
import com.google.crypto.tink.KeyTemplate;
import com.google.crypto.tink.KeyTypeManager;
import com.google.crypto.tink.Registry;
import com.google.crypto.tink.proto.AesEaxKey;
import com.google.crypto.tink.proto.AesEaxKeyFormat;
import com.google.crypto.tink.proto.AesEaxParams;
import com.google.crypto.tink.proto.KeyData.KeyMaterialType;
import com.google.crypto.tink.subtle.AesEaxJce;
import com.google.crypto.tink.subtle.Random;
import com.google.crypto.tink.subtle.Validators;
import com.google.protobuf.ByteString;
import com.google.protobuf.ExtensionRegistryLite;
import com.google.protobuf.InvalidProtocolBufferException;
import java.security.GeneralSecurityException;
public final class AesEaxKeyManager extends KeyTypeManager<AesEaxKey> {
AesEaxKeyManager() {
super(
AesEaxKey.class,
new PrimitiveFactory<Aead, AesEaxKey>(Aead.class) {
@Override
public Aead getPrimitive(AesEaxKey key) throws GeneralSecurityException {
return new AesEaxJce(
key.getKeyValue().toByteArray(), key.getParams().getIvSize());
}
});
}
@Override
public String getKeyType() {
return "type.googleapis.com/google.crypto.tink.AesEaxKey";
}
@Override
public int getVersion() {
return 0;
}
@Override
public KeyMaterialType keyMaterialType() {
return KeyMaterialType.SYMMETRIC;
}
@Override
public void validateKey(AesEaxKey key) throws GeneralSecurityException {
Validators.validateVersion(key.getVersion(), getVersion());
Validators.validateAesKeySize(key.getKeyValue().size());
if (key.getParams().getIvSize() != 12 && key.getParams().getIvSize() != 16) {
throw new GeneralSecurityException("invalid IV size; acceptable values have 12 or 16 bytes");
}
}
@Override
public AesEaxKey parseKey(ByteString byteString) throws InvalidProtocolBufferException {
return AesEaxKey.parseFrom(byteString, ExtensionRegistryLite.getEmptyRegistry());
}
@Override
public KeyFactory<AesEaxKeyFormat, AesEaxKey> keyFactory() {
return new KeyFactory<AesEaxKeyFormat, AesEaxKey>(AesEaxKeyFormat.class) {
@Override
public void validateKeyFormat(AesEaxKeyFormat format) throws GeneralSecurityException {
Validators.validateAesKeySize(format.getKeySize());
if (format.getParams().getIvSize() != 12 && format.getParams().getIvSize() != 16) {
throw new GeneralSecurityException(
"invalid IV size; acceptable values have 12 or 16 bytes");
}
}
@Override
public AesEaxKeyFormat parseKeyFormat(ByteString byteString)
throws InvalidProtocolBufferException {
return AesEaxKeyFormat.parseFrom(byteString, ExtensionRegistryLite.getEmptyRegistry());
}
@Override
public AesEaxKey createKey(AesEaxKeyFormat format) throws GeneralSecurityException {
return AesEaxKey.newBuilder()
.setKeyValue(ByteString.copyFrom(Random.randBytes(format.getKeySize())))
.setParams(format.getParams())
.setVersion(getVersion())
.build();
}
};
}
public static void register(boolean newKeyAllowed) throws GeneralSecurityException {
Registry.registerKeyManager(new AesEaxKeyManager(), newKeyAllowed);
}
public static final KeyTemplate aes128EaxTemplate() {
return createKeyTemplate(16, 16, KeyTemplate.OutputPrefixType.TINK);
}
public static final KeyTemplate rawAes128EaxTemplate() {
return createKeyTemplate(16, 16, KeyTemplate.OutputPrefixType.RAW);
}
public static final KeyTemplate aes256EaxTemplate() {
return createKeyTemplate(32, 16, KeyTemplate.OutputPrefixType.TINK);
}
public static final KeyTemplate rawAes256EaxTemplate() {
return createKeyTemplate(32, 16, KeyTemplate.OutputPrefixType.RAW);
}
private static KeyTemplate createKeyTemplate(
int keySize, int ivSize, KeyTemplate.OutputPrefixType prefixType) {
AesEaxKeyFormat format =
AesEaxKeyFormat.newBuilder()
.setKeySize(keySize)
.setParams(AesEaxParams.newBuilder().setIvSize(ivSize).build())
.build();
return KeyTemplate.create(
new AesEaxKeyManager().getKeyType(), format.toByteArray(), prefixType);
}
}