Package org.bouncycastle.operator
package org.bouncycastle.operator
Basic operator definitions for doing encryption, signing, and digest operations.
-
ClassDescriptionBase interface for extra methods required for handling associated data in AEAD ciphers.General finder for converting OIDs and AlgorithmIdentifiers into strings.A class that explicitly buffers the data to be signed, sending it in one block when ready for signing.General interface for an operator that is able to create a signature from a stream of output.General interface for an operator that is able to verify a signature based on data in a stream of output.General interface for providers of ContentVerifier objects.Default implementation of
DigestAlgorithmIdentifierFinder, returning theAlgorithmIdentifierthat names a digest in the contexts where this finder is used by CMS / S/MIME / PKIX operator builders.Look up provider for encapsulation lengths produced be KEM algorithmsDefault implementation ofSignatureAlgorithmIdentifierFinder, returning theAlgorithmIdentifier(algorithm OID plus any algorithm-specific parameters) used to name a signature scheme in X.509 certificates, CMS SignedData, OCSP responses and related PKIX structures.Class for return signature names from OIDs or AlgorithmIdentifiersGeneral interface for an operator that is able to calculate a digest from a stream of output.The base interface for a provider of DigestCalculator implementations.A Content Signer which also provides details of the digest algorithm used internally.Extension ofContentSignerfor signers whose signature encoding has a fixed, predictable length — RSA (PKCS#1 v1.5 and PSS: the modulus size), Ed25519/Ed448 and ML-DSA qualify; DER-encoded ECDSA/DSA do not (the INTEGER components vary in length).Base interface for an input consuming AEAD Decryptor supporting associated text.General interface for an operator that is able to produce an InputStream that will decrypt a stream of encrypted data.General interface for an operator that is able to produce an InputStream that will produce uncompressed data.Extension ofOutputEncryptorfor encryptors that can predict the exact ciphertext length produced for a given plaintext length.General interface for a key initialized operator that is able to calculate a MAC from a stream of output.A generic class for capturing the mac data at the end of a encrypted data stream.ContentSigner for "Unsigned X.509 Certificates"Catalogue of content-encryption algorithm OIDs used where code only needs to identify the parameter form or block size family for an algorithm.Thrown by an operator builder when it cannot produce the requested operator.Base checked exception for failures originating in theorg.bouncycastle.operatorabstraction layer — the bridge between BC's JCA-free high-level packages (org.bouncycastle.cms,org.bouncycastle.cert,org.bouncycastle.pkcs, etc.) and their underlying JCA / lightweight implementations (org.bouncycastle.operator.jcajce/org.bouncycastle.operator.bc).Thrown from inside an operator's streaming method when an underlying cryptographic failure occurs and the surrounding signature only permits anIOException.General interface for an operator that is able to produce an OutputStream that will output compressed data.General interface for an operator that is able to produce an OutputStream that will output encrypted data.Interface for ContentVerifiers that also support raw signatures that can be verified using the digest of the calculated data.Unchecked variant ofOperatorExceptionused when an operator method has nothrowsclause to declare a checked exception on.