All Classes and Interfaces

Class
Description
Additional authenticated data (AAD).
Abstract retrieval of resources by URL with HTTP timeout and entity size restrictions.
Action required for JWS completion.
AES/CBC/PKCS5Padding and AES/CBC/PKCS5Padding/HMAC-SHA2 encryption and decryption methods.
The base abstract class for AES and AES GCM key wrap encrypters and decrypters of JWE objects.
AES and AES GCM key wrap decrypter of JWE objects.
AES and AES GCM key wrap encrypter of JWE objects.
AES/GSM/NoPadding encryption and decryption methods.
AES GCM methods for Content Encryption Key (CEK) encryption and decryption.
AES key Wrapping methods for Content Encryption Key (CEK) encryption and decryption.
The base class for algorithm names, with optional implementation requirement.
Utility for creating AlgorithmParameters objects with an optional JCA provider.
Algorithm support messages, intended for JOSE exceptions.
JSON Web Signature (JWS) option to allow weak RSA keys that are shorter than 2048 bits.
Array utilities.
Asymmetric (pair) JSON Web Key (JWK).
Authenticated cipher text.
Bad JSON Object Signing and Encryption (JOSE) exception.
Bad JSON Web Encryption (JWE) exception.
Bad JSON Web Signature (JWS) exception.
Bad JSON Web Token (JWT) exception.
Base64-encoded object.
Base64URL-encoded object.
The base abstract class for JSON Web Encryption (JWE) encrypters and decrypters.
The base abstract class for JSON Web Signature (JWS) signers and verifiers.
Big integer utilities.
BouncyCastle FIPS JCA provider singleton, intended to prevent memory leaks by ensuring a single instance is loaded at all times.
BouncyCastle JCA provider singleton, intended to prevent memory leaks by ensuring a single instance is loaded at all times.
Size-bounded input stream.
Byte utilities.
Cached object.
Caching JWKSetSource.
JWK set cache refresh completed event.
JWK set cache refresh initiated event.
JWK set cache refresh timed out event.
Unable to refresh the JWK set cache event.
Waiting for a JWK set cache refresh to complete on another thread event.
Helper utilities for instantiating ciphers.
Clock skew aware interface.
Completable JSON Web Signature (JWS) object signing.
Composite key used in AES/CBC/PKCS5Padding/HMAC-SHA2 encryption.
Compression algorithm name, represents the zip header parameter in JSON Web Encryption (JWE) objects.
Concatenation Key Derivation Function (KDF).
Configurable processor of unsecured (plain), JWS and JWE objects.
Configurable JSON Web Signature (JWS) minter.
Configurable processor of unsecured (plain), signed and encrypted JSON Web Tokens (JWT).
Array utilities.
Generic container of items of any type.
JWE content encryption / decryption provider.
JSON Web Signature (JWS) verifier or JSON Web Encryption (JWE) decrypter that supports processing and / or deferral of critical (crit) header parameters.
Critical (crit) header parameters deferral policy.
Cryptographic curve.
Curve based JSON Web Key (JWK).
Deprecated.
Date utilities.
Default JOSE header "typ" (type) parameter verifier.
Default processor of unsecured (plain), JWS and JWE objects.
Default JSON Web Encryption (JWE) decrypter factory.
Deprecated.
A factory to create JWS signers from a JWK instance based on the key type.
Default JSON Web Signature (JWS) verifier factory.
A JWT claims verifier implementation.
Default processor of unsecured (plain), signed and encrypted JSON Web Tokens (JWTs).
The default retriever of resources specified by HTTP(S) or file based URL.
Deflate (RFC 1951) helper methods, intended for use by JWE encrypters and decrypters.
Deflate (RFC 1951) utilities.
The base abstract class for direct encrypters and decrypters of JWE objects with a shared symmetric key.
Direct decrypter of JWE objects with a shared symmetric key.
Direct encrypter of JWE objects with a shared symmetric key.
Elliptic curve checks.
Elliptic Curve Diffie-Hellman key agreement functions and utilities.
Enumeration of the Elliptic Curve Diffie-Hellman Ephemeral Static algorithm modes.
Elliptic Curve Diffie-Hellman One-Pass Unified Model (ECDH-1PU) key agreement functions and utilities.
The base abstract class for Elliptic Curve Diffie-Hellman One-Pass Unified Model encrypters and decrypters of JWE objects.
Elliptic Curve Diffie-Hellman decrypter of JWE objects for curves using an EC JWK.
Elliptic Curve Diffie-Hellman encrypter of JWE objects for curves using an EC JWK.
Elliptic Curve Diffie-Hellman decrypter of JWE objects for curves using an OKP JWK.
Elliptic Curve Diffie-Hellman encrypter of JWE objects for curves using an OKP JWK.
The base abstract class for Elliptic Curve Diffie-Hellman encrypters and decrypters of JWE objects.
Elliptic Curve Diffie-Hellman decrypter of JWE objects for curves using EC JWK keys.
Elliptic Curve Diffie-Hellman encrypter of JWE objects for curves using EC JWK keys.
Elliptic Curve Digital Signature Algorithm (ECDSA) functions and utilities.
The base abstract class for Elliptic Curve Digital Signature Algorithm (ECDSA) signers and validators of JWS objects.
Elliptic Curve Digital Signature Algorithm (ECDSA) signer of JWS objects.
Elliptic Curve Digital Signature Algorithm (ECDSA) verifier of JWS objects.
Public and private Elliptic Curve JSON Web Key (JWK).
Builder for constructing Elliptic Curve JWKs.
Elliptic Curve (EC) JSON Web Key (JWK) generator.
Elliptic curve parameter table.
Ed25519 signer of JWS objects.
Ed25519 verifier of JWS objects.
The base abstract class for Edwards-curve Digital Signature Algorithm (EdDSA) signers and validators of JWS objects.
Encrypted JSON Web Token (JWT).
Encryption method name, represents the enc header parameter in JSON Web Encryption (JWE) objects.
Encryption method family.
Source and context aware event.
Listener of untyped Events.
The base abstract class for unsecured (alg=none), JSON Web Signature (JWS) and JSON Web Encryption (JWE) headers.
JSON Web Signature (JWS) and JSON Web Encryption (JWE) header parameter names.
Health report.
Health report listener interface.
Health status.
Static methods for Hash-based Message Authentication Codes (HMAC).
JSON Web Key (JWK) source backed by an immutable JWK set.
JSON Web Key (JWK) source backed by an immutable secret.
Integer overflow exception.
Integer utilities.
Input / output utilities.
Interface for a Java Cryptography Architecture (JCA) aware object, intended for setting a JCA provider and secure random generator.
Java Cryptography Architecture (JCA) context, consisting of a JCA provider and secure random generator.
Java Cryptography Architecture (JCA) support helper.
Javascript Object Signing and Encryption (JOSE) exception.
JOSE object / header matcher.
Builder for constructing JOSE matchers.
The base abstract class for JSON Web Signature (JWS) secured, JSON Web Encryption (JWE) secured and unsecured (plain / alg=none) objects serialisable to compact encoding.
The base abstract class for JSON Web Signature (JWS) secured and JSON Web Encryption (JWE) secured objects serialisable to JSON.
JOSE object type, represents the typ header parameter in unsecured, JSON Web Signature (JWS) and JSON Web Encryption (JWE) objects.
JOSE object type (header "typ" parameter) verifier.
Interface for parsing and processing unsecured (plain), JWS and JWE objects.
JOSE processor configuration.
JavaScript Object Signing and Encryption (JOSE) provider.
JSON array helper methods.
JSON object helper methods.
Provides JSON serialization of the JOSE Object.
JSON string helper methods.
JSON Web Encryption (JWE) algorithm name, represents the alg header parameter in JWE objects.
JWE algorithm family.
The cryptographic parts of a JSON Web Encryption (JWE) object.
JSON Web Encryption (JWE) decrypter.
JSON Web Encryption (JWE) decrypter factory.
Key selector for decrypting JWE objects, where the key candidates are retrieved from a JSON Web Key (JWK) source.
JSON Web Encryption (JWE) encrypter.
JSON Web Encryption (JWE) header.
Builder for constructing JSON Web Encryption (JWE) headers.
JWE header validation.
Java Cryptography Architecture (JCA) context intended specifically for JSON Web Encryption (JWE) providers.
Interface for selecting key candidates for decrypting a JSON Web Encryption (JWE) object.
JSON Web Encryption (JWE) secured object with compact serialisation.
Enumeration of the states of a JSON Web Encryption (JWE) secured object.
JSON Web Encryption (JWE) secured object with JSON serialisation.
Individual recipient in a JWE object serialisable to JSON.
JSON Web Encryption (JWE) provider.
The base abstract class for JSON Web Keys (JWKs).
JSON Web Key (JWK) related exception.
JWKGenerator<T extends JWK>
Abstract JWK generator.
JSON Web Key (JWK) matcher.
Builder for constructing JWK matchers.
JSON Web Key (JWK) parameter names.
A security context that contains JSON Web Keys (JWK).
A JWKSource backed by keys found in the JWKSecurityContext.
Selects (filters) one or more JSON Web Keys (JWKs) from a JWK set.
JSON Web Key (JWK) set.
JSON Web Key (JWK) set based JWK source.
Deprecated.
Evaluates whether a JWK set cache requires refreshing.
JWK set parse exception, in the context of JWK set retrieval.
JWK set retrieval exception, due to a network issue or the remote server being unavailable.
JSON Web Key (JWK) set source.
Decorates a JWKSetSource with health status reporting.
Wraps a JWKSetSource to provide convenient decoration by means of subclassing.
JWK set unavailable exception.
Deprecated.
JSON Web Key (JWK) source.
JWKSource builder.
JWK source with optional failover.
JSON Web Signature (JWS) algorithm name, represents the alg header parameter in JWS objects.
JWS algorithm family.
A JWSKeySelector that expects an algorithm from a specified algorithm family.
JSON Web Signature (JWS) header.
Builder for constructing JSON Web Signature (JWS) headers.
Interface for selecting key candidates for verifying a JSON Web Signature (JWS) object.
JSON Web Signature (JWS) minter configuration.
JSON Web Signature (JWS) secured object with compact serialisation.
Enumeration of the states of a JSON Web Signature (JWS) secured object.
JSON Web Signature (JWS) secured object with JSON serialisation.
Individual signature in a JWS secured object serialisable to JSON.
Enumeration of the states of a JSON Web Signature (JWS) secured object serialisable to JSON.
JSON Web Signature (JWS) provider
JSON Web Signature (JWS) signer.
JSON Web Signature (JWS) signer factory to create a signer out of a JSON Web Key (JWK).
Marker interface for a JSON Web Signature (JWS) signer option.
Key selector for verifying JWS objects, where the key candidates are retrieved from a JSON Web Key (JWK) source.
JSON Web Signature (JWS) verifier.
JSON Web Signature (JWS) verifier factory.
JSON Web Token (JWT) interface.
JSON Web Token (JWT) claim names.
JSON Web Token (JWT) claims set.
Builder for constructing JSON Web Token (JWT) claims sets.
Interface for selecting key candidates for processing a signed JWT which provides access to the JWT claims set in addition to the JWS header.
Generic JWT claims set type transformer.
JWT claims set verifier.
Parser for unsecured (plain), signed and encrypted JSON Web Tokens (JWTs).
Interface for parsing and processing unsecured (plain), signed and encrypted JSON Web Tokens (JWTs).
JWT processor configuration.
Key converter.
Key exception.
Key length exception.
Enumeration of key operations.
Key revocation.
Key revocation reason.
Key source exception.
Key type.
Key type exception.
Enumeration of public key uses.
JCA key utilities.
Legacy implementation of a Concatenation Key Derivation Function (KDF) for use by the deprecated A128CBC+HS256 and A256CBC+HS512 encryption methods.
The base abstract class for Message Authentication Code (MAC) signers and verifiers of JWS objects.
Message Authentication Code (MAC) signer of JWS objects.
Message Authentication Code (MAC) verifier of JWS objects.
The base abstract class for multi-recipient encrypters and decrypters of JWE objects with a shared symmetric key.
Multi-recipient decrypter of JWE objects.
Multi-recipient encrypter of JWE objects.
Octet key pair JSON Web Key (JWK), used to represent Edwards-curve keys.
Builder for constructing Octet Key Pair JWKs.
Octet Key Pair (OKP) JSON Web Key (JWK) generator.
Octet sequence JSON Web Key (JWK), used to represent symmetric keys.
Builder for constructing octet sequence JWKs.
Octet sequence JSON Web Key (JWK) generator.
Utilities for processing JOSE options.
JWKSetSource with outage tolerance to handle temporary network issues and endpoint downtime, potentially running into minutes or hours.
JWK set source outage event.
A pair of two objects.
The base abstract class for password-based encrypters and decrypters of JWE objects.
Password-based decrypter of JWE objects.
Password-based encrypter of JWE objects.
Password lookup interface.
Payload of an unsecured (plain), JSON Web Signature (JWS) or JSON Web Encryption (JWE) object.
Enumeration of the original data types used to create a Payload.
Generic payload type transformer.
Password-Based Key Derivation Function 2 (PBKDF2) utilities.
Unsecured (alg=none) JOSE header.
Builder for constructing unsecured (plain) headers.
Unsecured (plain) JSON Web Token (JWT).
Unsecured (plain / alg=none) JOSE object with compact serialisation.
Pseudo-Random Function (PRF) parameters, intended for use in the Password- Based Key Derivation Function 2 (PBKDF2).
JWKSetSource that limits the number of requests in a time period.
Rate limited event.
Rate limit reached exception.
Caching JWKSetSource that refreshes the JWK set prior to its expiration.
JWK set refresh not scheduled event.
New JWK set refresh scheduled event.
Scheduled JWK set cache refresh completed event.
Scheduled JWK refresh failed event.
Scheduled JWK set cache refresh initiated event.
Unable to refresh the JWK set cache ahead of expiration event.
Deprecated.
Construct a JWKSource using JWKSourceBuilder.
Remote key source exception.
Enumeration of JOSE algorithm implementation requirements.
Resource with optional associated content type.
Retriever of resources specified by URL.
Retriever of resources specified by URL which permits setting of HTTP connect and read timeouts, size limit and headers.
JWKSetSource with with retry capability to work around transient network issues.
Retrial event.
RSAES OAEP methods for Content Encryption Key (CEK) encryption and decryption.
RSAES OAEP with SHA-256, SHA-384 and SHA-512 methods for Content Encryption Key (CEK) encryption and decryption.
RSAES-PKCS1-V1_5 methods for Content Encryption Key (CEK) encryption and decryption.
The base abstract class for RSA encrypters and decrypters of JWE objects.
RSA decrypter of JWE objects.
RSA encrypter of JWE objects.
Public and private RSA JSON Web Key (JWK).
Builder for constructing RSA JWKs.
Other Primes Info, represents the private oth parameter of a RSA JWK.
RSA JSON Web Key (JWK) generator.
RSA JWK conversion utility.
RSA-SSA functions and utilities.
The base abstract class for RSA signers and verifiers of JWS objects.
RSA Signature-Scheme-with-Appendix (RSASSA) signer of JWS objects.
RSA Signature-Scheme-with-Appendix (RSASSA) verifier of JWS objects.
Secret (symmetric) JSON Web Key (JWK).
Security context.
Signed JSON Web Token (JWT).
Simple map-based security context.
A JWSKeySelector that always returns the same Key.
UTF-8 is the standard charset in JOSE.
JSON Web Key (JWK) thumbprint URI.
Thumbprint utilities.
JSON Web Signature (JWS) or JSON Web Encryption (JWE) unprotected header (in a JSON serialisation).
Builder for constructing an unprotected JWS or JWE header.
JWK set source that loads the keys from a URL, without health status reporting.
JSON Web Signature (JWS) option to prompt the user to authenticate in order to complete the signing operation.
Curve25519 Elliptic Curve Diffie-Hellman decrypter of JWE objects.
Curve25519 Elliptic Curve Diffie-Hellman encrypter of JWE objects.
X.509 certificate chain utilities.
X.509 certificate utilities.
This class defines the XChaCha20 stream cipher as well as the use of the Poly1305 authenticator.