All Classes and Interfaces
Class
Description
Additional authenticated data (AAD).
Abstract retrieval of resources by URL with HTTP timeout and entity size
restrictions.
Action required for JWS completion.
AES/CBC/PKCS5Padding and AES/CBC/PKCS5Padding/HMAC-SHA2 encryption and
decryption methods.
The base abstract class for AES and AES GCM key wrap encrypters and
decrypters of
JWE objects
.AES and AES GCM key wrap decrypter of
JWE
objects
.AES and AES GCM key wrap encrypter of
JWE
objects
.AES/GSM/NoPadding encryption and decryption methods.
AES GCM methods for Content Encryption Key (CEK) encryption and
decryption.
AES key Wrapping methods for Content Encryption Key (CEK) encryption and
decryption.
The base class for algorithm names, with optional implementation
requirement.
Utility for creating
AlgorithmParameters
objects with
an optional JCA provider.Algorithm support messages, intended for JOSE exceptions.
JSON Web Signature (JWS) option to allow weak RSA keys that are shorter than
2048
bits
.Array utilities.
Asymmetric (pair) JSON Web Key (JWK).
Authenticated cipher text.
Bad JSON Object Signing and Encryption (JOSE) exception.
Bad JSON Web Encryption (JWE) exception.
Bad JSON Web Signature (JWS) exception.
Bad JSON Web Token (JWT) exception.
Base64-encoded object.
Base64URL-encoded object.
The base abstract class for JSON Web Encryption (JWE) encrypters and
decrypters.
The base abstract class for JSON Web Signature (JWS) signers and verifiers.
Big integer utilities.
BouncyCastle FIPS JCA provider singleton, intended to prevent memory leaks
by ensuring a single instance is loaded at all times.
BouncyCastle JCA provider singleton, intended to prevent memory leaks by
ensuring a single instance is loaded at all times.
Size-bounded input stream.
Byte utilities.
Cached object.
Caching JWKSetSource.
JWK set cache refresh completed event.
JWK set cache refresh initiated event.
JWK set cache refresh timed out event.
Unable to refresh the JWK set cache event.
Waiting for a JWK set cache refresh to complete on another thread
event.
Helper utilities for instantiating ciphers.
Clock skew aware interface.
Completable JSON Web Signature (JWS) object signing.
Composite key used in AES/CBC/PKCS5Padding/HMAC-SHA2 encryption.
Compression algorithm name, represents the
zip
header parameter in
JSON Web Encryption (JWE) objects.Concatenation Key Derivation Function (KDF).
Configurable JSON Web Signature (JWS) minter.
Array utilities.
Generic container of items of any type.
JWE content encryption / decryption provider.
JSON Web Signature (JWS) verifier or JSON Web Encryption (JWE) decrypter
that supports processing and / or deferral of critical (
crit
) header
parameters.Critical (
crit
) header parameters deferral policy.Cryptographic curve.
Curve based JSON Web Key (JWK).
Deprecated.
Date utilities.
Default JOSE header "typ" (type) parameter verifier.
Default JSON Web Encryption (JWE) decrypter factory.
Deprecated.
see RemoteJWKSet.
Default minter of
JSON Web Signature (JWS) objects
and
signed JSON Web Tokens
(JWTs).A factory to create JWS signers from a JWK instance based on the
key type.
Default JSON Web Signature (JWS) verifier factory.
A
JWT claims verifier
implementation.The default retriever of resources specified by HTTP(S) or file based URL.
Deflate (RFC 1951) helper methods, intended for use by JWE encrypters and
decrypters.
Deflate (RFC 1951) utilities.
The base abstract class for direct encrypters and decrypters of
JWE objects
with a shared symmetric key.Direct decrypter of
JWE objects
with a
shared symmetric key.Direct encrypter of
JWE objects
with a
shared symmetric key.Elliptic curve checks.
Elliptic Curve Diffie-Hellman key agreement functions and utilities.
Enumeration of the Elliptic Curve Diffie-Hellman Ephemeral Static
algorithm modes.
Elliptic Curve Diffie-Hellman One-Pass Unified Model (ECDH-1PU) key
agreement functions and utilities.
The base abstract class for Elliptic Curve Diffie-Hellman One-Pass Unified
Model encrypters and decrypters of
JWE
objects
.Elliptic Curve Diffie-Hellman decrypter of
JWE objects
for curves using an EC JWK.Elliptic Curve Diffie-Hellman encrypter of
JWE objects
for curves using an EC JWK.Elliptic Curve Diffie-Hellman decrypter of
JWE objects
for curves using an OKP JWK.Elliptic Curve Diffie-Hellman encrypter of
JWE objects
for curves using an OKP JWK.The base abstract class for Elliptic Curve Diffie-Hellman encrypters and
decrypters of
JWE objects
.Elliptic Curve Diffie-Hellman decrypter of
JWE objects
for curves using EC JWK
keys.Elliptic Curve Diffie-Hellman encrypter of
JWE objects
for curves using EC JWK keys.Elliptic Curve Digital Signature Algorithm (ECDSA) functions and utilities.
The base abstract class for Elliptic Curve Digital Signature Algorithm
(ECDSA) signers and validators of
JWS
objects
.Elliptic Curve Digital Signature Algorithm (ECDSA) signer of
JWS objects
.Elliptic Curve Digital Signature Algorithm (ECDSA) verifier of
JWS objects
.Public and private
Elliptic Curve
JSON Web Key (JWK).Builder for constructing Elliptic Curve JWKs.
Elliptic Curve (EC) JSON Web Key (JWK) generator.
Elliptic curve parameter table.
Ed25519 signer of
JWS objects
.Ed25519 verifier of
JWS objects
.The base abstract class for Edwards-curve Digital Signature Algorithm
(EdDSA) signers and validators of
JWS
objects
.Encrypted JSON Web Token (JWT).
Encryption method name, represents the
enc
header parameter in JSON
Web Encryption (JWE) objects.Encryption method family.
Source and context aware event.
Listener of untyped Events.
Expires JSON Web Token (JWT) exception.
The base abstract class for unsecured (
alg=none
), JSON Web Signature
(JWS) and JSON Web Encryption (JWE) headers.JSON Web Signature (JWS) and JSON Web Encryption (JWE) header parameter
names.
Health report.
Health report listener interface.
Health status.
Static methods for Hash-based Message Authentication Codes (HMAC).
JSON Web Key (JWK) source backed by an immutable JWK set.
JSON Web Key (JWK) source backed by an immutable secret.
Integer overflow exception.
Integer utilities.
Input / output utilities.
Interface for a Java Cryptography Architecture (JCA) aware object, intended
for setting a JCA
provider
and
secure random generator
.Java Cryptography Architecture (JCA) context, consisting of a JCA
provider
and
secure random generator
.Java Cryptography Architecture (JCA) support helper.
Javascript Object Signing and Encryption (JOSE) exception.
JOSE object / header matcher.
Builder for constructing JOSE matchers.
The base abstract class for JSON Web Signature (JWS) secured, JSON Web
Encryption (JWE) secured and unsecured (plain /
alg=none
) objects
serialisable to compact encoding.The base abstract class for JSON Web Signature (JWS) secured and JSON Web
Encryption (JWE) secured objects serialisable to JSON.
JOSE object type, represents the
typ
header parameter in unsecured,
JSON Web Signature (JWS) and JSON Web Encryption (JWE) objects.JOSE object type (header "typ" parameter) verifier.
JOSE processor configuration.
JavaScript Object Signing and Encryption (JOSE) provider.
JSON array helper methods.
JSON object helper methods.
Provides JSON serialization of the JOSE Object.
JSON string helper methods.
JSON Web Encryption (JWE) algorithm name, represents the
alg
header
parameter in JWE objects.JWE algorithm family.
The cryptographic parts of a JSON Web Encryption (JWE) object.
JSON Web Encryption (JWE) decrypter.
JSON Web Encryption (JWE) decrypter factory.
Key selector for decrypting JWE objects, where the key candidates are
retrieved from a
JSON Web Key (JWK) source
.JSON Web Encryption (JWE) encrypter.
JSON Web Encryption (JWE) header.
Builder for constructing JSON Web Encryption (JWE) headers.
JWE header validation.
Java Cryptography Architecture (JCA) context intended specifically for
JSON Web Encryption (JWE) providers.
Interface for selecting key candidates for decrypting a JSON Web Encryption
(JWE) object.
JSON Web Encryption (JWE) secured object with
compact
serialisation.
Enumeration of the states of a JSON Web Encryption (JWE) secured
object.
JSON Web Encryption (JWE) secured object with
JSON
serialisation.
Individual recipient in a JWE object serialisable to JSON.
JSON Web Encryption (JWE) provider.
The base abstract class for JSON Web Keys (JWKs).
JSON Web Key (JWK) related exception.
Abstract JWK generator.
JSON Web Key (JWK) matcher.
Builder for constructing JWK matchers.
JSON Web Key (JWK) parameter names.
A security context that contains JSON Web Keys (JWK).
A
JWKSource
backed by keys found in the JWKSecurityContext
.Selects (filters) one or more JSON Web Keys (JWKs) from a JWK set.
JSON Web Key (JWK) set.
JSON Web Key (JWK) set based JWK source.
Deprecated.
see RemoteJWKSet.
Evaluates whether a JWK set cache requires refreshing.
JWK set parse exception, in the context of JWK set retrieval.
JWK set retrieval exception, due to a network issue or the remote server
being unavailable.
JSON Web Key (JWK) set source.
Decorates a JWKSetSource with health status reporting.
Wraps a JWKSetSource to provide convenient decoration by means
of subclassing.
JWK set unavailable exception.
Deprecated.
see RemoteJWKSet.
JSON Web Key (JWK) source.
JWKSource builder.
JWK source with optional failover.
JSON Web Signature (JWS) algorithm name, represents the
alg
header
parameter in JWS objects.JWS algorithm family.
A
JWSKeySelector
that expects an algorithm from a specified
algorithm family.JSON Web Signature (JWS) header.
Builder for constructing JSON Web Signature (JWS) headers.
Interface for selecting key candidates for verifying a JSON Web Signature
(JWS) object.
Interface for minting
JSON Web Signature (JWS) objects
and
signed JSON Web Tokens
(JWTs).JSON Web Signature (JWS) minter configuration.
JSON Web Signature (JWS) secured object with
compact
serialisation.
Enumeration of the states of a JSON Web Signature (JWS) secured
object.
JSON Web Signature (JWS) secured object with
JSON
serialisation.
Individual signature in a JWS secured object serialisable to JSON.
Enumeration of the states of a JSON Web Signature (JWS) secured
object serialisable to JSON.
JSON Web Signature (JWS) provider
JSON Web Signature (JWS) signer.
JSON Web Signature (JWS) signer factory to create a signer out of a JSON Web
Key (JWK).
Marker interface for a JSON Web Signature (JWS) signer option.
Key selector for verifying JWS objects, where the key candidates are
retrieved from a
JSON Web Key (JWK) source
.JSON Web Signature (JWS) verifier.
JSON Web Signature (JWS) verifier factory.
JSON Web Token (JWT) interface.
JSON Web Token (JWT) claim names.
JSON Web Token (JWT) claims set.
Builder for constructing JSON Web Token (JWT) claims sets.
Interface for selecting key candidates for processing a signed JWT which
provides access to the JWT claims set in addition to the JWS header.
Generic JWT claims set type transformer.
JWT claims set verifier.
Parser for unsecured (plain), signed and encrypted JSON Web Tokens (JWTs).
JWT processor configuration.
Key converter.
Key exception.
Key length exception.
Enumeration of key operations.
Key revocation.
Key revocation reason.
Key source exception.
Key type.
Key type exception.
Enumeration of public key uses.
JCA key utilities.
Legacy implementation of a Concatenation Key Derivation Function (KDF) for
use by the deprecated
A128CBC+HS256
and A256CBC+HS512
encryption methods.The base abstract class for Message Authentication Code (MAC) signers and
verifiers of
JWS objects
.Message Authentication Code (MAC) signer of
JWS objects
.Message Authentication Code (MAC) verifier of
JWS objects
.The base abstract class for multi-recipient encrypters and decrypters of
JWE objects
with a shared symmetric
key.Multi-recipient decrypter of
JWE objects
.Multi-recipient encrypter of
JWE
objects
.Octet key pair
JSON Web Key (JWK), used to represent
Edwards-curve keys.Builder for constructing Octet Key Pair JWKs.
Octet Key Pair (OKP) JSON Web Key (JWK) generator.
Octet sequence
JSON Web Key (JWK), used to represent
symmetric keys.Builder for constructing octet sequence JWKs.
Octet sequence JSON Web Key (JWK) generator.
Utilities for processing JOSE options.
JWKSetSource with outage tolerance to handle temporary network
issues and endpoint downtime, potentially running into minutes or hours.
JWK set source outage event.
A pair of two objects.
The base abstract class for password-based encrypters and decrypters of
JWE objects
.Password-based decrypter of
JWE objects
.Password-based encrypter of
JWE objects
.Password lookup interface.
Payload of an unsecured (plain), JSON Web Signature (JWS) or JSON Web
Encryption (JWE) object.
Enumeration of the original data types used to create a
Payload
.Generic payload type transformer.
Password-Based Key Derivation Function 2 (PBKDF2) utilities.
Unsecured (
alg=none
) JOSE header.Builder for constructing unsecured (plain) headers.
Unsecured (plain) JSON Web Token (JWT).
Unsecured (plain /
alg=none
) JOSE object with
compact
serialisation.Pseudo-Random Function (PRF) parameters, intended for use in the Password-
Based Key Derivation Function 2 (PBKDF2).
JWKSetSource that limits the number of requests in a time
period.
Rate limited event.
Rate limit reached exception.
Caching JWKSetSource that refreshes the JWK set prior to its
expiration.
JWK set refresh not scheduled event.
New JWK set refresh scheduled event.
Scheduled JWK set cache refresh completed event.
Scheduled JWK refresh failed event.
Scheduled JWK set cache refresh initiated event.
Unable to refresh the JWK set cache ahead of expiration event.
Deprecated.
Construct a JWKSource using JWKSourceBuilder.
Remote key source exception.
Enumeration of JOSE algorithm implementation requirements.
Resource with optional associated content type.
Retriever of resources specified by URL.
Retriever of resources specified by URL which permits setting of HTTP
connect and read timeouts, size limit and headers.
JWKSetSource with with retry capability to work around
transient network issues.
Retrial event.
RSAES OAEP methods for Content Encryption Key (CEK) encryption and
decryption.
RSAES OAEP with SHA-256, SHA-384 and SHA-512 methods for Content Encryption
Key (CEK) encryption and decryption.
RSAES-PKCS1-V1_5 methods for Content Encryption Key (CEK) encryption and
decryption.
The base abstract class for RSA encrypters and decrypters of
JWE objects
.RSA decrypter of
JWE objects
.RSA encrypter of
JWE objects
.Public and private
RSA
JSON Web Key (JWK).Builder for constructing RSA JWKs.
Other Primes Info, represents the private
oth
parameter of a
RSA JWK.RSA JSON Web Key (JWK) generator.
RSA JWK conversion utility.
RSA-SSA functions and utilities.
The base abstract class for RSA signers and verifiers of
JWS objects
.RSA Signature-Scheme-with-Appendix (RSASSA) signer of
JWS objects
.RSA Signature-Scheme-with-Appendix (RSASSA) verifier of
JWS objects
.Secret (symmetric) JSON Web Key (JWK).
Security context.
Signed JSON Web Token (JWT).
Simple map-based security context.
A
JWSKeySelector
that always returns the same Key
.UTF-8 is the standard charset in JOSE.
JSON Web Key (JWK) thumbprint URI.
Thumbprint utilities.
JSON Web Signature (JWS) or JSON Web Encryption (JWE) unprotected header
(in a JSON serialisation).
Builder for constructing an unprotected JWS or JWE header.
JWK set source that loads the keys from a
URL
, without health status
reporting.JSON Web Signature (JWS) option to prompt the user to authenticate in order
to complete the signing operation.
Curve25519 Elliptic Curve Diffie-Hellman decrypter of
JWE objects
.Curve25519 Elliptic Curve Diffie-Hellman encrypter of
JWE objects
.X.509 certificate chain utilities.
X.509 certificate utilities.
This class defines the XChaCha20 stream cipher as well as the use of the
Poly1305 authenticator.