org.jmrtd

Class AESSecureMessagingWrapper

java.lang.Object

org.jmrtd.SecureMessagingWrapper

org.jmrtd.AESSecureMessagingWrapper

All Implemented Interfaces:

Serializable, net.sf.scuba.smartcards.APDUWrapper

public class AESSecureMessagingWrapper
extends SecureMessagingWrapper
implements Serializable

An AES secure messaging wrapper for APDUs. Based on TR-SAC.

Version:

$Revision: $

Author:

Martijn Oostdijk ([email protected])

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
AESSecureMessagingWrapper(SecretKey ksEnc, SecretKey ksMac, long ssc) Constructs a secure messaging wrapper based on the secure messaging session keys and the initial value of the send sequence counter.

Method Summary

Modifier and Type	Method and Description
SecretKey	getEncryptionKey() Gets the shared key for encrypting APDU payloads.
SecretKey	getMACKey() Get the shared key for computing message authentication codes over APDU payloads.
long	getSendSequenceCounter() Gets the current value of the send sequence counter.
String	toString()
net.sf.scuba.smartcards.ResponseAPDU	unwrap(net.sf.scuba.smartcards.ResponseAPDU responseAPDU) Unwraps the buffer of a response APDU.
net.sf.scuba.smartcards.CommandAPDU	wrap(net.sf.scuba.smartcards.CommandAPDU commandAPDU) Wraps the apdu buffer capdu of a command apdu.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AESSecureMessagingWrapper

public AESSecureMessagingWrapper(SecretKey ksEnc,
                                 SecretKey ksMac,
                                 long ssc)
                          throws GeneralSecurityException

Constructs a secure messaging wrapper based on the secure messaging session keys and the initial value of the send sequence counter. Used in BAC and EAC 1.

Parameters:

ksEnc - the session key for encryption

ksMac - the session key for macs

ssc - the initial value of the send sequence counter

Throws:

GeneralSecurityException - when the available JCE providers cannot provide the necessary cryptographic primitives

Method Detail

getSendSequenceCounter

public long getSendSequenceCounter()

Gets the current value of the send sequence counter.

Specified by:

getSendSequenceCounter in class SecureMessagingWrapper

Returns:

the current value of the send sequence counter.

wrap

public net.sf.scuba.smartcards.CommandAPDU wrap(net.sf.scuba.smartcards.CommandAPDU commandAPDU)

Wraps the apdu buffer capdu of a command apdu. As a side effect, this method increments the internal send sequence counter maintained by this wrapper.

Specified by:

wrap in interface net.sf.scuba.smartcards.APDUWrapper

Parameters:

commandAPDU - buffer containing the command apdu.

Returns:

length of the command apdu after wrapping.

unwrap

public net.sf.scuba.smartcards.ResponseAPDU unwrap(net.sf.scuba.smartcards.ResponseAPDU responseAPDU)

Unwraps the buffer of a response APDU.

Specified by:

unwrap in interface net.sf.scuba.smartcards.APDUWrapper

Parameters:

responseAPDU - the response APDU

Returns:

a new byte array containing the unwrapped buffer

getEncryptionKey

public SecretKey getEncryptionKey()

Description copied from class: SecureMessagingWrapper

Gets the shared key for encrypting APDU payloads.

Specified by:

getEncryptionKey in class SecureMessagingWrapper

Returns:

the encryption key

getMACKey

public SecretKey getMACKey()

Description copied from class: SecureMessagingWrapper

Get the shared key for computing message authentication codes over APDU payloads.

Specified by:

getMACKey in class SecureMessagingWrapper

Returns:

the MAC key

toString

public String toString()

Overrides:

toString in class Object