Java EncryptionKey.getEType方法代码示例

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
public static KerberosTicket credsToTicket(Credentials serviceCreds) {
    EncryptionKey sessionKey =  serviceCreds.getSessionKey();
    return new KerberosTicket(
        serviceCreds.getEncoded(),
        new KerberosPrincipal(serviceCreds.getClient().getName()),
        new KerberosPrincipal(serviceCreds.getServer().getName(),
                            KerberosPrincipal.KRB_NT_SRV_INST),
        sessionKey.getBytes(),
        sessionKey.getEType(),
        serviceCreds.getFlags(),
        serviceCreds.getAuthTime(),
        serviceCreds.getStartTime(),
        serviceCreds.getEndTime(),
        serviceCreds.getRenewTill(),
        serviceCreds.getClientAddresses());
}
 

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
/**
 * Constructor used by client to generate premaster secret.
 *
 * Client randomly creates a pre-master secret and encrypts it
 * using the Kerberos session key; only the server can decrypt
 * it, using the session key available in the service ticket.
 *
 * @param protocolVersion used to set preMaster[0,1]
 * @param generator random number generator for generating premaster secret
 * @param sessionKey Kerberos session key for encrypting premaster secret
 */
KerberosPreMasterSecret(ProtocolVersion protocolVersion,
    SecureRandom generator, EncryptionKey sessionKey) throws IOException {

    if (sessionKey.getEType() ==
        EncryptedData.ETYPE_DES3_CBC_HMAC_SHA1_KD) {
        throw new IOException(
           "session keys with des3-cbc-hmac-sha1-kd encryption type " +
           "are not supported for TLS Kerberos cipher suites");
    }

    this.protocolVersion = protocolVersion;
    preMaster = generatePreMaster(generator, protocolVersion);

    // Encrypt premaster secret
    try {
        EncryptedData eData = new EncryptedData(sessionKey, preMaster,
            KeyUsage.KU_UNKNOWN);
        encrypted = eData.getBytes();  // not ASN.1 encoded.

    } catch (KrbException e) {
        throw (SSLKeyException)new SSLKeyException
            ("Kerberos premaster secret error").initCause(e);
    }
}
 

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
/**
 * Constructor used by client to generate premaster secret.
 *
 * Client randomly creates a pre-master secret and encrypts it
 * using the Kerberos session key; only the server can decrypt
 * it, using the session key available in the service ticket.
 *
 * @param protocolVersion used to set preMaster[0,1]
 * @param generator random number generator for generating premaster secret
 * @param sessionKey Kerberos session key for encrypting premaster secret
 */
KerberosPreMasterSecret(ProtocolVersion protocolVersion,
        SecureRandom generator, EncryptionKey sessionKey) throws IOException {

    if (sessionKey.getEType() ==
            EncryptedData.ETYPE_DES3_CBC_HMAC_SHA1_KD) {
        throw new IOException(
                "session keys with des3-cbc-hmac-sha1-kd encryption type " +
                        "are not supported for TLS Kerberos cipher suites");
    }

    this.protocolVersion = protocolVersion;
    preMaster = generatePreMaster(generator, protocolVersion);

    // Encrypt premaster secret
    try {
        EncryptedData eData = new EncryptedData(sessionKey, preMaster,
                KeyUsage.KU_UNKNOWN);
        encrypted = eData.getBytes();  // not ASN.1 encoded.

    } catch (KrbException e) {
        throw (SSLKeyException)new SSLKeyException
                ("Kerberos premaster secret error").initCause(e);
    }
}
 

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
/**
 * Constructs a KeyImpl from a password.
 *
 * @param principal the principal from which to derive the salt
 * @param password the password that should be used to compute the
 * key.
 * @param algorithm the name for the algorithm that this key wil be
 * used for. This parameter may be null in which case "DES" will be
 * assumed.
 */
public KeyImpl(KerberosPrincipal principal,
               char[] password,
               String algorithm) {

    try {
        PrincipalName princ = new PrincipalName(principal.getName());
        EncryptionKey key =
            new EncryptionKey(password, princ.getSalt(), algorithm);
        this.keyBytes = key.getBytes();
        this.keyType = key.getEType();
    } catch (KrbException e) {
        throw new IllegalArgumentException(e.getMessage());
    }
}
 

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
private void readObject(ObjectInputStream ois)
            throws IOException, ClassNotFoundException {
    try {
        EncryptionKey encKey = new EncryptionKey(new
                                 DerValue((byte[])ois.readObject()));
        keyType = encKey.getEType();
        keyBytes = encKey.getBytes();
    } catch (Asn1Exception ae) {
        throw new IOException(ae.getMessage());
    }
}
 

import sun.security.krb5.EncryptionKey; //导入方法依赖的package包/类
public byte[] decrypt(EncryptionKey clientPrivateKey) throws KdcErrException, KrbApErrException, KrbCryptoException{
	if (clientPrivateKey.getEType() != this.encryptionType) {
		throw new KrbCryptoException("Encryption type of the provided key (" + clientPrivateKey.getEType() + ") does not match that of the data (" + encryptionType + ").");
	}
	EncryptedData pacCredentialEncData = new EncryptedData(clientPrivateKey.getEType(), clientPrivateKey.getKeyVersionNumber(), pacCredentialEncBytes);
	return pacCredentialEncData.decrypt(clientPrivateKey, PacConstants.KERB_NON_KERB_SALT);
}