Package io.helidon.security.tools.config

Class CryptUtil

java.lang.Object

io.helidon.security.tools.config.CryptUtil

public final class CryptUtil
extends java.lang.Object

Encryption utilities for secrets protection.

Method Summary

Modifier and Type	Method	Description
static java.lang.String	decryptRsa(java.security.Key key, java.lang.String encryptedBase64)	Decrypt using RSA (private or public key).
static java.lang.String	encryptAes(char[] masterPassword, java.lang.String secret)	Encrypt using AES, salted and seeded.
static java.lang.String	encryptRsa(java.security.Key key, java.lang.String secret)	Encrypt secret using RSA (private or public key).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

decryptRsa

public static java.lang.String decryptRsa(java.security.Key key,
                                          java.lang.String encryptedBase64)
                                   throws SecureConfigException

Decrypt using RSA (private or public key). Expects message encrypted with the other key.

Parameters:

key - private or public key to use to decrypt

encryptedBase64 - base64 encoded encrypted secret

Returns:

Secret value

Throws:

SecureConfigException - If any problem with decryption occurs

encryptRsa

public static java.lang.String encryptRsa(java.security.Key key,
                                          java.lang.String secret)
                                   throws SecureConfigException

Encrypt secret using RSA (private or public key).

Parameters:

key - private or public key to use to encrypt

secret - secret to encrypt

Returns:

base64 encoded encrypted bytes

Throws:

SecureConfigException - If any problem with encryption occurs

encryptAes

public static java.lang.String encryptAes(char[] masterPassword,
                                          java.lang.String secret)
                                   throws SecureConfigException

Encrypt using AES, salted and seeded.

Parameters:

masterPassword - master password

secret - secret to encrypt

Returns:

Encrypted value base64 encoded

Throws:

SecureConfigException - If any problem with encryption occurs