ddf.security.encryption.impl

Class EncryptionServiceImpl

java.lang.Object

ddf.security.encryption.impl.EncryptionServiceImpl

All Implemented Interfaces:

EncryptionService, org.apache.wss4j.common.crypto.PasswordEncryptor

public class EncryptionServiceImpl
extends Object
implements EncryptionService

Constructor Summary

Constructors

Constructor and Description
EncryptionServiceImpl()

Method Summary

Modifier and Type	Method and Description
String	decrypt(String encryptedValue) Decrypts a plain text value using Keyczar
String	decryptValue(String wrappedEncryptedValue) Decrypts a wrapped encrypted value in the "ENC(*)" format.
String	encrypt(String plainTextValue) Encrypts a plain text value using Keyczar.
String	unwrapEncryptedValue(String wrappedEncryptedValue) Unwraps an encrypted value in the "ENC(*)" format.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncryptionServiceImpl

public EncryptionServiceImpl()

Method Detail

encrypt

public String encrypt(String plainTextValue)

Encrypts a plain text value using Keyczar.

Specified by:

encrypt in interface org.apache.wss4j.common.crypto.PasswordEncryptor

Parameters:

plainTextValue - The value to encrypt.

decrypt

public String decrypt(String encryptedValue)

Decrypts a plain text value using Keyczar

Specified by:

decrypt in interface org.apache.wss4j.common.crypto.PasswordEncryptor

Parameters:

encryptedValue - The value to decrypt.

decryptValue

public String decryptValue(String wrappedEncryptedValue)

Decrypts a wrapped encrypted value in the "ENC(*)" format. Inputs that are not wrapped are returned as a no-op.

 One can encrypt passwords using the security:encrypt console command.

 user@local>security:encrypt secret
 c+GitDfYAMTDRESXSDDsMw==

 A wrapped encrypted password is wrapped in ENC() as follows: ENC(HsOcGt8seSKc34sRUYpakQ==)

 

Specified by:

decryptValue in interface EncryptionService

Parameters:

wrappedEncryptedValue - a string of the form "ENC(", followed by an encrypted value, and terminated with ")".

Returns:

a decryption of the given value after removing the leading "ENC(" and trailing ")".

unwrapEncryptedValue

public String unwrapEncryptedValue(String wrappedEncryptedValue)

Unwraps an encrypted value in the "ENC(*)" format. Inputs that are not wrapped are returned as a no-op.

Given a string that starts with 'ENC(' and ends with ')', returns the in-between substring. This method is meant to remove the wrapping notation for encrypted values, typically passwords.

If the input is a password and is not in the form ENC(my-encrypted-password), we assume the password is not encrypted.

Specified by:

unwrapEncryptedValue in interface EncryptionService

Parameters:

wrappedEncryptedValue - The wrapped encrypted value, in the form 'ENC(my-encrypted-value)'.

Returns:

The value within the parenthesis.