Package com.yahoo.security
@ExportPackage
package com.yahoo.security
- Author:
- bjorncs
-
ClassDescriptionAEAD cipher wrapper to hide the underlying crypto provider used.A small collection of utils for working on arrays of bytes.A
X509ExtendedKeyManagerthat reloads the certificate and private key from file regularly.Base58 encoding using the alphabet standardized by Bitcoin et al., which avoids the use of characters [0OIl] to avoid visual ambiguity.Base62 encoding which has the nice property that it does not feature any potential word/line-breaking characters, which means encoded strings can usually be selected in one go on web pages or in the terminal.Codec that enables easy conversion from an array of bytes to any numeric base in [2, 256) and back again, using a supplied custom alphabet.Implementation of RFC-5869 HMAC-based Extract-and-Expand Key Derivation Function (HKDF).Key formatRepresents a named key ID comprising an arbitrary (but length-limited) sequence of valid UTF-8 bytes.Utility methods for constructingX509ExtendedKeyManager.AX509ExtendedKeyManagerwhich can be updated with new certificate chain and private key while in use.AX509ExtendedTrustManagerwhich can be updated with new CA certificates while in use.A SealedSharedKey represents the public part of a secure one-way ephemeral key exchange.A SecretSharedKey represents a pairing of both the secret and public parts of a secure one-way ephemeral key exchange.Implements both the sender and receiver sides of a secure, anonymous one-way key generation and exchange protocol implemented using HPKE; a hybrid crypto scheme built around elliptic curves.Delegated resealing protocol for getting access to a shared secret key of a token whose private key we do not possess.Utility functions for comparing the contents of arrays without leaking information about the data contained within them via timing side-channels.Misc signature utilsA builder forSSLContext.A factory interface for creatingX509ExtendedKeyManager.A factory interface for creatingX509ExtendedTrustManager.AX509ExtendedTrustManagerthat accepts all server certificates.Utility methods for constructingX509ExtendedTrustManager.Wraps aX509Certificatewith itsPrivateKey.Variant ofBase64with the following modifications: -+is replaced by.-/is replaced by {code _} -=is replaced by {code -}